Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e32302e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e32302e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          tOkFuIyvxAvWGVFfH+zr2beRI/pHpXkoNLK8YRcHyBw=
Subject key identifier:   9B:E9:9E:BF:4E:49:1F:D8:9F:2D:D6:74:07:62:89:D1:2B:BB:46:2C
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       7EE0B9B2C3357047954C81DDE5509A209D6293A6
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e32302e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:43 +0000
ROA not before:           Tue 05 Mar 2024 18:09:43 +0000
ROA not after:            Tue 04 Mar 2025 18:14:43 +0000
asID:                     23520
IP address blocks:        190.242.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e0:b9:b2:c3:35:70:47:95:4c:81:dd:e5:50:9a:20:9d:62:93:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:43 2024 GMT
            Not After : Mar  4 18:14:43 2025 GMT
        Subject: CN=9BE99EBF4E491FD89F2DD674076289D12BBB462C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e7:88:c6:f5:46:60:9b:4e:73:60:53:4a:f6:
                    58:0d:9f:ed:98:45:31:c8:75:ac:9b:af:58:e8:61:
                    48:09:21:a5:97:f2:a1:07:20:b6:f2:f1:d5:8b:7a:
                    4b:1e:e8:70:b9:ab:d8:0a:8c:60:09:51:b3:28:bd:
                    af:f7:89:87:24:a0:1e:61:1c:af:8c:3d:bc:7c:29:
                    fe:18:6c:89:f7:13:38:51:8f:8f:5a:44:07:b4:78:
                    34:e3:14:98:23:b3:84:45:19:9e:a3:92:6e:5b:86:
                    79:10:d2:28:7f:de:a4:98:b3:cd:2c:39:e1:15:74:
                    c1:d8:6e:13:9e:d6:fa:de:b7:0f:49:dd:6a:86:d8:
                    da:cb:10:31:d2:dc:d2:f7:5d:a7:10:f2:3d:d4:56:
                    dd:52:38:e9:f1:e5:3d:56:cd:bd:77:74:a6:48:f4:
                    af:3a:34:1c:62:49:78:9f:7c:ea:4f:d6:52:d9:79:
                    67:c1:9c:48:7c:f0:1a:60:37:31:6c:55:3c:7b:ed:
                    9c:14:06:d7:70:02:11:b8:00:81:8f:fb:6d:59:bb:
                    14:33:45:5d:71:bc:30:58:a9:22:fc:d1:ec:3a:d2:
                    1b:17:12:f8:f0:ce:65:9d:8d:f1:27:a2:20:7b:a0:
                    92:b4:8d:53:98:20:fa:7e:b9:77:d7:84:2e:09:5b:
                    70:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E9:9E:BF:4E:49:1F:D8:9F:2D:D6:74:07:62:89:D1:2B:BB:46:2C
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e32302e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:9f:a0:7e:fc:b3:83:ef:a3:3f:0c:24:c6:ca:74:0a:b9:e9:
         fd:93:43:f0:bf:95:5a:c5:df:86:d3:3d:a2:8a:d7:b3:b2:1c:
         7f:19:99:86:06:68:04:a3:d8:d1:88:35:03:2a:87:5f:81:74:
         a5:77:89:e3:fd:94:2a:b1:a3:01:1e:96:26:53:c9:34:02:cc:
         50:21:37:5c:6a:29:42:f2:1d:05:e5:e6:e0:63:f1:f8:fd:cd:
         4a:3a:e0:9d:69:67:2d:ca:01:c1:5c:36:ba:2f:9b:cc:cc:ae:
         3d:d2:15:9a:53:ec:be:c2:5e:ad:b5:d6:d5:78:91:2e:52:49:
         8c:0b:6d:22:49:92:90:5f:7a:e8:de:04:ba:17:ce:95:11:b4:
         2a:0b:56:2c:61:72:28:23:4f:d8:ac:d1:3a:2e:29:4a:1f:80:
         5b:c6:af:5d:42:6f:9e:0b:0b:6d:a3:eb:04:07:ef:10:e2:71:
         4e:3d:f2:05:e4:2d:c3:1b:2e:b2:88:74:f2:7c:55:14:db:1b:
         9e:ee:02:0e:dd:62:5e:ab:74:b5:ca:b3:ea:c5:52:ab:d6:9d:
         1e:6d:13:56:77:33:fc:93:79:68:02:a6:d5:9b:2e:ef:fb:3b:
         4c:03:31:db:4c:e1:27:20:37:ee:28:21:53:dc:25:b7:32:b2:
         a3:eb:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:16 2024 by rpki-client on console-fra.rpki-client.org