Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3132312e302f32342d3235203d3e20323632313435.roa
File:                     3139302e3231312e3132312e302f32342d3235203d3e20323632313435.roa (raw, json)
Hash identifier:          CQU05zCWF0O+06CZ4Lbm4yDtoRqEY+gth43vmcFZ9q4=
Subject key identifier:   F6:CE:51:CA:F2:8F:E5:96:A1:14:39:3D:AA:7C:DF:F8:31:16:B7:C6
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       48EF0829D18BB4B5883CCEBCA7BD043CE2F76004
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3132312e302f32342d3235203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:08 +0000
ROA not before:           Tue 05 Mar 2024 17:42:08 +0000
ROA not after:            Tue 04 Mar 2025 17:47:08 +0000
asID:                     262145
IP address blocks:        190.211.121.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ef:08:29:d1:8b:b4:b5:88:3c:ce:bc:a7:bd:04:3c:e2:f7:60:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:08 2024 GMT
            Not After : Mar  4 17:47:08 2025 GMT
        Subject: CN=F6CE51CAF28FE596A114393DAA7CDFF83116B7C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:be:85:11:71:22:ad:0f:7a:01:e8:3f:8e:
                    92:df:cc:c6:61:6c:7a:bc:86:43:b9:e4:68:c8:3e:
                    a4:d9:06:80:64:77:32:bd:28:be:19:68:f9:6e:54:
                    0d:41:6f:04:50:3d:5e:a7:eb:39:0f:18:27:e9:55:
                    7d:50:4e:d7:b3:5b:e0:35:fa:ce:69:bf:e7:99:84:
                    2a:90:57:99:5b:00:c2:c5:88:a9:48:4e:a9:2d:09:
                    8c:c3:c7:a0:a7:d3:fb:ae:9a:57:77:34:85:f8:b6:
                    d2:79:31:a5:be:f5:bb:9d:71:6e:c9:3b:47:62:55:
                    5e:3b:35:fa:4d:a9:f5:e8:68:b3:f5:74:7b:77:1e:
                    6b:f0:48:6f:19:99:07:f1:f8:5f:19:fb:60:ed:ec:
                    15:10:d4:e9:5b:9f:14:ab:d8:e1:fd:94:3d:ed:20:
                    c5:86:26:64:b5:5d:2c:e3:21:d9:01:bc:a2:6d:46:
                    04:9e:4d:03:4e:db:3e:11:40:d0:75:4b:76:58:76:
                    b9:56:28:98:da:09:00:76:5a:1a:f6:d8:ed:8a:33:
                    83:ac:dc:5a:de:42:2e:1f:5e:b4:6c:ad:32:1f:5e:
                    0f:c2:e2:ed:f9:d7:57:fe:5e:82:d1:b2:02:3c:25:
                    d1:f6:38:9b:e6:79:40:13:2b:38:02:92:46:05:2c:
                    bd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CE:51:CA:F2:8F:E5:96:A1:14:39:3D:AA:7C:DF:F8:31:16:B7:C6
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3132312e302f32342d3235203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:5f:a7:44:5c:a0:f7:2c:04:26:40:0a:fe:db:d6:51:b9:6b:
         fb:8f:3e:1b:bf:36:f1:ab:59:bb:88:c2:f9:6d:f8:b3:9e:82:
         19:ca:2c:a1:1e:ae:f5:41:38:4b:ec:f9:57:8d:e3:2c:8f:a6:
