Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3130352e302f32342d3234203d3e20323632313435.roa
File:                     3139302e3231312e3130352e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          Y/emuOm1a0nn8sqtuM7E3E5gVvNEivSyB88UYO6GQpc=
Subject key identifier:   D9:45:8A:0B:22:3D:D3:CF:B3:8A:D0:E8:13:45:0E:1A:5F:82:82:C4
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       36D195B06D580DEF95ACC597684238052A224E14
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3130352e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:08 +0000
ROA not before:           Tue 05 Mar 2024 17:42:08 +0000
ROA not after:            Tue 04 Mar 2025 17:47:08 +0000
asID:                     262145
IP address blocks:        190.211.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d1:95:b0:6d:58:0d:ef:95:ac:c5:97:68:42:38:05:2a:22:4e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:08 2024 GMT
            Not After : Mar  4 17:47:08 2025 GMT
        Subject: CN=D9458A0B223DD3CFB38AD0E813450E1A5F8282C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:6c:84:a5:43:c6:d3:4e:45:c3:04:54:35:
                    25:3f:e6:07:e6:9c:2c:e9:8e:86:85:db:86:8f:8a:
                    90:f2:c8:5e:7e:4e:bc:15:73:fc:24:21:a7:88:1f:
                    7e:0a:ad:75:1c:82:36:6d:5a:26:29:ab:a4:50:ff:
                    4e:9b:3d:9b:c4:9c:8d:f2:78:95:b7:12:07:00:37:
                    cc:4e:10:76:dd:28:57:46:33:fc:f5:d7:34:6d:e7:
                    1c:f8:63:7f:ae:d4:c1:86:a6:68:0b:41:01:ed:a9:
                    13:9e:d7:9a:62:86:9a:fb:57:0d:90:88:e8:5a:a7:
                    87:d1:ab:4b:3d:7a:00:26:9c:e9:87:59:78:ea:7a:
                    37:52:b7:a7:e4:81:1e:3e:ce:72:8a:43:14:9b:7b:
                    51:50:2e:1b:3a:c6:5a:ae:d1:cc:52:51:3e:c0:0e:
                    f5:ce:39:a5:be:8b:51:c1:d1:52:83:79:b0:5b:80:
                    ec:7a:2c:78:09:3c:61:a8:ca:cb:c8:9d:3d:a3:5f:
                    37:e3:a7:00:32:af:7f:5f:74:5a:ef:32:40:41:e5:
                    1b:b0:47:94:f3:32:ba:8e:ff:70:eb:02:4c:0d:b5:
                    07:88:2f:df:aa:31:96:ec:9c:2b:b7:36:5f:fc:d5:
                    e6:5a:b5:03:b1:86:b8:9a:ac:71:f8:e0:ac:f4:37:
                    75:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:45:8A:0B:22:3D:D3:CF:B3:8A:D0:E8:13:45:0E:1A:5F:82:82:C4
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3130352e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:58:c3:b5:5e:cd:33:ed:26:79:31:79:f4:1b:de:92:96:b2:
         57:15:78:77:c8:51:e2:b2:38:fc:69:d5:17:2b:5a:b9:7c:e7:
         3b:61:75:a5:31:20:07:10:f0:74:54:b7:50:68:dd:07:1a:0f:
         86:66:ef:ba:68:79:61:a6:4e:0d:3d:a3:71:dd:3e:ca:64:c1:
         7f:fe:c0:8a:ab:51:f2:ac:7d:c5:9c:1e:57:63:63:91:c9:64:
         58:ce:fa:0d:71:e9:c9:33:91:8c:a0:36:68:5b:ac:f1:e0:5a:
         a9:c8:08:43:03:d0:ef:9d:f4:2f:74:d9:db:09:44:9b:1b:64:
         52:25:de:88:1a:2b:2e:9b:02:27:1e:08:60:be:1d:07:75:42:
         13:7e:1a:9d:33:be:f3:8c:e4:e9:0e:76:29:15:49:42:09:f0:
         6a:41:ae:b1:2b:25:dd:73:ad:b6:5c:ca:b1:87:c6:ba:3b:97:
         b5:1c:fc:2b:44:d6:41:5c:67:d4:c0:54:08:cc:22:9f:9d:c3:
         14:7e:e9:90:2d:38:3c:b4:f5:6a:79:17:ac:d7:7d:c8:79:86:
         ca:3d:f3:ef:73:0c:00:9f:89:a0:30:35:95:6f:c8:2d:21:67:
         0d:51:23:41:8d:f8:0c:5d:6e:b3:bf:db:f4:ef:9e:d7:e8:3d:
         e2:12:0b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:17:52 2024 by rpki-client on console-fra.rpki-client.org