Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e382e302f32342d3234203d3e203236343236.roa
File:                     3139302e3234322e382e302f32342d3234203d3e203236343236.roa (raw, json)
Hash identifier:          T06x8WbgpMbzlQy9p87/OtfcigHPjv6Yx42t62KACYo=
Subject key identifier:   0B:19:13:73:59:1F:9D:61:3C:A0:2C:CA:30:6E:84:C3:DE:19:AD:6D
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       763DC20311CD29C3E1C47BCA012FB5642EFE9AE5
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e382e302f32342d3234203d3e203236343236.roa
Signing time:             Tue 05 Mar 2024 18:14:38 +0000
ROA not before:           Tue 05 Mar 2024 18:09:38 +0000
ROA not after:            Tue 04 Mar 2025 18:14:38 +0000
asID:                     26426
IP address blocks:        190.242.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3d:c2:03:11:cd:29:c3:e1:c4:7b:ca:01:2f:b5:64:2e:fe:9a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:38 2024 GMT
            Not After : Mar  4 18:14:38 2025 GMT
        Subject: CN=0B191373591F9D613CA02CCA306E84C3DE19AD6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6f:ae:96:ae:dd:b2:3a:61:bb:2e:bf:ca:08:
                    10:ba:de:f0:e1:d7:d4:53:81:08:63:5e:5e:3c:9b:
                    9e:b8:4f:5c:2f:ff:7a:bd:06:c5:79:64:f0:a3:fb:
                    f5:c2:13:5d:cb:6e:fa:1e:d0:82:bf:ca:a6:6c:dd:
                    77:75:ce:76:9e:5e:15:22:62:df:0d:3d:49:b3:bb:
                    46:f0:d1:6f:2b:50:7d:1a:f3:17:a1:97:94:92:19:
                    42:1f:b7:96:20:41:67:a1:b9:b4:ee:0a:ca:16:54:
                    a1:18:ab:82:fb:bb:2c:7c:5a:d9:da:8c:76:ca:69:
                    5a:cb:b3:54:1a:19:56:cb:6a:21:30:38:88:b8:ce:
                    30:8d:f6:d1:85:ca:8f:03:98:8b:23:65:03:cf:16:
                    fb:99:d3:cc:0c:1b:19:e6:58:94:4d:4e:1b:22:43:
                    68:be:47:62:81:77:8c:7b:cd:10:82:60:e7:11:ee:
                    e1:a1:6a:6b:fe:1a:e7:9e:56:5f:be:61:80:d7:15:
                    73:54:f6:8c:80:58:d5:60:58:f6:bf:cd:1a:b6:da:
                    cd:93:57:e2:9e:3c:62:a1:d5:01:88:36:f3:91:87:
                    9e:87:99:98:4e:25:ce:e8:1d:7e:48:96:a7:c4:85:
                    5b:f5:d6:29:0d:47:9f:d7:7f:e2:6c:91:df:9a:88:
                    ac:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:19:13:73:59:1F:9D:61:3C:A0:2C:CA:30:6E:84:C3:DE:19:AD:6D
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e382e302f32342d3234203d3e203236343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:81:12:15:2d:d2:f7:b9:e3:d7:c3:ad:ce:ab:b9:07:a6:f3:
         0d:88:26:36:41:cb:12:72:bb:91:85:c9:2c:9e:c0:4a:6f:8a:
         fc:ad:f7:86:16:23:8f:09:5e:23:ad:ed:18:90:2c:3d:d8:61:
         d0:24:b8:ed:23:f5:ef:ae:4a:2a:61:d3:b1:28:8e:17:28:d7:
         f1:2c:91:ee:7d:2f:02:29:f3:8e:53:e8:42:de:1b:1a:e3:cb:
         57:b4:ef:5c:c5:ee:98:30:10:80:17:80:57:24:73:d0:91:df:
         82:12:33:8e:c8:37:e1:6c:d6:5c:3b:ed:f9:ff:72:ad:6b:3a:
         40:7b:fc:b2:3c:f8:a2:8c:00:b9:c2:6f:1b:cd:5b:d1:ec:df:
         3e:2a:7d:b9:bd:36:7f:53:be:f5:ed:e9:de:7e:af:9e:b6:7a:
         66:08:9f:6c:4d:05:fb:0c:7d:28:69:76:f2:3c:21:16:3a:cb:
         93:9a:61:c7:7a:a6:f4:77:be:19:3f:4a:92:d1:d1:8b:5a:7c:
         c6:27:de:fd:d0:ab:65:fa:6e:1c:b5:a8:42:b0:4a:7e:84:81:
         90:e1:6e:89:37:dd:d7:1a:db:1f:2e:31:93:95:c5:9f:93:11:
         28:d1:30:2b:2f:af:9a:bc:47:3a:7a:e9:f7:e9:0e:6b:71:26:
         ea:6b:41:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org