Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131352e302f32342d3234203d3e20323632313435.roa
File:                     3139302e3231312e3131352e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          VCYnoGCnbc1+OWJy/27ktilcNaTFHuhzPTWA/Dvq60o=
Subject key identifier:   54:9C:9F:17:A6:85:89:02:13:97:54:C0:C2:CA:65:F1:E7:5C:46:21
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       252D724862245762B66FCCF6C213CBF0F187C0A0
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131352e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:17 +0000
ROA not before:           Tue 05 Mar 2024 17:42:17 +0000
ROA not after:            Tue 04 Mar 2025 17:47:17 +0000
asID:                     262145
IP address blocks:        190.211.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2d:72:48:62:24:57:62:b6:6f:cc:f6:c2:13:cb:f0:f1:87:c0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:17 2024 GMT
            Not After : Mar  4 17:47:17 2025 GMT
        Subject: CN=549C9F17A6858902139754C0C2CA65F1E75C4621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:c5:e6:14:ad:67:57:84:f4:71:62:3b:28:
                    21:b9:1e:d3:9a:3a:71:46:6f:ff:cf:59:c7:eb:cc:
                    b2:86:6a:2d:99:ae:52:cc:93:45:e7:03:61:36:f4:
                    07:78:df:92:b4:65:87:45:ea:64:b0:86:a1:04:aa:
                    3c:b9:ee:69:da:5a:2e:ca:34:f8:b4:05:79:a1:b8:
                    a6:24:68:e7:4e:e6:c4:f2:58:88:d5:49:6a:f3:67:
                    25:ad:ab:55:3d:15:13:51:b9:74:c5:29:a9:77:7a:
                    da:44:0d:c8:68:80:a5:fe:70:fa:59:ef:16:96:db:
                    18:d0:9c:de:66:00:47:4a:e0:54:b7:02:83:a6:d3:
                    1f:d2:e6:b8:e3:e6:d1:e0:b5:62:41:f9:12:35:bb:
                    e2:f1:1f:71:62:b7:6e:23:ae:60:7b:92:5b:83:03:
                    71:dc:6f:89:21:aa:1c:42:00:71:b2:9e:d4:d0:d0:
                    00:16:7c:2c:df:d3:89:07:9f:41:7a:5b:a2:68:3c:
                    32:5c:04:c4:86:cd:95:d3:70:45:d3:7d:c5:59:b1:
                    32:ae:40:d7:65:9a:f2:1c:15:a1:9e:7d:8a:2f:9f:
                    61:2c:5b:0d:4c:fb:69:55:db:ea:5e:32:e3:ca:fc:
                    00:a3:64:dd:3e:74:45:17:eb:4e:f8:4b:9e:ce:02:
                    f7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9C:9F:17:A6:85:89:02:13:97:54:C0:C2:CA:65:F1:E7:5C:46:21
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131352e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:01:64:6e:db:b9:6b:48:69:76:eb:14:d7:c4:26:be:08:24:
         2b:34:cf:1a:1d:42:3c:ba:ab:f5:96:f0:ea:ae:86:39:98:4e:
         b1:cf:95:99:d7:00:11:21:f3:98:6a:91:74:bd:c7:67:c8:39:
         cf:bf:0d:89:79:67:ae:8b:b6:ab:7d:8b:96:c7:99:bf:15:54:
         12:2a:e9:ff:58:f9:80:cb:b8:d2:80:a8:99:ef:23:35:10:a6:
         5c:e8:b1:a6:05:1b:fb:0b:3a:86:54:e6:89:fa:eb:af:6d:77:
         44:3e:d0:cb:8c:ab:a2:de:eb:b7:4a:68:30:d6:94:6b:a0:67:
         77:3f:a4:a8:8e:3c:d7:0d:76:29:ed:16:8a:16:57:81:b8:ec:
         fa:26:fa:32:f6:db:30:35:f6:20:ed:06:50:13:22:a5:7c:78:
         87:2d:d7:e8:d8:25:88:e3:10:30:c0:98:ef:5e:51:aa:d3:2b:
         15:0a:e9:88:73:c5:e6:2d:dd:34:79:8c:67:83:f9:c7:d5:34:
         be:64:fe:99:6d:7d:9c:3b:dc:b1:d2:fc:8c:3e:ae:05:d2:94:
         3e:d3:c7:15:1a:fb:ce:65:b1:e2:eb:e7:24:d9:66:72:8c:ea:
         3d:e4:cb:57:31:34:6a:25:8b:a6:27:f0:7e:c7:96:dc:5b:0b:
         a0:38:52:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 07:49:49 2024 by rpki-client on console-ams.rpki-client.org