Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28064.roa
File:                     AS28064.roa (raw, json)
Hash identifier:          KsLHizDDFCcLNqS7IS20gb3DhMIiexa39lY4MZsULcQ=
Subject key identifier:   48:7C:9C:3C:AF:E9:53:7A:11:6F:59:8A:2A:1F:95:ED:0C:62:A2:50
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       2553AA3976324BBDF3A45931AC01725ED7C1635A
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28064.roa
Signing time:             Tue 30 Jul 2024 17:10:00 +0000
ROA not before:           Tue 30 Jul 2024 17:05:00 +0000
ROA not after:            Tue 29 Jul 2025 17:10:00 +0000
asID:                     28064
IP address blocks:        190.242.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:53:aa:39:76:32:4b:bd:f3:a4:59:31:ac:01:72:5e:d7:c1:63:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jul 30 17:05:00 2024 GMT
            Not After : Jul 29 17:10:00 2025 GMT
        Subject: CN=487C9C3CAFE9537A116F598A2A1F95ED0C62A250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:7f:23:05:7e:87:d4:f0:3f:c5:08:5b:ba:
                    3a:9f:29:25:56:63:aa:f6:d9:3e:ca:c1:cd:c3:ff:
                    96:35:3a:fa:3a:b8:b8:d5:4c:88:06:26:e1:47:00:
                    42:4c:b3:58:0b:71:bf:01:d2:8d:c4:75:59:08:50:
                    1f:de:79:20:4b:c4:98:c4:76:ba:c1:1d:35:77:07:
                    b7:7a:91:4a:7a:f3:b5:d3:59:5d:b6:81:52:b2:97:
                    d3:42:72:93:23:a4:b2:7b:03:19:ca:c0:dc:88:17:
                    9e:b8:65:5f:82:79:7c:ce:26:99:4f:cf:88:8a:c5:
                    ca:dc:17:bd:57:ab:74:51:b5:35:f6:a8:89:94:7f:
                    f1:0f:31:15:96:76:13:57:10:21:36:5c:0c:b6:a6:
                    e8:c6:cf:c7:fa:59:b1:eb:55:1a:9b:52:e8:7f:1f:
                    1e:94:80:1b:14:f1:fe:a3:89:9f:bc:1a:eb:d6:1f:
                    41:df:0c:f9:83:73:dd:9b:bd:1d:68:ab:e4:50:ea:
                    d3:6f:1f:4f:f3:65:21:38:1c:5f:2f:27:b7:e1:53:
                    b7:9c:74:19:be:d4:5e:e9:6e:2f:94:19:11:7d:27:
                    fe:e7:20:62:76:66:bb:bb:c6:3a:96:7b:d3:f1:05:
                    7b:b3:46:d6:8f:35:24:25:2f:0c:3b:b3:16:77:4c:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7C:9C:3C:AF:E9:53:7A:11:6F:59:8A:2A:1F:95:ED:0C:62:A2:50
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28064.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:44:bb:2c:6a:9e:93:7c:db:b2:bd:84:d7:9e:c1:74:e9:c5:
         4b:67:4c:1d:15:8c:93:59:9e:34:1e:6e:ac:ad:6d:7c:ec:74:
         77:55:60:ae:02:75:19:25:2c:db:7f:31:ec:7d:e8:f1:1d:b9:
         91:47:8d:bc:c3:96:59:8b:94:e5:30:ad:d2:f1:15:5e:c5:06:
         fe:fe:ac:50:b2:19:0d:60:91:85:b9:13:7e:57:c1:71:2c:78:
         df:a8:61:e4:d2:95:6c:6a:99:ac:cb:13:2a:2e:a2:2b:4a:37:
         c7:c4:0c:97:ed:4d:d2:02:f3:62:d0:6c:1c:53:23:04:47:97:
         46:1d:cb:f9:4c:c2:af:5b:30:d4:41:bc:ef:c0:58:42:22:bc:
         69:8f:18:0e:d4:df:2f:b7:a4:af:d2:24:14:af:24:52:cc:6c:
         df:0e:70:e2:1b:b8:c2:8a:41:bb:d2:80:26:37:0f:57:21:56:
         a0:48:53:b9:77:14:8f:95:28:3a:0e:fb:62:ba:38:a2:60:ce:
         87:9f:83:14:d4:bc:4a:d2:0f:b6:cc:96:fa:e6:a4:61:c6:11:
         70:85:19:67:75:5e:a0:96:80:19:78:eb:d4:a1:6b:44:47:8b:
         c9:c9:06:85:60:14:c9:15:6e:89:90:37:e6:9f:25:9a:db:f5:
         ce:7c:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:48 2024 by rpki-client on console-ams.rpki-client.org