Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131372e302f32342d3235203d3e20323632313435.roa
File:                     3139302e3231312e3131372e302f32342d3235203d3e20323632313435.roa (raw, json)
Hash identifier:          aKWvLmB0UW/89HGJsxwEkHimYQmd7IjuiLyd9D4E6YY=
Subject key identifier:   4F:8F:46:A2:02:8F:A8:BF:A3:58:DE:B7:60:2C:19:C5:DD:3A:B3:AA
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       4C0BE009D4F3A798C417FD2E2C8B6E4791253B88
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131372e302f32342d3235203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:09 +0000
ROA not before:           Tue 05 Mar 2024 17:42:09 +0000
ROA not after:            Tue 04 Mar 2025 17:47:09 +0000
asID:                     262145
IP address blocks:        190.211.117.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0b:e0:09:d4:f3:a7:98:c4:17:fd:2e:2c:8b:6e:47:91:25:3b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:09 2024 GMT
            Not After : Mar  4 17:47:09 2025 GMT
        Subject: CN=4F8F46A2028FA8BFA358DEB7602C19C5DD3AB3AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:c0:06:c8:25:8d:b4:46:04:4c:72:ce:bc:
                    e4:59:cf:9a:ed:f8:b4:d7:b6:ce:89:bd:b6:bf:06:
                    6e:ce:da:b6:de:0f:2e:af:13:e0:53:b1:85:ba:73:
                    58:fc:3c:b4:64:de:d4:78:62:4c:94:a2:e3:d7:55:
                    b4:bf:e1:23:ec:fe:f0:af:0c:af:9e:66:7a:41:43:
                    e5:83:d2:9e:d7:4f:68:02:31:c7:0a:62:7e:76:3c:
                    25:7c:ff:be:82:fa:0e:bc:27:e6:9c:d8:23:80:2b:
                    3e:74:01:c5:17:83:29:cf:7c:fe:ef:f5:74:83:6b:
                    e8:4a:64:5a:81:13:a0:54:0b:66:1a:6d:90:48:6d:
                    b2:da:cb:4f:df:7a:25:72:04:f2:50:00:a0:ef:6c:
                    a7:73:85:66:a8:9f:b2:1a:cc:d2:c3:55:51:a0:92:
                    30:1d:11:94:f6:9a:85:56:11:fa:69:4e:7a:0b:10:
                    7b:9e:84:8e:b1:8d:ec:6a:ef:c7:e5:eb:b9:16:d5:
                    5d:81:16:53:82:00:42:45:ff:ca:1a:ea:b2:fa:1e:
                    ff:15:82:dc:71:f6:98:93:da:a3:e3:6e:62:9b:92:
                    85:e0:05:c5:f8:ed:ae:79:34:35:96:bf:08:27:94:
                    a5:b0:fb:54:9c:26:f3:29:f9:ee:d5:50:c9:43:ca:
                    b4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8F:46:A2:02:8F:A8:BF:A3:58:DE:B7:60:2C:19:C5:DD:3A:B3:AA
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131372e302f32342d3235203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:04:30:dd:db:5c:f1:7f:b7:eb:6b:85:91:ac:2e:44:29:c6:
         27:c4:7d:6b:eb:8c:cf:cd:67:a5:5d:f3:17:ed:cb:a6:a1:a2:
         ff:9e:8b:a0:aa:de:33:4c:ed:42:77:4d:5c:b4:a1:fa:ed:f8:
         0e:cc:90:77:2e:d5:a2:40:2d:dc:5c:0f:13:91:cb:1f:e1:32:
         4f:d0:c5:55:28:f4:c3:28:f3:ff:76:a7:f7:65:8b:4f:5b:49:
         f5:51:64:53:fe:0b:f6:77:4f:02:f0:bf:8f:51:8d:1a:d2:e0:
         ee:b4:2e:3e:b4:d3:11:6e:0a:3a:79:a7:50:a3:38:78:c3:c4:
         c1:b4:22:97:a8:ab:9a:a9:a8:89:aa:6d:37:79:be:f8:12:06:
         02:da:1f:78:a1:8e:2d:82:f8:1d:df:e6:e4:47:dd:8e:e9:04:
         12:44:d4:84:a2:08:cf:7b:b9:9d:55:f5:b7:45:69:2e:17:3b:
         c6:86:72:59:9e:cc:14:62:b7:4e:10:18:eb:60:7e:0b:50:bc:
         f0:aa:5c:86:ef:50:f8:7d:6a:4e:33:ee:a3:4a:74:7f:e1:f0:
         1b:7e:af:1a:32:ef:3f:3b:4d:33:4e:c3:6c:8d:d7:8d:8f:8e:
         23:68:d6:7b:ab:60:a4:71:88:af:99:e2:cb:5b:58:f2:96:79:
         ed:23:c8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 07:49:49 2024 by rpki-client on console-ams.rpki-client.org