Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e36382e302f32332d3234203d3e203236343236.roa
File:                     3139302e3234322e36382e302f32332d3234203d3e203236343236.roa (raw, json)
Hash identifier:          D7g5/8NOYDdexoDqF5/Tmb856G5k74tWTkDtUCiw8aI=
Subject key identifier:   F3:B2:FF:E2:78:FB:92:6B:6B:FF:91:A6:81:7F:6B:35:28:05:DE:0F
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       6A40D26987C0E754F593E5ECCF2852E5AC23A3E3
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e36382e302f32332d3234203d3e203236343236.roa
Signing time:             Tue 05 Mar 2024 18:14:21 +0000
ROA not before:           Tue 05 Mar 2024 18:09:21 +0000
ROA not after:            Tue 04 Mar 2025 18:14:21 +0000
asID:                     26426
IP address blocks:        190.242.68.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:40:d2:69:87:c0:e7:54:f5:93:e5:ec:cf:28:52:e5:ac:23:a3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:21 2024 GMT
            Not After : Mar  4 18:14:21 2025 GMT
        Subject: CN=F3B2FFE278FB926B6BFF91A6817F6B352805DE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:ba:b3:45:1d:36:d7:40:0b:3f:2f:cf:8d:
                    eb:0a:e9:74:aa:75:96:64:fb:ad:b5:07:e2:1e:5b:
                    4f:4b:00:ca:24:8b:ba:26:27:8d:39:bc:af:4a:8e:
                    f7:5b:73:38:0c:82:c8:9f:02:bf:b9:79:ab:58:89:
                    66:d6:5d:49:1d:54:26:a5:8a:11:52:54:1a:91:a5:
                    2f:b9:f0:e5:2d:76:88:02:7e:b7:0a:d4:4c:7e:2f:
                    d4:bc:b8:b0:cf:60:e1:63:06:fb:89:76:19:bf:11:
                    2b:6e:36:cf:9e:ab:8e:79:18:ea:17:c3:c6:39:e6:
                    a3:15:0a:0a:59:fc:38:0d:4a:69:e5:e7:db:5c:e5:
                    3a:f3:b4:35:65:f8:c1:74:c9:29:86:2f:e4:65:f7:
                    60:ed:e7:d0:95:05:49:cb:ce:2b:1d:29:4a:45:7b:
                    03:8b:90:0f:ca:cd:ec:2b:8e:cb:dc:8e:94:5e:8d:
                    5a:d5:0d:66:ed:87:08:36:5a:b1:a6:37:a9:19:e9:
                    67:06:b2:c4:16:4d:72:ae:62:01:06:49:32:82:ca:
                    a5:0e:66:45:ff:e4:f3:de:b1:6f:5b:af:f5:1e:af:
                    6a:fb:5a:1a:99:2a:9c:50:dc:8a:7b:6f:0b:f7:32:
                    77:3f:12:83:16:65:86:6c:f9:5a:d4:ef:97:70:5a:
                    c5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B2:FF:E2:78:FB:92:6B:6B:FF:91:A6:81:7F:6B:35:28:05:DE:0F
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e36382e302f32332d3234203d3e203236343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:99:19:f7:e6:2e:d7:19:cd:be:98:f5:44:a4:25:f0:ce:08:
         9d:a6:a9:be:9b:9f:75:c9:8b:ec:ab:fa:0a:00:46:09:e3:30:
         99:fb:b6:18:c7:0b:3e:8e:08:9a:30:a1:f7:58:e2:29:9c:d9:
         5b:89:d0:50:dc:8f:98:23:f6:4e:01:e6:e1:6b:4b:25:b6:ff:
         cf:44:52:6e:1b:8a:86:b3:50:73:1d:2e:fe:64:dd:25:4d:ae:
         02:1e:23:3e:ad:30:13:4b:94:8b:5d:60:96:8a:cf:21:a8:40:
         5b:0c:a2:e5:f9:cf:4c:d0:9f:12:38:54:7e:f3:e3:6f:48:c7:
         37:d1:47:c7:6b:0c:c3:b8:f2:99:7f:3d:bd:a5:e1:fd:9d:3d:
         98:4e:ee:08:d7:80:4d:ab:35:e2:76:e2:19:94:c2:68:7a:cc:
         5b:5a:3a:f4:75:5b:7e:f7:15:0c:04:2b:64:3a:52:4c:c6:c7:
         a2:aa:69:46:62:92:a8:c7:ef:64:65:26:f2:7b:22:f7:89:2f:
         fd:e1:c1:54:4e:a3:1c:39:c6:17:98:d2:fd:d9:3d:85:87:8b:
         c6:34:61:40:64:ca:7c:45:1a:a2:cb:8b:9a:ef:eb:34:0c:27:
         44:45:5b:04:f3:3f:36:cb:f8:8e:3e:31:ff:6d:e5:cb:f9:da:
         32:c3:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org