Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e37322e302f32312d3234203d3e203236363131.roa
File:                     3139302e3234322e37322e302f32312d3234203d3e203236363131.roa (raw, json)
Hash identifier:          luUh5flPNCvJ+RCyPSnlr7q8T34ywTSoenTE25I1Bgg=
Subject key identifier:   5D:22:4D:BB:98:8F:3B:CC:97:E1:B5:01:88:F9:8C:00:F9:65:B3:29
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       71320CFAB77235EAF2DEA45FDD7EE781F2014973
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e37322e302f32312d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:14:31 +0000
ROA not before:           Tue 05 Mar 2024 18:09:31 +0000
ROA not after:            Tue 04 Mar 2025 18:14:31 +0000
asID:                     26611
IP address blocks:        190.242.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:32:0c:fa:b7:72:35:ea:f2:de:a4:5f:dd:7e:e7:81:f2:01:49:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:31 2024 GMT
            Not After : Mar  4 18:14:31 2025 GMT
        Subject: CN=5D224DBB988F3BCC97E1B50188F98C00F965B329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:98:00:90:b7:ab:24:c1:b6:84:c1:ad:be:
                    12:21:f9:dd:f2:ac:c3:0d:dd:89:06:be:23:0d:0f:
                    23:2a:9c:cc:c9:29:db:d1:45:91:ff:2d:67:45:60:
                    72:9f:5c:6e:6e:47:e6:0f:62:61:cb:f4:25:30:3e:
                    4b:89:a6:8b:14:d9:fc:aa:2b:ce:45:fd:db:33:f7:
                    2e:8e:4e:e8:bb:e9:5e:bc:f1:bd:b8:12:b9:80:00:
                    19:ea:1b:a8:6e:e0:2c:9e:4a:21:a0:e0:c6:c5:6d:
                    72:1d:bd:ad:8d:eb:6a:f2:37:d4:25:d7:cd:16:3b:
                    e2:a6:6b:65:48:a0:ad:e5:73:89:3a:77:61:16:66:
                    13:01:9d:74:d1:d6:25:be:06:26:a5:79:72:ab:96:
                    5a:d0:de:ee:b1:03:6e:dd:d2:e3:25:0c:02:e0:3f:
                    1c:0e:86:a0:1b:bb:af:04:33:be:b5:21:7f:f2:c5:
                    85:a7:28:f5:c5:66:6d:7d:7b:f4:29:5d:9e:8a:c0:
                    b6:0e:e5:c6:b9:ca:49:f3:e0:1f:c3:43:53:05:8b:
                    5a:62:20:fe:f0:b9:59:83:05:bd:54:76:e2:71:b1:
                    f1:1a:4a:ef:b9:86:a0:7b:3d:80:9c:6e:ea:23:3f:
                    e8:fb:31:9b:03:c7:a2:6c:2e:12:e4:18:3f:27:bd:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:22:4D:BB:98:8F:3B:CC:97:E1:B5:01:88:F9:8C:00:F9:65:B3:29
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e37322e302f32312d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:86:e8:a2:9b:40:89:14:81:fb:40:ef:6f:d5:56:c7:25:58:
         be:c6:c8:38:a7:eb:46:3a:46:65:21:6c:ed:92:b0:6e:98:ae:
         7c:c4:22:5a:86:37:66:58:c4:cf:84:92:54:6d:15:73:8c:89:
         68:bb:1c:4e:22:4a:7a:78:ef:9e:a1:4f:4f:f3:3c:09:7d:67:
         01:50:cc:49:43:4d:c0:8a:2b:76:a4:60:e1:72:26:51:c0:71:
         0e:b6:f3:6d:b3:49:be:5c:3b:6d:73:26:ca:56:f4:5a:53:53:
         a4:07:ea:de:4e:4d:85:46:24:b8:4c:da:63:2c:5b:de:1b:4f:
         1f:92:bf:90:3c:84:36:b0:b0:82:fb:53:a3:07:06:b3:33:df:
         d6:64:88:79:9f:1c:ce:7e:1f:ac:f5:49:7f:b5:37:49:12:ca:
         c0:52:b9:51:23:de:fa:a1:b7:9e:17:e6:dd:8b:bb:8c:73:dd:
         aa:38:c0:d7:9d:31:ec:31:24:e3:30:30:bb:4a:80:96:4f:55:
         75:a4:ee:25:8a:69:37:cd:8a:1a:e6:ef:54:78:20:6d:a2:91:
         88:7d:f3:a4:f3:f1:5d:1b:44:51:9b:31:41:69:64:9c:b5:4c:
         b1:52:08:47:6c:c9:32:b3:10:da:08:3d:10:b6:58:75:cc:14:
         e0:13:a3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org