Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3130382e302f32342d3234203d3e20323632313435.roa
File:                     3139302e3231312e3130382e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          XLZyakWyo9ZkgZk5LQxpHXgW2MD43h6pmdlAHmg5Fwo=
Subject key identifier:   59:91:51:49:4E:23:B1:7F:F0:87:D0:FA:30:D4:92:09:00:67:5E:46
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       7C1A263164662FC1DBF940090FF3C784AF0228DA
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3130382e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:13 +0000
ROA not before:           Tue 05 Mar 2024 17:42:13 +0000
ROA not after:            Tue 04 Mar 2025 17:47:13 +0000
asID:                     262145
IP address blocks:        190.211.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1a:26:31:64:66:2f:c1:db:f9:40:09:0f:f3:c7:84:af:02:28:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:13 2024 GMT
            Not After : Mar  4 17:47:13 2025 GMT
        Subject: CN=599151494E23B17FF087D0FA30D4920900675E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:ad:9f:99:83:f3:da:3e:47:98:5f:8a:9a:
                    91:9d:fe:20:45:16:d0:08:00:1d:fd:43:c6:0d:ff:
                    32:a3:4a:26:ce:6c:ff:5c:92:2b:4e:02:a0:cc:b9:
                    35:a7:13:3d:1d:39:46:4d:8e:ab:0b:29:e1:0a:34:
                    39:fb:5f:71:62:37:db:15:d0:2a:37:76:6f:24:50:
                    52:b3:59:87:6b:72:70:fa:8c:db:c8:6c:db:b4:d6:
                    1c:0a:f5:63:d8:8c:be:45:20:7e:ca:f1:81:5e:65:
                    22:39:f1:b8:cc:e3:9d:6d:44:97:ae:4d:6f:77:a1:
                    82:9d:79:b4:82:7f:15:bf:41:a8:39:84:6f:21:a2:
                    2d:35:0d:6e:b2:ad:6d:da:1a:4d:06:73:64:5d:53:
                    e9:47:f9:66:05:dd:4c:bc:6a:a3:5f:e1:de:dd:d7:
                    c3:e6:d5:4b:89:f1:29:dd:83:21:ca:ef:36:3b:65:
                    ca:fd:78:fc:86:ce:16:d0:54:0d:5c:4e:b9:57:26:
                    95:fc:a1:33:71:93:f9:4a:b7:61:dd:39:d5:92:d0:
                    c3:02:ac:49:61:f2:db:0d:48:bc:eb:f2:64:5f:7b:
                    f0:3e:28:e2:59:7c:44:1e:9d:28:5e:a4:5d:1b:11:
                    66:5e:f5:4a:88:64:1b:97:dc:bf:39:0e:eb:b0:89:
                    37:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:91:51:49:4E:23:B1:7F:F0:87:D0:FA:30:D4:92:09:00:67:5E:46
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3130382e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:76:8a:41:b9:9d:c7:c3:a5:33:2c:ab:9c:a1:db:46:3e:
         e1:f4:7c:51:a7:94:ff:98:b0:42:13:62:55:f5:27:13:15:10:
         4f:f3:42:c4:ef:c4:14:47:49:91:7b:82:13:27:10:88:cc:b4:
         8d:69:5a:ed:30:27:e8:6d:56:de:cf:56:88:c0:3a:18:56:7e:
         7d:6a:b7:c3:17:9a:5e:77:2b:ed:f1:ab:e2:c2:5d:9c:f9:18:
         ad:94:19:e6:23:ad:ea:98:53:0b:db:df:24:b5:d3:6d:7a:81:
         d8:2c:8e:4b:af:0a:85:de:96:db:06:ca:9f:86:cb:09:9b:54:
         0d:2d:ac:b4:7b:86:c5:fe:f7:6f:45:29:74:8b:93:8d:40:d6:
         fd:77:76:1b:6d:ea:c4:f8:71:77:70:8b:5a:42:c5:22:fd:27:
         6a:33:e1:d1:d5:13:97:cf:fd:60:78:d2:2b:7d:db:c8:14:80:
         5c:5e:0d:0b:44:05:d8:fc:80:91:1b:c0:2f:60:49:c0:9f:20:
         10:2b:b3:7f:5f:38:c2:b5:2a:c6:ec:99:ba:16:8f:62:1f:7d:
         f6:3c:aa:48:ab:02:d4:45:fa:22:86:c2:74:09:4e:6d:c1:b0:
         ce:24:36:03:38:a2:69:95:ca:e7:ce:a1:ea:21:a0:43:7e:30:
         2e:12:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:02:22 2024 by rpki-client on console-fra.rpki-client.org