         37:aa:bd:37:ea:f2:7a:74:ac:77:9f:ce:a5:42:ea:18:50:23:
         2a:c7:12:c2:2c:f9:50:9c:37:7d:bb:3f:2f:fd:19:07:d2:45:
         25:e1:88:66:32:d5:b5:ba:56:3b:9b:e2:35:17:78:fe:5a:a2:
         ad:c6:e0:34:fe:8a:6e:ab:ca:c3:12:25:b8:37:e5:23:5b:6e:
         99:fd:b9:0e:06:74:4f:2e:d0:7b:a4:93:64:c8:8c:e5:64:8b:
         a1:44:47:7f:a0:ed:49:ab:90:c6:b2:fe:fc:36:73:ef:9c:11:
         9b:66:37:a6:f8:46:4c:4a:e5:37:f0:00:16:0d:ec:f6:60:6e:
         78:ad:f9:5b:4d:25:89:55:51:42:aa:02:15:35:eb:2c:f3:18:
         18:c0:72:0a:90:04:cd:bd:25:0b:e7:a1:4b:d1:3c:a8:c2:df:
         86:06:ec:7d:bd:03:a7:ce:b9:c2:8c:a6:64:a6:09:dc:13:3f:
         eb:67:ae:77:74:ee:6c:4c:ad:44:ca:f8:a5:1e:51:f1:24:38:
         e1:e4:e8:d4
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUSO8IKdGLtLWIPM68p70EPOL3YAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc5MDBENUFCRjQ3NjE1MTEyN0U1OTdGMjhGM0IxNEU2
MUFGQjg0QzAeFw0yNDAzMDUxNzQyMDhaFw0yNTAzMDQxNzQ3MDhaMDMxMTAvBgNV
BAMTKEY2Q0U1MUNBRjI4RkU1OTZBMTE0MzkzREFBN0NERkY4MzExNkI3QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNb6FEXEirQ96Aeg/jpLfzMZh
bHq8hkO55GjIPqTZBoBkdzK9KL4ZaPluVA1BbwRQPV6n6zkPGCfpVX1QTtezW+A1
+s5pv+eZhCqQV5lbAMLFiKlITqktCYzDx6Cn0/uumld3NIX4ttJ5MaW+9budcW7J
O0diVV47NfpNqfXoaLP1dHt3HmvwSG8ZmQfx+F8Z+2Dt7BUQ1OlbnxSr2OH9lD3t
IMWGJmS1XSzjIdkBvKJtRgSeTQNO2z4RQNB1S3ZYdrlWKJjaCQB2Whr22O2KM4Os
3FreQi4fXrRsrTIfXg/C4u3511f+XoLRsgI8JdH2OJvmeUATKzgCkkYFLL3bAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU9s5RyvKP5ZahFDk9qnzf+DEWt8YwHwYDVR0j
BBgwFoAU55ANWr9HYVESfll/KPOxTmGvuEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NjI1MUY4NDkzQUZGQUZFRkIzRDFDN0MyMEQyRjkyMjY3
RjgzOEVGRTZBQjc1QjMwMjA3QTE3MEIxQUYyNjA5LzAvRTc5MDBENUFCRjQ3NjE1
MTEyN0U1OTdGMjhGM0IxNEU2MUFGQjg0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzkwMEQ1QUJGNDc2MTUxMTI3
RTU5N0YyOEYzQjE0RTYxQUZCODRDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzYyNTFGODQ5M0FGRkFGRUZCM0QxQzdDMjBEMkY5MjI2N0Y4MzhFRkU2
QUI3NUIzMDIwN0ExNzBCMUFGMjYwOS8wLzMxMzkzMDJlMzIzMTMxMmUzMTMyMzEy
ZTMwMmYzMjM0MmQzMjM1MjAzZDNlMjAzMjM2MzIzMTM0MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
03kwDQYJKoZIhvcNAQELBQADggEBAChfp0RcoPcsBCZACv7b1lG5a/uPPhu/NvGr
WbuIwvlt+LOeghnKLKEervVBOEvs+VeN4yyPpjeqvTfq8np0rHefzqVC6hhQIyrH
EsIs+VCcN327Py/9GQfSRSXhiGYy1bW6Vjub4jUXeP5aoq3G4DT+im6rysMSJbg3
5SNbbpn9uQ4GdE8u0Hukk2TIjOVki6FER3+g7UmrkMay/vw2c++cEZtmN6b4RkxK
5TfwABYN7PZgbnit+VtNJYlVUUKqAhU16yzzGBjAcgqQBM29JQvnoUvRPKjC34YG
7H29A6fOucKMpmSmCdwTP+tnrnd07mxMrUTK+KUeUfEkOOHk6NQ=
-----END CERTIFICATE-----
Generated at Sat May 11 07:49:49 2024 by rpki-client on console-ams.rpki-client.org