Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131332e302f32342d3234203d3e20323632313435.roa
File:                     3139302e3231312e3131332e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          k7Qatts9YENSQu+KFoDPf+/6XGnS/ASI4uN/GWnxrbM=
Subject key identifier:   EE:67:49:89:D3:D9:E8:35:A9:9F:70:30:72:5F:E8:51:68:E6:DF:DB
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       7D3A5C41126715535369A520544081453743D3D2
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131332e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:18 +0000
ROA not before:           Tue 05 Mar 2024 17:42:18 +0000
ROA not after:            Tue 04 Mar 2025 17:47:18 +0000
asID:                     262145
IP address blocks:        190.211.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3a:5c:41:12:67:15:53:53:69:a5:20:54:40:81:45:37:43:d3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:18 2024 GMT
            Not After : Mar  4 17:47:18 2025 GMT
        Subject: CN=EE674989D3D9E835A99F7030725FE85168E6DFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:85:07:3d:d3:6b:0b:e3:04:4f:b7:ea:cc:63:
                    e9:98:f6:8b:5b:28:e6:52:e3:38:e9:6c:9e:23:76:
                    8e:79:1b:50:cc:c7:a5:52:33:79:d7:24:e5:94:47:
                    f0:2d:cd:eb:67:82:fe:fe:60:c3:71:53:4d:c9:24:
                    b7:0a:07:08:1c:38:b3:ae:f1:9b:99:f3:ee:8b:df:
                    33:32:cb:d2:23:38:9e:2e:94:a6:2c:af:36:36:9a:
                    01:a4:71:6b:8b:0f:cf:79:99:6b:3b:dd:da:7e:b7:
                    c1:9b:b2:bd:3a:f3:6f:a3:15:9d:ae:ef:ee:15:82:
                    60:91:49:bf:4a:2e:1a:7a:24:05:a8:e1:1d:cc:6b:
                    e3:cc:f9:d1:32:46:1c:34:00:4a:70:9f:e5:d8:27:
                    30:11:c9:9c:44:a1:da:20:0c:4d:dd:8a:4a:c1:51:
                    5b:e0:96:f8:7d:6f:53:4e:65:22:b8:a5:16:69:c9:
                    ab:12:4a:bf:97:0f:22:4b:4b:65:68:97:4f:d4:1c:
                    49:d0:b1:90:12:e3:80:6b:58:f9:7b:89:c2:f8:42:
                    fd:b0:4a:74:44:6c:7c:31:0c:0a:02:eb:03:f6:c9:
                    83:33:4b:6d:06:de:37:b1:fb:7a:e9:7f:ea:93:4b:
                    c1:8f:aa:4d:a7:ad:89:e1:7b:2c:2c:4f:6b:e4:33:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:67:49:89:D3:D9:E8:35:A9:9F:70:30:72:5F:E8:51:68:E6:DF:DB
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131332e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:10:10:58:e5:0f:45:9c:7a:32:ff:65:f7:50:70:67:d8:
         aa:32:ab:f8:0f:b1:31:58:13:3a:bf:30:74:c5:ce:a4:fb:70:
         94:28:ed:70:ca:c9:eb:5b:6c:e3:8a:6f:a1:45:6c:cc:c3:2f:
         a3:75:8f:38:c1:f8:49:7f:cc:a6:29:13:b7:96:9d:50:46:36:
         36:d5:ac:b8:c0:e4:f7:6f:9a:9e:0f:2a:2e:a6:5c:ab:89:9c:
         6d:77:79:2f:64:03:be:84:f3:58:e0:90:2c:fa:ce:54:2b:3c:
         a8:90:94:c9:b8:6f:25:11:24:be:d1:ef:dd:83:02:5c:01:8b:
         cb:79:ef:9c:fb:39:21:01:6e:7d:3f:42:e7:ec:c5:8e:5d:fc:
         00:16:03:34:63:87:81:4a:83:e2:45:d7:c6:c9:fe:d4:ca:25:
         2e:18:86:f9:01:3c:46:56:e5:c9:77:5d:fa:06:46:b3:e0:e2:
         d6:73:66:0d:65:d5:95:19:a5:ac:70:a6:f9:f5:75:94:5c:a7:
         28:04:ea:e5:ca:04:83:cc:29:20:de:c1:0c:f1:c5:57:36:cc:
         cb:e0:67:a8:74:70:cc:7b:b7:c1:e1:6e:cb:bd:53:c3:0a:f7:
         7c:55:70:95:fe:9c:88:9d:ce:0b:0b:53:92:f7:4f:c0:70:78:
         8f:2b:76:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:02:22 2024 by rpki-client on console-fra.rpki-client.org