Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e34302e302f32332d3234203d3e203233353230.roa
File:                     3139302e3234322e34302e302f32332d3234203d3e203233353230.roa (raw, json)
Hash identifier:          XNJLRgWfkHz4VUMDXREe9SZ2k6c1DE1x5Enmc3niloY=
Subject key identifier:   94:EC:59:FF:21:F6:53:D7:A8:E6:EA:B6:3F:B6:91:6E:FB:B5:A4:AA
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       6AC6D4195197F1D2723A61356B7E5CC4405C8A42
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e34302e302f32332d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:46 +0000
ROA not before:           Tue 05 Mar 2024 18:09:46 +0000
ROA not after:            Tue 04 Mar 2025 18:14:46 +0000
asID:                     23520
IP address blocks:        190.242.40.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c6:d4:19:51:97:f1:d2:72:3a:61:35:6b:7e:5c:c4:40:5c:8a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:46 2024 GMT
            Not After : Mar  4 18:14:46 2025 GMT
        Subject: CN=94EC59FF21F653D7A8E6EAB63FB6916EFBB5A4AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:6d:d8:12:07:b0:6e:d7:21:fe:ac:1f:2e:
                    54:44:bb:aa:b0:be:14:75:c6:c0:d5:31:24:8c:b3:
                    8f:f2:d2:5d:7f:b1:62:0e:62:58:ac:6a:8a:44:df:
                    77:d2:eb:65:5c:ff:4d:fc:a4:6e:81:46:a0:a4:d5:
                    9b:04:f1:f2:e4:2d:d7:3c:6f:b7:b9:0d:c6:bd:a1:
                    24:2f:41:67:b7:2f:31:c1:64:01:0c:3b:26:7e:db:
                    3d:a6:17:8f:22:e4:a5:b9:7f:2e:e5:6f:56:67:2f:
                    af:a8:47:c0:a2:6a:56:e3:3b:99:57:9d:35:48:dc:
                    2a:02:d8:bf:da:14:1d:f3:4d:d4:6e:e6:cf:65:52:
                    bb:51:74:22:0d:40:2f:e8:f5:ee:39:ad:1f:97:fa:
                    cb:14:4c:5a:dc:4c:05:2f:be:b3:32:d3:3e:be:87:
                    bc:ec:26:52:0a:22:96:17:30:88:2f:ae:d4:3f:3b:
                    33:d4:2a:fe:73:96:91:5f:14:99:bc:f0:c0:30:0c:
                    0f:ab:2c:fe:aa:4a:00:6a:19:d3:a8:1f:59:97:98:
                    79:5b:d0:a0:58:a7:b8:94:a9:c6:47:5b:d8:9c:8f:
                    b6:80:05:dd:5c:7e:ed:dc:2b:2f:01:9a:86:ed:25:
                    ce:2c:1f:0f:14:fd:88:7e:91:ba:e0:ea:59:be:de:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EC:59:FF:21:F6:53:D7:A8:E6:EA:B6:3F:B6:91:6E:FB:B5:A4:AA
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e34302e302f32332d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:ea:0b:0f:3a:9c:9f:38:94:ee:f4:de:16:4c:44:e1:63:d2:
         12:83:51:82:c5:b6:c1:49:bd:7d:c6:b0:54:19:fd:07:e1:67:
         d9:2e:48:05:b7:32:e2:bc:d3:c8:a3:49:80:27:3a:39:12:fe:
         d7:f4:fb:0b:70:4c:b1:64:41:b5:cd:f1:83:15:1c:96:4a:f7:
         d1:6f:30:e4:8e:38:a7:26:01:2d:2f:69:d5:c6:d9:b8:d0:dd:
         98:93:1b:ba:8b:3a:9e:28:f1:ce:10:07:82:e0:9c:be:e2:8c:
         80:9f:ef:bf:b8:3d:1e:15:1c:e2:cd:be:94:a7:57:09:33:bc:
         8c:3f:5e:94:2c:f7:b0:a7:cc:e8:79:4d:87:5a:6d:3f:95:aa:
         2d:af:6e:a4:90:fa:fe:e7:3b:a0:56:0d:f3:ed:3e:49:43:9b:
         33:ae:99:f7:1b:d7:a7:78:45:de:e3:d4:93:45:9d:ee:63:c0:
         54:fd:9c:5c:de:d2:c8:ba:d6:1a:bc:c8:00:85:43:1b:2b:f1:
         bf:75:dd:3e:77:79:bf:58:2c:41:d6:83:eb:0b:18:a3:6e:c4:
         4d:8a:88:0c:cb:e5:86:dd:06:0d:ef:4e:9a:db:6a:c3:9a:d1:
         9c:88:17:25:de:40:67:06:73:a0:83:62:12:43:28:60:06:f2:
         21:8b:6c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:16 2024 by rpki-client on console-fra.rpki-client.org