Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138312e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e3138312e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          7dh/czGtF1yDaUvTsnyUVKp5fhLwu3mOGnYHitpjiAo=
Subject key identifier:   B9:57:59:A7:D3:18:81:CA:ED:47:BD:72:1A:81:C9:B5:9F:15:30:54
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       0700DBE49461ED103321E4249CD214C7E0C543B6
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138312e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:32 +0000
ROA not before:           Tue 05 Mar 2024 18:09:32 +0000
ROA not after:            Tue 04 Mar 2025 18:14:32 +0000
asID:                     23520
IP address blocks:        190.242.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:00:db:e4:94:61:ed:10:33:21:e4:24:9c:d2:14:c7:e0:c5:43:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:32 2024 GMT
            Not After : Mar  4 18:14:32 2025 GMT
        Subject: CN=B95759A7D31881CAED47BD721A81C9B59F153054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:a0:f3:56:0c:b3:32:cb:eb:0c:e7:e7:68:
                    74:41:61:70:87:70:28:4b:35:47:41:5f:03:17:4b:
                    e8:5b:1f:0e:23:19:91:eb:db:3c:bf:35:a7:29:f3:
                    a0:95:a1:16:2c:b1:4c:82:f9:0b:00:a0:b1:98:4b:
                    6d:ad:a6:f5:4f:44:d6:ca:c7:78:4d:b1:11:9b:d0:
                    a5:b7:00:1b:61:53:a9:42:7a:fb:c3:c3:04:0c:43:
                    33:10:2c:d6:c5:c8:ba:e4:06:cc:aa:16:15:c7:bf:
                    a1:5a:6b:ad:f5:d4:cb:a0:18:58:29:c9:2e:32:c1:
                    4c:fd:20:0e:f9:ad:29:3c:9e:bc:53:ac:8f:c6:ea:
                    b5:c5:f0:64:f3:6f:ee:ea:3e:41:19:aa:0d:8b:89:
                    36:db:74:3c:c3:a9:97:30:ab:cb:79:fe:94:e6:27:
                    23:95:cf:5e:0d:63:86:9e:4c:df:18:de:11:29:77:
                    a5:ae:5b:8d:e6:10:bf:92:55:40:5e:fd:a1:00:46:
                    10:cd:a6:e1:ce:ba:c4:3f:50:08:a4:e2:ee:e2:7f:
                    aa:e0:5a:24:f6:4d:c3:f6:0a:cf:3a:42:2e:96:79:
                    9e:07:d4:e8:5a:55:c9:aa:7e:24:7d:fa:9c:52:4b:
                    41:13:38:c3:48:6e:38:be:8e:67:51:2d:ff:0f:1e:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:57:59:A7:D3:18:81:CA:ED:47:BD:72:1A:81:C9:B5:9F:15:30:54
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138312e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:71:ba:5a:9d:7b:ea:d9:5c:05:3d:eb:0d:96:c5:1b:68:fb:
         0a:7e:3e:9e:1e:7e:aa:8e:bd:d4:62:14:44:cb:d6:13:46:4a:
         55:80:a9:8c:9b:d1:e0:0c:8d:5b:9d:6a:63:e6:25:8f:8a:14:
         5d:5f:a0:20:e8:aa:d9:5d:b9:63:be:02:7d:7c:13:c4:23:1c:
         d9:0c:d6:70:b9:a1:22:72:ca:0a:9b:08:e3:61:a0:56:d9:fa:
         db:24:20:6f:76:3d:f0:65:1a:9c:b7:c8:06:12:23:0b:02:f8:
         08:8a:d3:d8:5f:8c:7a:57:fa:25:f7:ac:00:25:52:5b:70:f1:
         44:76:22:ba:9a:4f:7a:68:ff:32:a0:0a:15:ba:43:ba:c2:a0:
         91:62:5d:58:bc:d3:b6:83:cb:6c:b6:94:81:5e:d3:a6:47:15:
         c5:55:e0:f8:cf:3e:f4:e4:a2:f5:e6:2b:fb:29:b0:1f:d1:d6:
         5a:21:19:3d:9f:08:e7:01:c7:bb:c1:6b:3e:21:11:aa:82:65:
         94:8f:e2:52:ec:d7:c6:a4:f7:73:07:ca:0a:03:d2:89:d3:a0:
         5f:53:bd:44:ca:63:a8:89:55:b6:54:a0:b5:52:ef:21:03:36:
         09:30:0b:c5:36:11:e6:78:88:bb:6f:75:c9:97:cd:71:3e:03:
         9e:99:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org