Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e39362e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3234322e39362e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          W1ZR2d9azwOI8zGFQuDa1pqsQGAgmKv8Zv+WUjqo3f0=
Subject key identifier:   5F:D2:6D:2E:8D:C6:7E:C6:29:B0:1B:E4:2D:48:07:F2:37:31:E8:6B
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       2327CB1BB3A0F5E2B11BE3F87BC3C07BF7DE9632
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e39362e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:22 +0000
ROA not before:           Tue 05 Mar 2024 18:09:22 +0000
ROA not after:            Tue 04 Mar 2025 18:14:22 +0000
asID:                     262191
IP address blocks:        190.242.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:27:cb:1b:b3:a0:f5:e2:b1:1b:e3:f8:7b:c3:c0:7b:f7:de:96:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:22 2024 GMT
            Not After : Mar  4 18:14:22 2025 GMT
        Subject: CN=5FD26D2E8DC67EC629B01BE42D4807F23731E86B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:e7:31:f5:da:78:b6:f1:35:6e:5e:a9:6e:
                    56:01:6d:1b:8b:7f:79:25:54:3e:22:4f:39:c8:33:
                    1e:b7:ac:49:a5:92:e6:92:4b:59:8a:a9:2c:d9:ee:
                    24:f1:a1:f4:88:bf:9a:fa:56:5f:5d:1d:5b:f0:71:
                    2e:75:c7:64:e8:f6:40:de:40:10:97:51:be:22:c0:
                    ed:0f:43:b8:40:22:2d:4a:da:2a:31:f2:66:a8:84:
                    72:3a:f0:98:43:60:b3:b0:aa:bf:6e:2a:94:db:d8:
                    0b:5d:a8:6a:d3:6e:27:ad:1a:3b:cb:1b:ec:cc:42:
                    51:8c:42:96:7f:e2:0a:23:da:66:6f:9f:d8:a7:9c:
                    1d:c6:b7:05:ea:eb:c2:0f:ae:34:c2:5b:0e:1b:cd:
                    ce:96:5a:56:1b:10:18:7a:8a:25:5d:5e:2e:69:bb:
                    1b:8b:f3:f4:10:3f:ce:bb:57:d8:84:2a:02:1e:6f:
                    07:ec:e4:0b:1f:4e:25:0c:91:dd:2e:f8:16:f7:36:
                    b9:3f:ee:84:49:a1:bd:f6:c6:89:76:0f:82:63:c8:
                    22:59:a3:05:4e:98:b6:4a:95:2a:88:c2:c6:e8:46:
                    96:01:b2:b9:11:03:79:35:fa:41:6b:59:50:84:1d:
                    ab:65:33:b7:3a:cc:7a:23:aa:bf:f8:fa:fc:02:4a:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D2:6D:2E:8D:C6:7E:C6:29:B0:1B:E4:2D:48:07:F2:37:31:E8:6B
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e39362e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:d6:91:f7:85:88:5a:77:e9:7c:03:56:91:d8:0b:80:2b:49:
         3e:b8:b7:15:9e:a4:46:a4:9f:46:c2:cd:7a:1d:28:93:89:ca:
         fb:3c:4e:f5:2c:6e:db:be:6b:18:18:54:31:0f:51:8b:74:97:
         12:ec:c4:b4:5a:00:fd:9c:f9:76:4b:23:e1:39:5c:c3:9c:66:
         4e:a0:f7:5b:a5:7e:eb:7a:41:10:ad:47:49:3d:ac:91:1f:13:
         af:a7:6c:0a:fc:89:dc:4d:44:f3:9a:a0:a9:6a:fe:25:b9:01:
         24:09:e5:ef:16:45:15:f8:57:54:2e:35:7b:c4:7b:56:87:89:
         58:95:ea:3b:72:fe:3f:21:d3:31:09:05:de:a7:63:e7:bd:cd:
         80:c1:6c:4f:82:66:b6:0b:4e:d1:b5:9d:a4:38:4b:48:c7:d9:
         df:c3:c8:35:66:60:57:18:1f:b3:46:58:44:c8:66:50:37:e3:
         8c:1a:7a:81:2f:a3:60:2c:32:a7:f8:35:a1:ad:e6:60:a4:79:
         b1:c3:3a:9b:c2:5f:f1:a3:ac:d2:c0:ac:fd:38:35:a3:2c:7b:
         3a:a3:50:a1:02:3d:e2:ff:0f:d1:e7:22:84:8b:4e:bf:82:00:
         47:d4:55:b1:53:f4:fb:05:2e:1c:18:3e:80:87:60:c8:7e:59:
         6b:49:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:07:39 2024 by rpki-client on console-fra.rpki-client.org