Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3136322e302f32342d3234203d3e20323632313939.roa
File:                     3139302e3234322e3136322e302f32342d3234203d3e20323632313939.roa (raw, json)
Hash identifier:          C87cJ0MM4WTpGUqd62im9mZDBFONC0GMe075taF3+nc=
Subject key identifier:   B9:DC:20:E6:7E:F9:68:67:31:76:88:95:0C:F6:50:D6:19:47:E1:F7
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       7FD1B164FBAD69068D5C26389FFEDB45539844D7
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3136322e302f32342d3234203d3e20323632313939.roa
Signing time:             Tue 05 Mar 2024 18:14:30 +0000
ROA not before:           Tue 05 Mar 2024 18:09:30 +0000
ROA not after:            Tue 04 Mar 2025 18:14:30 +0000
asID:                     262199
IP address blocks:        190.242.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d1:b1:64:fb:ad:69:06:8d:5c:26:38:9f:fe:db:45:53:98:44:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:30 2024 GMT
            Not After : Mar  4 18:14:30 2025 GMT
        Subject: CN=B9DC20E67EF96867317688950CF650D61947E1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:08:1f:28:92:14:e9:f0:78:20:38:fc:ee:43:
                    c1:7c:22:09:42:af:bf:bd:c6:18:a3:32:a4:42:d9:
                    34:88:36:bd:5b:83:38:56:0f:40:56:09:d3:1a:a0:
                    5c:a9:e7:7d:08:ef:c1:7e:54:01:29:85:26:71:30:
                    af:7b:08:27:c9:50:7f:cc:72:67:98:ae:77:ff:21:
                    71:46:86:7e:35:8c:33:ab:74:10:d0:5f:6e:1c:20:
                    ae:d0:50:f1:31:82:c9:d2:e1:15:78:d2:b3:d8:54:
                    6e:b5:35:9a:4f:eb:fe:f2:eb:a7:3f:14:77:81:cc:
                    a4:ab:92:5b:f3:5a:3f:25:b9:be:d2:03:74:28:55:
                    82:3a:0d:8b:da:40:f3:36:d4:d0:32:ad:ed:ad:55:
                    a0:af:58:4f:26:32:f0:95:53:c6:b4:3d:2e:8c:ce:
                    7f:8d:a1:f7:b2:d0:5e:7d:da:43:9e:c4:12:e9:8f:
                    88:39:d3:7a:31:07:d7:97:30:fc:ec:eb:2c:4e:8d:
                    96:29:38:72:31:14:3e:30:2c:8a:86:58:86:4b:f0:
                    46:4a:1c:d8:84:ff:8a:1c:b1:dc:92:8d:ce:b8:d0:
                    ac:40:b6:4b:10:bb:b1:18:fc:57:7c:ba:fe:d1:37:
                    72:b3:aa:5d:2d:f6:ff:b5:a1:40:d8:08:34:8f:d3:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DC:20:E6:7E:F9:68:67:31:76:88:95:0C:F6:50:D6:19:47:E1:F7
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3136322e302f32342d3234203d3e20323632313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:9f:3d:fa:ee:6b:94:df:e4:70:fa:4c:1f:ad:ca:46:cf:61:
         4b:4e:15:24:53:2b:59:d5:f7:aa:39:2d:85:0c:5b:24:89:d0:
         1d:a3:63:92:3b:55:97:35:5f:fd:f4:17:f4:ff:92:10:8f:03:
         c3:7e:d0:a3:78:2a:fb:bc:86:8f:34:0b:00:f5:b9:ea:b6:a2:
         3f:41:b4:b0:a0:5a:a7:65:37:50:52:af:fc:70:c0:a9:e4:2e:
         52:02:0a:cf:05:ba:d5:c4:ec:42:2d:a6:e5:68:fd:99:dc:49:
         c1:62:f4:51:40:f3:56:5c:09:3c:bd:64:45:72:52:4a:8e:66:
         a3:1a:4b:b4:7d:48:67:73:42:7e:2c:2f:0c:91:8f:47:7a:6e:
         76:77:36:fd:eb:41:7e:03:2a:81:9f:c9:93:c4:7d:03:90:c7:
         e6:d6:9d:a3:01:b3:d0:cc:da:f3:a5:36:5b:a6:1c:62:2e:9d:
         4a:c7:f7:09:d4:f1:43:0b:31:bc:81:63:32:0c:49:2b:6b:11:
         28:64:5d:34:03:09:80:87:77:3a:55:39:c6:4a:eb:52:a8:13:
         7b:3a:d5:b2:5c:96:8d:a6:24:39:98:a8:b1:77:e8:38:ff:ec:
         25:67:af:91:bc:5d:c6:52:01:68:1e:55:e9:0f:f0:81:e0:fd:
         bb:d8:b4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:16 2024 by rpki-client on console-fra.rpki-client.org