Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e36302e302f32322d3234203d3e20323632313931.roa
File:                     3139302e3234322e36302e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          SNvqPyZ4Zyrq3G4SLzOAjxlVbAxRahQs0L3zWQ70ngk=
Subject key identifier:   45:56:41:B2:5E:07:4C:6E:0E:02:92:13:72:5A:46:2E:85:D1:75:0D
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       50C4720F2CA058A9A7906D55A40EB75596C02D15
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e36302e302f32322d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:44 +0000
ROA not before:           Tue 05 Mar 2024 18:09:44 +0000
ROA not after:            Tue 04 Mar 2025 18:14:44 +0000
asID:                     262191
IP address blocks:        190.242.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c4:72:0f:2c:a0:58:a9:a7:90:6d:55:a4:0e:b7:55:96:c0:2d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:44 2024 GMT
            Not After : Mar  4 18:14:44 2025 GMT
        Subject: CN=455641B25E074C6E0E029213725A462E85D1750D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:4b:4a:c4:aa:a0:a0:e9:1e:c4:b8:ac:64:
                    85:c2:ef:f3:c7:ff:07:f3:64:dd:d1:a5:35:e0:32:
                    c5:af:67:2d:b2:47:d8:9b:b8:8c:28:0a:28:3c:ae:
                    22:39:82:39:b4:4b:e7:50:4b:6d:fd:25:88:aa:cf:
                    46:29:52:b7:c4:66:46:d6:fc:c5:ab:ce:2b:25:b0:
                    c6:f1:fd:2d:2e:cd:bb:3c:32:00:bd:e2:3c:d2:94:
                    0b:56:e5:e2:3c:47:6e:67:76:7a:6e:72:5e:07:4f:
                    3d:fd:7c:10:e0:9b:2d:42:0a:18:91:ac:60:3d:8b:
                    c9:2e:4c:96:4e:a4:95:3b:e8:8e:61:0e:f1:02:51:
                    6d:73:68:c6:25:03:cb:58:6e:4c:b4:ed:c5:07:dd:
                    4b:68:e7:48:5d:80:be:a8:1c:f4:e9:17:83:45:d1:
                    fb:dd:f4:ef:8b:60:6d:9c:f6:99:62:9d:d4:35:54:
                    05:ca:0f:d8:32:7b:67:5e:a5:3d:c1:0b:a0:6e:b4:
                    cd:aa:2b:ce:7a:92:7c:a2:bf:6c:21:04:68:f9:95:
                    c3:aa:a0:50:80:82:99:3f:01:c8:14:2c:91:d6:d7:
                    cd:85:7f:a5:8a:17:12:e4:5b:f0:db:0c:2b:4f:fc:
                    f4:a5:f2:7e:ed:91:2c:2e:0d:85:52:2f:62:25:ca:
                    8d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:56:41:B2:5E:07:4C:6E:0E:02:92:13:72:5A:46:2E:85:D1:75:0D
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e36302e302f32322d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:c8:1d:fd:11:18:27:12:ec:38:6f:be:6e:a2:a8:6c:c2:a1:
         a4:d5:b7:62:d4:72:c9:b5:d9:5b:01:53:92:b0:fe:03:e0:1b:
         29:c6:1d:00:81:e1:03:af:76:d3:a5:d7:d3:d5:c0:cb:6b:8b:
         82:fb:b5:6f:bd:66:22:21:dd:46:1e:85:3f:fa:bd:5c:41:f1:
         86:c7:92:37:53:f5:d8:22:66:66:46:1b:83:35:b9:34:69:82:
         f0:34:54:42:40:c9:6a:34:cc:71:12:cc:66:30:a5:77:eb:a2:
         b3:82:74:2f:d8:e6:82:46:2b:5f:b7:80:ed:c9:c0:e0:3e:a8:
         05:cf:fd:60:e7:07:0c:9e:33:41:90:d0:83:09:9b:84:23:3f:
         3e:0a:33:0a:05:3a:8c:ae:f9:a9:8f:2e:f9:ae:31:60:cd:de:
         68:18:3b:23:07:12:20:aa:44:a1:fd:5d:ee:99:99:e5:81:ec:
         83:8f:40:30:61:93:aa:f4:b2:a2:1a:14:dd:34:61:85:53:e8:
         c6:9c:22:81:04:7f:06:ce:45:89:ef:e5:42:b6:8e:9d:28:a8:
         2d:1e:98:4e:4a:d7:1a:11:f5:5b:85:a4:02:90:99:9e:12:32:
         6a:e1:ac:01:45:92:cf:b3:10:17:9e:95:19:35:23:36:a2:bf:
         a9:aa:22:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 22:01:47 2024 by rpki-client on console-ams.rpki-client.org