Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138342e302f32322d3234203d3e203532323836.roa
File:                     3139302e3234322e3138342e302f32322d3234203d3e203532323836.roa (raw, json)
Hash identifier:          SdYwzHHLYslL7YsS4T7KRjyg377N0uLrxy+dvTFa8Q0=
Subject key identifier:   44:D4:65:F2:87:CB:44:A5:76:66:74:83:DC:8D:2E:E2:CC:1E:52:E8
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       0D32BA45CA055E3177FDC90768402A5EB99CA92C
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138342e302f32322d3234203d3e203532323836.roa
Signing time:             Tue 05 Mar 2024 18:14:37 +0000
ROA not before:           Tue 05 Mar 2024 18:09:37 +0000
ROA not after:            Tue 04 Mar 2025 18:14:37 +0000
asID:                     52286
IP address blocks:        190.242.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:32:ba:45:ca:05:5e:31:77:fd:c9:07:68:40:2a:5e:b9:9c:a9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:37 2024 GMT
            Not After : Mar  4 18:14:37 2025 GMT
        Subject: CN=44D465F287CB44A576667483DC8D2EE2CC1E52E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:33:86:1e:aa:a2:7e:70:6d:a9:a2:ae:da:
                    38:e7:70:1c:5f:3f:0d:68:e2:7f:db:50:99:fa:c3:
                    93:c4:52:ed:e7:32:7a:c2:b1:28:d2:1b:e1:e6:ff:
                    f0:5c:39:3a:06:72:62:b5:8a:3e:c7:59:98:5b:95:
                    33:e3:03:13:01:c5:fb:d1:70:c9:24:08:6a:30:12:
                    b2:f2:79:f1:f2:0d:9b:dd:3a:bd:46:00:43:b0:56:
                    0f:12:5a:bb:41:4c:45:a4:22:2f:c8:9d:bc:2b:f2:
                    e2:79:2a:59:0f:b0:51:e1:40:ba:96:35:d4:f8:69:
                    94:8d:3e:4f:14:c0:89:97:5c:62:d4:40:8f:28:3e:
                    ef:d2:a8:c3:4f:93:38:71:05:fa:ee:7e:8d:d9:be:
                    87:78:a0:9c:b2:79:ba:05:54:50:1a:c3:a0:27:97:
                    ac:7e:60:b7:85:3f:34:92:fb:cc:f1:2f:77:0d:9f:
                    77:8d:02:db:1f:05:9e:e1:f1:d1:4a:03:09:cb:29:
                    8c:eb:56:8e:79:e6:98:33:41:e8:da:8f:70:9a:bd:
                    2f:9a:4e:37:8e:33:79:9a:c5:97:a7:41:cb:f9:2a:
                    32:d9:92:96:c9:11:67:cf:87:f0:e8:6a:8a:dd:db:
                    3d:9e:0c:eb:25:27:ce:c1:a3:1b:b5:8c:29:31:83:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D4:65:F2:87:CB:44:A5:76:66:74:83:DC:8D:2E:E2:CC:1E:52:E8
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138342e302f32322d3234203d3e203532323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:1e:bf:e3:0e:e4:c4:50:f1:ed:97:8b:10:40:6f:3e:f0:1a:
         ac:97:5b:99:87:ca:b4:ef:c5:77:fc:64:11:a6:1f:d8:12:96:
         c3:f7:92:99:bc:a9:64:ac:bb:94:25:6c:fa:78:1c:bc:e1:28:
         a3:65:ba:19:67:b5:ee:94:bf:c8:db:af:b9:71:fc:f7:e1:24:
         46:c1:70:c5:c4:53:6b:25:50:db:cb:52:ad:bc:e9:7f:b1:6d:
         80:39:65:94:8f:2e:14:5e:26:31:39:92:17:4b:be:7f:79:8d:
         a8:b0:eb:15:bb:b9:3c:9a:99:50:63:45:c8:67:8b:ab:e0:c6:
         db:9a:fd:79:fa:c1:65:f1:d7:67:ca:dd:79:88:20:ca:87:06:
         1f:9b:22:06:8d:68:23:d2:78:18:0f:ae:63:61:ee:74:99:ab:
         9d:17:d7:e6:14:87:0a:da:17:44:56:f6:d6:b8:a1:75:da:e3:
         17:e0:ff:6f:5b:ea:2e:f4:f5:bb:21:77:74:5f:b0:c9:f8:6d:
         99:82:c9:5c:a2:cb:99:55:e8:b5:1c:89:f8:b6:cb:d3:f4:6a:
         9a:20:98:40:03:f9:65:33:ae:f5:8a:3a:c8:dd:44:7e:21:64:
         da:30:e9:31:b3:4f:b3:bb:0a:3c:78:b7:c7:52:a6:81:2d:ae:
         ab:7b:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 14:43:28 2024 by rpki-client on console-ams.rpki-client.org