Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS26611.roa
File:                     AS26611.roa (raw, json)
Hash identifier:          o1BC9QolQ8MG4+2T2KvNbAs2eAu6T0fQJzGUa8AqNSI=
Subject key identifier:   B1:F3:07:F2:1A:9C:31:71:37:8C:8B:53:7F:57:17:AD:01:E2:8D:2A
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       5B299CC1DA6D89AE7CD2795FFF2FA99A6E3EB7D0
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS26611.roa
Signing time:             Tue 30 Jul 2024 17:10:01 +0000
ROA not before:           Tue 30 Jul 2024 17:05:01 +0000
ROA not after:            Tue 29 Jul 2025 17:10:01 +0000
asID:                     26611
IP address blocks:        190.242.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:29:9c:c1:da:6d:89:ae:7c:d2:79:5f:ff:2f:a9:9a:6e:3e:b7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jul 30 17:05:01 2024 GMT
            Not After : Jul 29 17:10:01 2025 GMT
        Subject: CN=B1F307F21A9C3171378C8B537F5717AD01E28D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:2b:a0:2f:9a:3f:e0:86:57:4a:21:2a:ce:
                    89:a4:12:e0:a4:c4:1d:1d:ed:91:e8:68:1d:3a:22:
                    18:a5:74:5b:23:52:0f:fe:d4:31:bd:ae:c2:a7:d6:
                    01:96:4a:97:d2:db:1f:57:6d:4c:ea:9d:aa:c2:c5:
                    c0:ac:7f:ba:98:a4:8e:54:cb:43:d7:6e:37:ae:f0:
                    5d:9c:42:ca:da:0e:91:42:28:e7:0f:6e:05:ea:f5:
                    48:5d:aa:33:5b:1f:90:39:32:e3:81:f1:8e:e0:ea:
                    4c:3f:e1:83:f3:8e:49:c5:d7:8d:ad:2c:58:7b:86:
                    84:5d:3a:eb:86:91:80:e8:c6:20:47:2a:72:21:5d:
                    da:c6:b8:7b:be:ab:ee:36:8a:de:ad:30:76:39:76:
                    25:7c:20:15:25:b9:22:a7:be:82:7b:32:d7:36:9b:
                    9c:a3:81:12:35:6b:25:e7:a8:25:32:98:c6:5b:68:
                    c8:79:91:40:2f:2d:a7:44:52:bf:51:ec:13:d8:09:
                    90:af:2f:a8:d9:0e:2a:e2:73:0a:5b:18:42:67:f4:
                    a9:1c:b1:05:91:7c:3f:e6:37:2d:38:ec:20:76:25:
                    9f:5c:44:a1:a6:a0:e1:13:b2:46:35:87:3b:38:c5:
                    4f:c2:9f:27:f8:b8:b8:4d:0c:c3:13:7c:59:40:87:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F3:07:F2:1A:9C:31:71:37:8C:8B:53:7F:57:17:AD:01:E2:8D:2A
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS26611.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:94:36:a3:38:1a:6a:2c:92:57:7e:a0:83:0b:2c:77:15:bb:
         68:b6:30:ee:8c:fe:b9:db:40:fe:3a:22:ae:ab:6d:78:2d:55:
         20:02:83:44:f5:2f:c4:76:26:e4:97:4e:9b:c0:ab:41:52:ee:
         9f:f0:b3:b4:dc:47:03:b5:9b:70:09:07:ea:90:ca:08:d8:2c:
         7e:aa:5b:94:29:86:aa:bf:91:70:d3:cf:cb:4a:e0:5a:f1:ef:
         bd:23:7c:ac:c4:16:f9:0a:f3:2a:74:52:e3:ee:a2:61:81:56:
         f3:31:b5:12:67:5b:6e:4b:37:a4:6e:2f:48:85:76:ae:cb:13:
         a0:1f:e7:7c:01:f1:a4:3b:c2:03:1d:f9:e0:c4:14:35:cd:d7:
         db:08:dc:0f:f5:16:d5:a0:92:2f:6e:dc:c4:fc:12:fa:2e:3a:
         62:a8:52:d3:6a:96:12:57:ad:e4:f5:01:f7:53:ab:8f:81:5f:
         27:39:ae:df:02:78:b3:73:31:d2:c5:88:4c:1c:e3:53:2b:8e:
         0c:b5:29:6b:10:73:ac:e5:d3:6f:69:d3:59:60:f6:50:06:e2:
         b9:a6:5d:91:f5:e3:e5:11:4d:95:5f:73:8f:e1:8f:15:b5:bc:
         65:f2:0d:65:64:fa:3c:8e:72:df:08:92:6d:b3:cb:66:9a:c3:
         8f:15:cd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:48 2024 by rpki-client on console-ams.rpki-client.org