Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e35372e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e35372e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          jaZOH+2zF/pl7w63e2YiEa+29j9hcJzl5LZWrPVNM2c=
Subject key identifier:   14:BD:65:DF:D9:7D:E5:D2:CF:25:D2:FB:84:CF:55:22:55:29:82:8C
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       73CCC7233B3F0720B7962C4E69F3864EC853319E
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e35372e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:46 +0000
ROA not before:           Tue 05 Mar 2024 18:09:46 +0000
ROA not after:            Tue 04 Mar 2025 18:14:46 +0000
asID:                     23520
IP address blocks:        190.242.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 14:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cc:c7:23:3b:3f:07:20:b7:96:2c:4e:69:f3:86:4e:c8:53:31:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:46 2024 GMT
            Not After : Mar  4 18:14:46 2025 GMT
        Subject: CN=14BD65DFD97DE5D2CF25D2FB84CF55225529828C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:2d:0f:46:c6:88:3c:9f:71:4f:43:1c:37:
                    0a:ad:5b:4c:6e:bf:bf:e2:c9:20:96:7c:98:5a:25:
                    19:64:59:f0:ca:c4:52:1d:b9:d3:ef:14:7c:9f:fb:
                    c9:ac:a2:8b:9e:60:17:3f:56:c5:16:b4:64:32:45:
                    f7:93:e0:bd:7b:68:70:fc:36:99:62:7f:c6:3b:c1:
                    87:2b:57:2c:1a:49:49:9d:31:6e:60:35:89:cf:70:
                    9e:cd:3e:12:28:34:fb:44:ac:1a:93:41:5b:71:80:
                    3d:f3:7f:25:14:68:bd:28:89:e4:32:e6:f4:0e:1b:
                    90:78:d6:ff:1c:9a:1f:17:0f:d6:d7:60:ce:96:89:
                    af:66:50:a0:e0:13:67:65:1c:76:5a:8c:a2:ea:42:
                    cd:70:20:cd:39:09:46:3c:05:3b:78:3d:32:ba:f1:
                    ff:e0:33:47:d5:ae:51:1b:86:99:34:1c:c9:f3:d7:
                    b0:59:4b:23:a9:62:ee:a3:9a:fb:59:1b:cb:3d:e2:
                    cd:07:f8:2a:e1:6b:41:10:db:66:3b:ca:f5:20:a1:
                    e1:20:d4:bb:41:28:e5:d0:12:94:f2:6c:92:cc:c0:
                    79:1f:52:ba:4d:15:81:24:1c:54:5e:45:8c:68:9d:
                    d1:91:f6:d2:c5:cb:27:15:ce:89:65:e6:e8:4a:14:
                    9f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BD:65:DF:D9:7D:E5:D2:CF:25:D2:FB:84:CF:55:22:55:29:82:8C
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e35372e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:a2:32:f3:4e:5f:bc:53:47:a5:31:28:52:3a:1b:bd:e2:1b:
         63:61:a8:74:1f:90:ac:ec:2f:01:cc:8b:ed:b2:b2:f1:e1:40:
         1a:93:6f:b1:21:68:fe:d4:c8:de:d7:8a:3a:28:c3:68:e0:45:
         a9:a7:07:fe:79:1c:92:1f:08:a8:f5:b0:50:07:08:13:f1:2b:
         ce:0b:36:c7:14:a4:5a:57:68:f9:5a:3e:c9:61:33:95:3c:40:
         87:f3:9e:44:df:0f:99:24:43:dc:fb:87:a4:28:7e:62:54:25:
         99:7b:f7:ef:ee:27:1c:74:46:13:20:32:42:ed:f2:5a:83:5e:
         05:71:14:5f:8b:87:66:22:c0:cb:5e:30:98:64:49:ef:a6:b6:
         e4:5f:cd:e4:b7:1f:f4:52:44:39:ce:6c:6d:69:f6:a6:34:2a:
         3b:fe:a7:39:94:c6:5a:4c:03:bd:13:40:16:8e:c5:d2:5a:6d:
         48:1e:81:a1:84:50:c4:56:ac:76:2f:68:c1:f6:dc:9e:82:21:
         61:db:0a:81:79:55:15:29:3a:23:23:df:46:10:39:40:b2:ab:
         1e:bf:a9:3e:5a:ca:68:a0:ca:a9:89:f6:7d:a1:91:47:84:21:
         ea:73:f9:30:92:c4:7d:68:92:ea:e2:ea:53:55:9a:97:e8:10:
         bd:a6:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:28:25 2024 by rpki-client on console-fra.rpki-client.org