Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131322e302f32342d3234203d3e20323632313435.roa
File:                     3139302e3231312e3131322e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          0ixOS30tCe06ze0Z6rU8bpkIhYOGbkwRP9+pK8tArTw=
Subject key identifier:   31:98:90:B2:67:A1:10:A4:C2:84:54:66:21:AF:C2:57:39:98:DF:B0
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       74C7F4D29FB476563369808167F40D110B4078A0
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131322e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:07 +0000
ROA not before:           Tue 05 Mar 2024 17:42:07 +0000
ROA not after:            Tue 04 Mar 2025 17:47:07 +0000
asID:                     262145
IP address blocks:        190.211.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c7:f4:d2:9f:b4:76:56:33:69:80:81:67:f4:0d:11:0b:40:78:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:07 2024 GMT
            Not After : Mar  4 17:47:07 2025 GMT
        Subject: CN=319890B267A110A4C284546621AFC2573998DFB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:a4:46:26:90:8f:89:2e:9f:05:2b:3c:bf:
                    32:9a:cf:75:35:13:d3:fc:be:cd:6e:1d:7e:d2:5e:
                    f4:02:7d:3b:b0:2b:f2:c3:ea:19:86:b2:02:9c:c0:
                    ed:31:aa:43:f0:00:db:2f:a6:ca:82:00:0b:8c:f8:
                    61:16:6c:8d:44:b1:6c:c4:8b:50:e6:16:7d:a6:a4:
                    6a:08:99:b1:89:a6:22:e3:9c:01:53:49:a1:d8:0a:
                    96:ae:0d:0f:d9:6e:2c:1a:f3:ed:23:bf:bc:0f:9d:
                    14:1e:a5:e1:36:66:11:28:37:1e:26:83:f7:be:7b:
                    29:b8:78:c9:d4:7d:b1:43:50:53:eb:e5:7e:45:0c:
                    de:b3:57:4b:74:f9:dc:5a:90:88:6b:13:a1:b2:e7:
                    e3:e9:f8:e0:62:d1:1e:0d:ac:76:00:d1:8a:29:b2:
                    66:63:57:3e:19:5b:dc:74:85:c4:66:91:a0:ba:fc:
                    29:80:59:e2:17:69:51:1f:25:e8:f6:4d:ca:e2:d7:
                    2e:e9:b9:9c:c7:11:a5:c0:38:24:af:84:a9:17:ef:
                    21:e6:75:06:c2:37:3b:df:be:d1:5b:b4:64:6a:9e:
                    5b:92:65:f9:77:bb:39:39:14:a2:db:b6:14:d4:16:
                    95:fd:c9:1c:22:eb:31:53:a6:64:3e:de:36:36:21:
                    fc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:98:90:B2:67:A1:10:A4:C2:84:54:66:21:AF:C2:57:39:98:DF:B0
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131322e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:9d:b7:4e:a2:03:cf:91:51:08:e3:5f:d0:5e:2e:14:c5:c3:
         fc:bc:b1:97:cf:12:26:65:d0:4e:a8:68:6d:c1:b1:ce:3a:15:
         17:9b:24:c5:01:ac:ce:16:18:47:d0:4b:fd:74:62:45:de:75:
