Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3132372e302f32342d3234203d3e20323632313435.roa
File:                     3139302e3231312e3132372e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          s9yIafWOO8UgaRse08gzUOn2/JXgrAoXSfCq3AzbMnE=
Subject key identifier:   9F:B1:59:3B:E7:23:BC:52:36:84:84:F0:4C:0D:9B:D8:9C:9B:09:11
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       6EFFF45CFDD09F95E7C4F2156CC9E46DE7D788C5
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3132372e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:12 +0000
ROA not before:           Tue 05 Mar 2024 17:42:12 +0000
ROA not after:            Tue 04 Mar 2025 17:47:12 +0000
asID:                     262145
IP address blocks:        190.211.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ff:f4:5c:fd:d0:9f:95:e7:c4:f2:15:6c:c9:e4:6d:e7:d7:88:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:12 2024 GMT
            Not After : Mar  4 17:47:12 2025 GMT
        Subject: CN=9FB1593BE723BC52368484F04C0D9BD89C9B0911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:c3:29:b7:1d:17:70:06:ac:37:be:5d:98:
                    6f:d5:77:b1:5b:76:ab:2d:13:1f:92:d6:03:be:ad:
                    77:38:d2:19:52:95:f6:2b:9b:cd:ea:68:2a:1d:22:
                    82:e8:62:03:50:46:b7:e7:8e:70:47:6e:80:18:d7:
                    f3:e2:32:d5:a2:ca:f3:5a:ef:f7:7b:99:d8:50:a2:
                    ab:0e:ed:51:ec:2b:9f:d6:53:fc:51:5d:1a:92:c4:
                    37:8b:b0:01:b9:3c:6c:ae:74:16:e3:40:fa:fb:a3:
                    86:d9:0c:74:c5:9f:f1:a1:4e:c4:86:9f:ae:f6:40:
                    e5:98:0d:a5:37:03:2c:45:77:b9:47:e8:33:29:9d:
                    d0:39:71:93:7a:3c:21:76:e3:77:88:63:0a:ed:f8:
                    c8:46:93:91:4b:78:4c:9e:96:9c:8d:4e:f6:a9:8a:
                    12:7f:e8:eb:29:21:0b:ad:77:34:94:a3:82:4b:77:
                    0b:b2:f4:fe:b8:e2:df:db:3a:a2:06:3b:93:72:56:
                    12:0f:0d:e8:82:8e:b6:ab:bf:56:dd:2e:b8:a0:9d:
                    62:31:dc:b3:bd:68:f6:55:ab:6e:b5:55:7b:47:77:
                    fc:43:1a:34:55:7b:fb:00:79:9b:06:2e:79:f3:e2:
                    7b:ca:29:16:e5:09:ae:12:44:e0:93:ce:04:9f:bb:
                    04:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B1:59:3B:E7:23:BC:52:36:84:84:F0:4C:0D:9B:D8:9C:9B:09:11
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e3132372e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:4c:f0:46:76:3b:99:55:67:49:72:cd:69:96:53:00:48:
         bf:9c:73:e3:9a:55:8a:9b:2f:7e:7d:c2:5f:9a:71:9a:35:c7:
         29:8a:bd:b8:12:d9:9a:7a:7b:d2:e6:bf:2e:73:a3:08:d1:5d:
         df:3d:32:68:04:47:75:e1:39:85:66:0a:13:38:ac:cd:71:bc:
         36:af:17:99:3f:4f:5a:e4:24:bb:df:75:34:05:85:08:a9:23:
         a6:b9:14:ed:a6:24:e5:7c:90:d6:44:f4:22:a1:88:a9:e1:c7:
         52:6b:a9:38:41:8a:56:40:b3:d5:c6:22:f5:13:6e:1c:12:3a:
         78:c8:19:d4:ff:5e:3d:9c:01:6b:cb:60:7a:87:c9:8b:d5:d0:
         e0:bb:72:85:10:01:f9:80:27:59:d7:63:b6:83:0f:bb:4d:9e:
         30:4a:43:1c:b1:f5:c2:07:0c:b0:5a:61:a9:7e:e5:cc:58:c3:
         3d:75:5f:be:4e:df:8d:9f:ac:27:d1:b5:43:16:6d:92:ac:9b:
         ec:80:9c:78:c6:2e:4a:30:94:43:f0:ae:da:e7:64:2a:db:9d:
         da:83:7f:13:f5:34:15:37:4a:06:4a:a8:02:3e:7d:81:30:da:
         75:3a:cb:4e:b9:94:f0:54:1d:c3:c6:8e:38:bb:c8:aa:67:ec:
         a6:ee:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 07:49:49 2024 by rpki-client on console-ams.rpki-client.org