Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e39392e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3234322e39392e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          NmbKx7Nr7tOzTPCm/DKUDm3j13329MBIEo0HXjN3rK0=
Subject key identifier:   C7:E1:EC:7F:36:4F:A4:6B:EF:90:73:47:EA:98:C3:7F:8C:21:47:89
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       1463CFDA396AFE0043CDBD4C4E1C29F13D0316E6
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e39392e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:31 +0000
ROA not before:           Tue 05 Mar 2024 18:09:31 +0000
ROA not after:            Tue 04 Mar 2025 18:14:31 +0000
asID:                     262191
IP address blocks:        190.242.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Jun 2024 18:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:63:cf:da:39:6a:fe:00:43:cd:bd:4c:4e:1c:29:f1:3d:03:16:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:31 2024 GMT
            Not After : Mar  4 18:14:31 2025 GMT
        Subject: CN=C7E1EC7F364FA46BEF907347EA98C37F8C214789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:03:a9:74:fb:92:d0:37:fd:dc:1e:f2:4e:4e:
                    26:c0:42:f5:55:82:21:cd:5a:5d:63:36:67:ef:b4:
                    09:5d:47:aa:73:91:88:37:7b:37:36:f0:48:8a:40:
                    0b:47:9b:10:c3:db:d7:f9:27:60:1d:0c:e9:e8:3d:
                    d0:7a:9a:d7:62:67:4f:6b:5d:0f:d6:c4:04:7d:f3:
                    8e:49:a0:39:6b:93:5a:3f:c4:44:ad:d8:a7:75:db:
                    62:92:72:f3:eb:3a:78:c4:9b:d0:58:1a:2c:6e:5d:
                    b2:67:54:60:45:86:40:ef:28:de:54:d4:4b:c5:43:
                    ce:82:f8:97:2a:40:33:7c:95:21:e2:82:09:e5:5a:
                    ba:40:00:74:0e:16:2f:14:d6:4c:9a:d6:d6:2a:d2:
                    e7:ef:7b:87:f4:5b:69:e5:ee:a7:e1:8f:bf:2c:83:
                    15:b3:45:34:b9:ad:fc:21:0f:b8:5d:99:3e:f2:d3:
                    e9:f1:7e:cc:ef:19:09:c8:8a:ab:95:a1:41:13:95:
                    92:ab:b7:aa:63:16:df:63:5f:84:39:d9:f9:71:57:
                    4e:5e:0f:4c:5a:22:18:91:d3:3c:52:3f:c3:22:e1:
                    4e:1c:c6:cb:15:20:e2:08:b4:b1:7d:b3:88:53:c3:
                    18:6f:68:60:26:76:ef:53:08:be:80:3c:28:63:c1:
                    9a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E1:EC:7F:36:4F:A4:6B:EF:90:73:47:EA:98:C3:7F:8C:21:47:89
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e39392e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:89:ce:36:ab:a1:78:e5:86:08:52:97:5a:fc:11:dd:58:72:
         aa:5a:20:f8:94:a0:c6:3c:0f:ec:5a:c6:9e:d3:bd:f7:67:01:
         2e:7c:06:b8:24:78:1d:1a:40:ae:c3:62:19:b5:70:a4:3f:48:
         f5:22:ea:f5:24:e7:bb:bb:c5:03:59:ac:36:04:92:41:9d:a3:
         5c:6f:e9:26:cc:6a:d0:3c:64:d9:45:37:0a:ca:2e:8e:46:20:
         96:88:b4:44:c9:78:c2:aa:69:2a:cb:97:49:91:4f:94:d2:26:
         7d:28:3e:8e:66:bd:9c:51:d2:1b:bd:d9:b8:ed:13:39:53:49:
         29:3f:3c:8d:41:70:af:5f:a7:47:60:1b:ff:35:a9:93:61:da:
         41:aa:f5:f9:1b:5b:e4:5b:f0:92:42:82:8b:5e:64:24:ef:21:
         6a:40:77:ed:af:d3:41:3b:fe:e0:df:68:d1:6e:fc:81:3f:14:
         db:b9:26:df:b3:ed:f6:d8:b9:55:24:cd:60:f3:06:9b:be:b1:
         60:3b:8b:82:b4:ab:aa:66:99:f9:c8:a7:63:3d:33:22:a6:e5:
         d7:6d:80:94:34:7b:e3:01:8d:b4:5a:9f:3f:74:3e:ee:2b:ee:
         96:9b:8b:bf:ce:4c:13:e0:20:d5:59:49:9a:91:d5:bf:1b:84:
         c4:b8:74:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:03:40 2024 by rpki-client on console-ams.rpki-client.org