Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131392e302f32342d3234203d3e20323632313435.roa
File:                     3139302e3231312e3131392e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          6YxJ+kSstStzVY+XMbdxLAdYHkbYYmIqOim5A9S0D5A=
Subject key identifier:   EB:DE:1E:D2:07:BC:C1:90:7C:E3:89:A3:05:C3:9A:39:ED:BC:E3:F5
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       01AD7077C08900E223A889999E975FE8229BB934
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131392e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:15 +0000
ROA not before:           Tue 05 Mar 2024 17:42:15 +0000
ROA not after:            Tue 04 Mar 2025 17:47:15 +0000
asID:                     262145
IP address blocks:        190.211.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ad:70:77:c0:89:00:e2:23:a8:89:99:9e:97:5f:e8:22:9b:b9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:15 2024 GMT
            Not After : Mar  4 17:47:15 2025 GMT
        Subject: CN=EBDE1ED207BCC1907CE389A305C39A39EDBCE3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:55:02:07:b9:fb:d4:77:8e:93:6f:34:0a:9a:
                    d2:91:05:e5:8e:c6:aa:10:fb:61:7f:20:74:b8:9a:
                    3a:ee:df:62:a5:ef:ed:e2:10:67:b5:8e:1e:f6:87:
                    a1:5c:48:e6:87:e4:b8:92:96:64:e9:15:00:27:ec:
                    af:ba:6f:48:f5:22:f8:c1:8b:2f:6f:18:ce:87:0d:
                    d3:f4:be:52:37:57:38:e4:e7:ec:ca:38:1a:ec:a7:
                    64:05:a3:0e:35:f7:d8:79:a5:38:fa:a6:7a:86:81:
                    30:f9:dd:c2:47:ff:a3:a9:29:a7:76:0e:4e:12:27:
                    56:38:04:0f:8d:3b:88:c1:7a:bf:5a:61:20:60:df:
                    32:68:5b:7a:7c:ea:ab:90:5e:31:ad:9a:c8:31:a9:
                    d3:34:b6:14:8e:98:c8:9b:1a:5b:87:ea:b8:4e:52:
                    f0:75:ef:ed:8e:74:8a:fe:bb:7e:89:6a:4c:44:a3:
                    e7:b9:47:ad:2d:ac:3c:bd:df:19:25:a4:ed:c1:c8:
                    43:4d:93:90:b9:10:b2:47:a6:b9:76:cb:b6:fb:8d:
                    eb:fe:59:1f:28:11:47:a1:e2:ff:b1:b7:0e:8e:c3:
                    c6:5a:c8:5d:ac:87:fa:07:19:43:57:c7:60:0f:1f:
                    fd:32:39:ed:95:1f:96:7f:cc:5e:c0:b1:1d:79:96:
                    4a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DE:1E:D2:07:BC:C1:90:7C:E3:89:A3:05:C3:9A:39:ED:BC:E3:F5
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3131392e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:08:92:5c:28:a5:b5:01:6c:6a:9b:c2:e6:4c:25:a2:1b:da:
         e7:e1:85:85:cc:ca:7b:74:d4:0e:a2:37:ce:fd:14:a2:58:12:
         94:e1:6b:7d:0e:43:c8:4f:ba:4e:ba:e6:a8:52:97:56:34:a3:
         84:9f:fb:d2:a4:36:ff:16:62:70:f7:13:cb:2e:11:a0:3a:a3:
         62:1b:76:14:b3:fb:14:88:be:0d:f3:b6:fc:50:4f:48:57:ea:
         ac:a1:fc:52:91:42:de:f5:ed:aa:65:5c:e4:de:3f:68:32:92:
         3c:49:1c:70:93:15:ba:b1:aa:af:06:cc:37:aa:59:db:e9:34:
         c5:5b:14:d7:2b:26:47:de:25:e7:10:de:0f:d5:b1:34:fe:d3:
         69:e8:1c:1f:ba:fa:e3:33:29:69:62:58:e4:b1:dd:fc:68:68:
         79:9c:37:2e:0f:11:1e:30:8f:4e:a4:83:25:67:e5:c5:1e:df:
         83:b1:1c:3c:bd:83:85:73:2c:0c:c7:82:26:07:26:69:31:0e:
         0f:48:c0:bc:71:7c:f6:56:56:de:0e:52:1d:37:37:ee:49:f4:
         f3:cc:e4:82:94:c9:8f:6b:aa:89:29:99:35:f7:78:f6:b1:ea:
         89:67:64:0d:a9:cf:99:50:c8:c4:71:30:f3:4b:07:f3:5b:1a:
         34:a5:3f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:00:07 2024 by rpki-client on console-ams.rpki-client.org