Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3136392e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e3136392e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          eqLbdR80wcevPe+dUZVd3AoB7nmfV6Z4nDixaDIjGQE=
Subject key identifier:   24:64:2E:56:50:86:39:21:48:94:D3:CB:05:BD:52:1C:B0:CB:C5:E8
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       6D899AA2E8786AB56306D2A7F2CBB44EB2E7A84B
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3136392e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:39 +0000
ROA not before:           Tue 05 Mar 2024 18:09:39 +0000
ROA not after:            Tue 04 Mar 2025 18:14:39 +0000
asID:                     23520
IP address blocks:        190.242.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 14:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:89:9a:a2:e8:78:6a:b5:63:06:d2:a7:f2:cb:b4:4e:b2:e7:a8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:39 2024 GMT
            Not After : Mar  4 18:14:39 2025 GMT
        Subject: CN=24642E56508639214894D3CB05BD521CB0CBC5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:94:67:45:92:82:5d:39:62:ad:49:82:6a:9a:
                    a8:49:6c:53:91:88:04:80:f0:50:f1:5b:2b:28:49:
                    8e:f6:7c:64:45:8a:2a:a5:ad:3a:ac:c0:1d:0f:6c:
                    a1:87:3a:e5:43:ee:7b:e8:41:1e:e0:de:82:89:a1:
                    62:56:dc:fe:f7:77:8c:aa:a9:3f:52:6e:2c:31:44:
                    28:4e:52:39:4b:2d:b9:66:18:c8:3b:98:a5:2a:e4:
                    0d:01:39:df:dd:b6:29:5e:88:07:7f:30:a2:4f:74:
                    0c:e8:d3:fe:b4:63:bd:e4:aa:d0:11:a2:44:cc:63:
                    db:12:77:77:c2:2c:98:48:79:99:da:a9:92:e9:7c:
                    ec:d4:d7:e7:e5:65:21:2e:0e:12:5d:97:fa:c2:dc:
                    a4:6c:22:a0:84:39:48:eb:41:3a:b9:a8:6f:5a:3f:
                    c4:27:bc:8c:a1:16:bd:f8:a3:48:62:2f:bd:00:9d:
                    b7:27:67:23:46:7e:e6:22:19:71:6c:f9:db:5f:36:
                    59:43:6e:ee:62:f7:9b:d1:60:6f:fe:f2:9f:03:97:
                    95:1b:83:8c:5f:6b:0b:50:d6:32:e4:2a:86:03:e1:
                    36:f1:1f:9f:12:bf:76:57:78:9d:64:33:d8:cd:2a:
                    44:c7:a4:99:dd:ce:98:f0:2e:fa:9d:f7:d4:9b:ff:
                    ba:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:64:2E:56:50:86:39:21:48:94:D3:CB:05:BD:52:1C:B0:CB:C5:E8
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3136392e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:24:1f:6e:dc:2b:ec:3e:33:9b:59:f0:e1:c6:6b:e2:f8:bc:
         7a:e8:95:b7:77:d8:4a:6d:1e:0d:c7:10:ca:35:da:37:e2:4b:
         0f:3d:6e:9b:5d:3e:f1:0d:4c:05:31:86:45:4f:4c:28:33:53:
         b9:33:0c:d2:63:e7:98:b7:0d:27:2e:cb:f0:53:f2:51:20:0e:
         cb:a7:9b:67:9a:f4:4a:04:33:55:c4:6f:5f:d5:2e:6d:d7:58:
         5d:71:37:e7:ec:57:6f:2e:25:af:7b:0c:10:de:fe:61:de:7c:
         22:34:00:b7:b0:ae:8d:2c:36:88:f6:f7:9d:fd:14:63:58:99:
         3d:dd:c2:dc:32:f7:b5:30:b6:41:95:22:b8:66:43:0c:e3:96:
         35:1a:32:3a:52:7f:1c:da:bb:64:2f:4b:b6:3a:7c:f0:e8:44:
         13:ab:83:9b:e2:21:92:09:ac:c9:2e:98:71:42:be:77:48:fb:
         94:aa:96:50:15:7a:37:cb:ed:d6:f5:6a:45:8e:4e:c6:da:0c:
         eb:b4:20:49:c9:9c:88:ba:dc:b3:e0:5e:24:0a:38:0c:be:68:
         1a:6f:fd:ae:51:84:43:ba:90:e7:00:7a:4e:c6:fe:c1:e5:1c:
         75:27:ea:2c:b1:dd:c0:78:92:b8:84:93:16:55:e1:2a:ed:93:
         be:a9:69:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:16:17 2024 by rpki-client on console-ams.rpki-client.org