Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131342e302f32342d3234203d3e20323632313435.roa
File:                     3139302e3231312e3131342e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          vimcbyC3zRF8gmBdQQoBG65PQgIvnAZWzUuiAAX/45A=
Subject key identifier:   29:95:D2:AE:46:43:AB:99:40:35:F0:22:22:D6:FD:AA:F5:31:E0:B9
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       22E67A237047BC057080119D4FCC049AFC4FF2BC
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131342e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:08 +0000
ROA not before:           Tue 05 Mar 2024 17:42:08 +0000
ROA not after:            Tue 04 Mar 2025 17:47:08 +0000
asID:                     262145
IP address blocks:        190.211.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e6:7a:23:70:47:bc:05:70:80:11:9d:4f:cc:04:9a:fc:4f:f2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:08 2024 GMT
            Not After : Mar  4 17:47:08 2025 GMT
        Subject: CN=2995D2AE4643AB994035F02222D6FDAAF531E0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2c:6a:89:a6:10:ca:90:19:6f:c2:4f:41:2e:
                    1f:17:6f:9a:27:4b:19:28:8d:c7:b1:a5:88:6f:af:
                    8b:fe:d2:55:99:b4:1c:64:b1:93:dd:e1:4c:ac:e6:
                    2c:cb:78:ce:14:86:65:67:83:08:4d:97:35:b5:1f:
                    6a:a4:b9:1f:eb:e3:a0:b7:e2:89:d2:5c:bb:be:6a:
                    f7:65:f3:f6:c2:b6:3b:6e:5b:49:50:8d:07:13:be:
                    f8:24:bc:46:7d:a7:43:91:c2:db:3e:b2:16:7b:c3:
                    88:f1:84:18:66:92:3e:19:62:f2:75:a5:ec:7a:03:
                    36:fd:c8:0f:ff:2e:7e:5f:9d:47:f2:ac:36:22:c0:
                    da:94:15:15:3d:2d:ab:b8:89:45:25:bb:38:1f:e1:
                    55:4a:b7:03:a0:75:73:4a:0c:dd:ca:08:2c:ef:11:
                    a9:88:d9:c7:32:85:ad:22:66:26:14:b6:0c:18:3d:
                    00:dd:c7:fa:c3:bf:0a:7c:83:b9:4e:77:64:77:33:
                    fd:f7:14:dd:49:12:97:81:39:c6:13:25:11:cc:73:
                    23:a8:6f:ca:af:d1:17:af:f1:f1:c2:71:d0:51:e7:
                    4f:0a:58:b1:4f:cc:72:ea:3a:ff:cb:95:d1:b1:85:
                    7d:1b:1f:90:15:36:01:12:d8:48:f9:9b:f0:07:17:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:95:D2:AE:46:43:AB:99:40:35:F0:22:22:D6:FD:AA:F5:31:E0:B9
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131342e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:12:96:1b:9c:aa:46:58:91:df:ad:c4:71:dd:28:7d:a2:95:
         cc:84:81:65:1c:71:d0:4d:11:35:af:b1:ce:b7:3c:d4:eb:e3:
         1b:c6:cf:0e:9e:08:6d:44:5d:3c:55:9b:6d:23:ff:34:47:90:
         1c:96:09:23:4b:53:49:8c:86:fe:ad:2f:b5:e5:d6:99:8b:fe:
         bf:40:59:48:fd:58:e7:c6:73:4e:0f:b1:b8:02:a6:ba:1c:96:
         05:86:0c:d8:d2:b5:6a:42:ef:62:d5:fd:2d:93:e2:05:d8:63:
         7b:e5:1f:66:69:df:33:da:fe:95:fa:03:64:46:e5:07:52:a4:
         3f:d1:1d:e6:a6:44:46:7b:b7:48:57:28:12:6b:6a:6d:01:f8:
         3c:0b:0f:83:2d:eb:18:30:a6:0e:06:8b:ea:27:8e:f5:2e:8b:
         10:6c:4b:29:63:b8:fd:3a:e3:f2:3d:37:3a:b3:c0:82:6b:35:
         2b:d1:9d:e5:24:e2:0d:d6:cb:7b:a8:9b:f8:8e:c5:52:34:f0:
         14:25:72:1f:f3:0b:3a:e0:f7:44:9e:16:8b:33:37:d2:69:95:
         d8:d0:90:e9:ed:3f:b6:f3:f1:76:3c:63:bc:80:d6:17:b4:b0:
         af:29:9f:24:e4:07:57:51:2b:91:3a:08:d7:f9:bf:42:66:9c:
         02:85:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:02:22 2024 by rpki-client on console-fra.rpki-client.org