Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3136302e302f32332d3234203d3e20323632313939.roa
File:                     3139302e3234322e3136302e302f32332d3234203d3e20323632313939.roa (raw, json)
Hash identifier:          EsISfuQOuIvjPZEhAKQff1lhJYrh6vbdEf5thSLKRnk=
Subject key identifier:   98:E5:97:E4:D4:22:C9:6F:50:F2:E7:5D:DA:41:21:96:C3:8E:91:E5
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       667C6A83D23598BD031E997F1B7188D4BBFBAEFA
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3136302e302f32332d3234203d3e20323632313939.roa
Signing time:             Tue 05 Mar 2024 18:14:25 +0000
ROA not before:           Tue 05 Mar 2024 18:09:25 +0000
ROA not after:            Tue 04 Mar 2025 18:14:25 +0000
asID:                     262199
IP address blocks:        190.242.160.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7c:6a:83:d2:35:98:bd:03:1e:99:7f:1b:71:88:d4:bb:fb:ae:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:25 2024 GMT
            Not After : Mar  4 18:14:25 2025 GMT
        Subject: CN=98E597E4D422C96F50F2E75DDA412196C38E91E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9c:2c:c0:89:73:89:59:88:33:b7:41:b4:6f:
                    14:ae:ef:c8:6f:c3:3e:98:88:c9:3a:98:4f:47:04:
                    1f:13:27:84:1e:fd:86:20:f5:08:59:74:d1:b7:e2:
                    76:04:db:64:00:8b:6b:e9:82:c1:85:ff:ad:e9:14:
                    26:73:fb:49:40:cf:1d:b7:c3:90:ea:1a:2f:20:be:
                    7b:7b:67:0b:08:f9:9f:3b:85:17:5d:7a:53:f6:06:
                    74:40:f3:3a:95:e0:16:ef:a9:70:a5:3b:a4:c5:23:
                    0d:32:51:e8:70:d7:1b:28:b2:bd:78:a4:9a:8c:d1:
                    e9:2d:77:53:52:75:90:fe:5f:c4:6b:8f:d5:40:bc:
                    25:a3:8b:d3:43:66:6a:e4:90:f1:02:aa:5e:34:5e:
                    70:34:27:1d:69:c4:a5:ce:5f:c1:a8:39:2a:4f:46:
                    95:ef:88:58:ad:56:fc:bc:31:9d:fa:8c:1c:60:f0:
                    af:36:7c:c9:5c:3a:a8:c1:86:b6:11:62:ac:57:0c:
                    ab:c7:86:c1:76:07:25:fe:b8:e0:4f:3c:09:22:ab:
                    23:36:35:26:4c:99:f3:e7:d8:d8:26:45:67:89:db:
                    54:10:45:01:62:1f:9d:b4:03:73:c0:31:d6:fc:82:
                    17:b9:49:e0:cb:32:9b:ce:e1:66:27:b3:c8:e2:8e:
                    0f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E5:97:E4:D4:22:C9:6F:50:F2:E7:5D:DA:41:21:96:C3:8E:91:E5
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3136302e302f32332d3234203d3e20323632313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:7a:83:01:e1:9d:b2:a5:99:51:1f:ac:4a:4e:a9:20:97:0f:
         06:53:04:8c:72:a7:d2:43:90:69:71:5a:93:d9:e0:97:3a:d0:
         ec:16:cc:36:ed:1a:46:0b:f6:02:97:32:26:c7:98:45:e2:56:
         4b:bb:36:0b:45:2f:b9:37:41:42:a8:75:0a:a7:65:71:0d:6a:
         fc:39:70:e6:7f:c3:4a:c1:e0:71:98:84:79:65:5a:81:7c:8a:
         f4:d1:9e:32:f3:6d:05:78:c2:c0:5b:29:e1:57:42:45:2d:dc:
         ef:20:97:3f:ba:42:42:51:b0:ce:e7:4f:7c:d7:7a:d0:b8:01:
         f0:6f:25:42:58:8a:ec:4f:6a:c3:25:7f:90:60:a3:62:0f:46:
         48:ff:0c:8f:5c:53:1f:b6:46:29:b2:fc:c3:3a:ea:5f:67:59:
         04:eb:f5:34:a4:00:5c:70:dd:8a:4e:1d:73:ba:3b:63:20:3b:
         a8:7d:8c:35:01:02:de:ae:d8:41:3e:33:f8:2b:4d:5e:f9:68:
         cc:d3:5b:12:0f:80:b7:4b:c7:ac:af:91:97:91:31:1d:18:0c:
         e5:56:83:e6:72:28:24:e7:1d:51:17:fb:dc:55:a8:82:cd:fb:
         7b:ce:a6:fe:de:98:dd:37:71:84:83:a0:46:b2:0f:7d:e2:d4:
         8f:ac:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org