Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e32312e302f32342d3234203d3e203236343236.roa
File:                     3139302e3234322e32312e302f32342d3234203d3e203236343236.roa (raw, json)
Hash identifier:          ARlAWJL+MxTyamR0kY/RoFMuO1G3nc+nEzSnGkERvZA=
Subject key identifier:   D4:8C:CA:08:4D:17:14:D5:89:AE:61:68:0A:C3:80:22:2C:A1:BA:D4
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       4FE096A4F97A6AFADBC38C6F0B411682CC80D7B3
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e32312e302f32342d3234203d3e203236343236.roa
Signing time:             Tue 05 Mar 2024 18:14:23 +0000
ROA not before:           Tue 05 Mar 2024 18:09:23 +0000
ROA not after:            Tue 04 Mar 2025 18:14:23 +0000
asID:                     26426
IP address blocks:        190.242.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e0:96:a4:f9:7a:6a:fa:db:c3:8c:6f:0b:41:16:82:cc:80:d7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:23 2024 GMT
            Not After : Mar  4 18:14:23 2025 GMT
        Subject: CN=D48CCA084D1714D589AE61680AC380222CA1BAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e0:31:1b:d7:e0:1b:b5:68:9d:20:f8:57:f5:
                    18:49:49:3f:43:3a:47:6d:cd:d4:01:f8:9b:6b:1b:
                    91:5c:80:c5:b2:c9:6a:f7:86:42:a3:43:39:43:5a:
                    30:bc:ba:a0:d9:1d:8d:6c:6e:b0:00:1d:c6:c0:1c:
                    e0:b3:51:fb:23:1e:c2:08:2a:48:ea:2d:fa:92:5e:
                    26:95:13:9a:70:dd:22:b2:d1:b3:7e:0c:5e:3b:c8:
                    f0:9a:c1:b6:16:99:24:72:d9:3e:3e:58:af:1d:59:
                    35:e7:31:71:72:9f:8c:c8:ca:35:2f:13:ce:3f:bf:
                    6d:e1:fc:99:f8:47:80:a3:ba:45:50:dd:df:8e:0f:
                    20:43:5a:72:0c:64:36:b8:e2:01:b6:dc:5e:38:8d:
                    0d:34:c2:52:cd:0e:d0:30:0f:49:59:b1:c4:fe:7f:
                    e9:7f:3b:51:09:13:2e:01:69:3a:5a:a8:75:38:80:
                    a0:9c:f3:13:8a:41:92:51:2e:d4:32:3d:ee:ca:f8:
                    39:bb:e9:64:d7:19:4b:a0:e9:8e:95:73:c9:d2:29:
                    21:56:ed:76:0c:a4:8b:f2:20:74:22:75:af:31:64:
                    b4:e9:41:f4:88:b9:5f:8e:d8:0c:7d:0f:65:cf:79:
                    67:26:ab:ca:72:65:3b:75:32:0f:33:da:bc:a3:59:
                    3e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8C:CA:08:4D:17:14:D5:89:AE:61:68:0A:C3:80:22:2C:A1:BA:D4
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e32312e302f32342d3234203d3e203236343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:a5:90:8b:ab:82:e2:a3:a6:5a:d1:79:8e:d3:f4:bf:dd:bd:
         d9:dc:21:a3:92:b2:5f:3d:e7:75:fc:e0:83:6b:60:41:bc:14:
         4e:e2:22:06:ae:40:9a:09:c8:04:5b:3c:bb:5c:79:68:c2:29:
         1d:57:97:c7:f7:9f:8e:8a:86:a3:19:cc:2d:41:c5:06:8c:02:
         15:4f:58:80:69:83:31:3d:fc:63:96:f6:08:d1:60:4b:b1:17:
         3d:10:98:07:57:fa:9e:41:b9:34:39:7e:38:ed:6a:bf:9b:28:
         08:9f:17:b1:f2:be:44:01:e7:8b:33:37:59:60:28:a4:5a:4c:
         fe:ef:df:8f:39:b9:58:3f:1a:ec:c3:9f:54:99:77:a1:a9:4f:
         d3:31:a3:50:f5:cc:71:bc:ef:f9:8e:41:bb:25:a9:ae:4b:c2:
         f5:37:6e:63:aa:7d:c8:04:9d:77:d0:b4:9b:a7:eb:32:ff:2b:
         40:45:50:85:df:2f:63:40:a4:7f:0b:12:fe:06:d5:4e:d1:3a:
         cd:ac:55:57:12:55:88:4c:e5:bc:0d:74:84:93:ba:8b:44:7e:
         03:08:09:c0:18:0e:af:f7:97:8e:f7:8c:e9:4f:a1:1f:8d:d5:
         54:e9:0a:d7:9f:8d:49:f4:76:bc:de:a2:01:27:19:37:b7:63:
         14:f6:5b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org