         f2:ea:bc:83:9e:ac:bb:ef:88:26:56:37:cf:f1:02:ee:61:19:
         4c:16:e9:46:ff:88:8f:b8:20:b9:0e:a1:b6:7f:7e:e7:11:0b:
         ff:f7:cc:4e:9a:73:4f:69:66:10:69:92:9d:60:eb:1e:11:e0:
         a1:a9:53:12:e9:58:e0:61:0e:98:07:d7:e2:b3:8b:b1:d2:d8:
         5d:1c:1e:2d:dd:81:a6:24:3a:fa:62:4c:7b:e2:16:39:c4:24:
         43:37:6a:fc:65:07:17:69:e7:73:fe:1a:05:1f:3b:de:d8:09:
         db:4c:cd:c8:d9:74:fb:7b:29:99:ad:23:5d:46:fd:85:30:43:
         ec:4f:89:ab:a0:cb:0f:a0:9c:d9:b8:0e:5a:9d:a9:ac:98:5e:
         f7:bc:fe:c4:59:f8:d2:6f:c9:b9:9f:1a:04:f3:d9:2d:ab:d0:
         00:b4:89:7a:77:a1:a0:79:ef:73:9e:af:7c:b7:33:02:ca:ec:
         b6:59:66:99:a1:57:fc:5f:03:4f:cf:20:89:3f:97:2b:9b:ed:
         81:0c:5b:48
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUdMf00p+0dlYzaYCBZ/QNEQtAeKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc5MDBENUFCRjQ3NjE1MTEyN0U1OTdGMjhGM0IxNEU2
MUFGQjg0QzAeFw0yNDAzMDUxNzQyMDdaFw0yNTAzMDQxNzQ3MDdaMDMxMTAvBgNV
BAMTKDMxOTg5MEIyNjdBMTEwQTRDMjg0NTQ2NjIxQUZDMjU3Mzk5OERGQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC56RGJpCPiS6fBSs8vzKaz3U1
E9P8vs1uHX7SXvQCfTuwK/LD6hmGsgKcwO0xqkPwANsvpsqCAAuM+GEWbI1EsWzE
i1DmFn2mpGoImbGJpiLjnAFTSaHYCpauDQ/Zbiwa8+0jv7wPnRQepeE2ZhEoNx4m
g/e+eym4eMnUfbFDUFPr5X5FDN6zV0t0+dxakIhrE6Gy5+Pp+OBi0R4NrHYA0Yop
smZjVz4ZW9x0hcRmkaC6/CmAWeIXaVEfJej2Tcri1y7puZzHEaXAOCSvhKkX7yHm
dQbCNzvfvtFbtGRqnluSZfl3uzk5FKLbthTUFpX9yRwi6zFTpmQ+3jY2IfxTAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUMZiQsmehEKTChFRmIa/CVzmY37AwHwYDVR0j
BBgwFoAU55ANWr9HYVESfll/KPOxTmGvuEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NjI1MUY4NDkzQUZGQUZFRkIzRDFDN0MyMEQyRjkyMjY3
RjgzOEVGRTZBQjc1QjMwMjA3QTE3MEIxQUYyNjA5LzAvRTc5MDBENUFCRjQ3NjE1
MTEyN0U1OTdGMjhGM0IxNEU2MUFGQjg0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzkwMEQ1QUJGNDc2MTUxMTI3
RTU5N0YyOEYzQjE0RTYxQUZCODRDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzYyNTFGODQ5M0FGRkFGRUZCM0QxQzdDMjBEMkY5MjI2N0Y4MzhFRkU2
QUI3NUIzMDIwN0ExNzBCMUFGMjYwOS8wLzMxMzkzMDJlMzIzMTMxMmUzMTMxMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM0MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
03AwDQYJKoZIhvcNAQELBQADggEBAGadt06iA8+RUQjjX9BeLhTFw/y8sZfPEiZl
0E6oaG3Bsc46FRebJMUBrM4WGEfQS/10YkXedfLqvIOerLvviCZWN8/xAu5hGUwW
6Ub/iI+4ILkOobZ/fucRC//3zE6ac09pZhBpkp1g6x4R4KGpUxLpWOBhDpgH1+Kz
i7HS2F0cHi3dgaYkOvpiTHviFjnEJEM3avxlBxdp53P+GgUfO97YCdtMzcjZdPt7
KZmtI11G/YUwQ+xPiaugyw+gnNm4DlqdqayYXve8/sRZ+NJvybmfGgTz2S2r0AC0
iXp3oaB573Oer3y3MwLK7LZZZpmhV/xfA0/PIIk/lyub7YEMW0g=
-----END CERTIFICATE-----
Generated at Sat May 11 07:49:49 2024 by rpki-client on console-ams.rpki-client.org