Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e39362e302f32342d3234203d3e20323632313435.roa
File:                     3139302e3231312e39362e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          dXS2525LbTLWz+190RAJ3Od8aJ4iwfLEggpWTC47w2A=
Subject key identifier:   C4:1C:27:7F:47:19:D9:EE:A7:2F:43:83:D7:57:BF:09:74:D3:41:65
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       280ACD6057F9C2A28BAE3A77C77F157ED16ED583
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e39362e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:08 +0000
ROA not before:           Tue 05 Mar 2024 17:42:08 +0000
ROA not after:            Tue 04 Mar 2025 17:47:08 +0000
asID:                     262145
IP address blocks:        190.211.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0a:cd:60:57:f9:c2:a2:8b:ae:3a:77:c7:7f:15:7e:d1:6e:d5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:08 2024 GMT
            Not After : Mar  4 17:47:08 2025 GMT
        Subject: CN=C41C277F4719D9EEA72F4383D757BF0974D34165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a9:6b:b1:02:ba:5a:e8:30:ce:f5:da:b1:c0:
                    86:3d:43:50:49:e6:79:32:81:04:be:5e:26:31:a6:
                    e8:d3:12:d0:88:25:02:c3:71:05:a3:75:a4:d1:21:
                    b6:be:54:3c:de:ed:bf:d4:18:3a:bf:93:00:6b:25:
                    1a:02:f3:c4:92:1f:09:7e:03:02:64:c8:d3:a8:89:
                    f9:33:0c:e2:b6:b5:53:33:c0:bf:1e:e2:3c:8e:a7:
                    01:63:26:39:ae:d4:b1:ce:e5:b1:04:23:d4:6c:e7:
                    63:83:21:7f:b4:eb:67:f2:2d:3f:12:98:7c:8e:f1:
                    bf:33:9f:f2:fa:8c:f1:e1:56:b2:4f:5b:aa:1e:7c:
                    41:cb:40:65:19:f1:5f:2e:74:70:53:23:d7:9f:2c:
                    e6:e6:f1:b0:a5:bb:d7:e9:c3:8d:de:16:55:2a:1c:
                    d2:a6:ac:07:48:77:e5:e0:21:40:91:59:89:a0:c7:
                    8c:50:22:20:1d:ad:69:be:c4:0a:32:38:ec:a4:32:
                    59:de:1d:92:ed:8d:ab:56:66:b8:bb:01:eb:c4:dc:
                    bd:ed:2a:4a:15:9c:54:e0:0f:a7:cb:e8:c3:92:8a:
                    a1:1b:54:60:f6:40:2b:d7:37:f4:76:0a:22:dc:c5:
                    86:6b:53:77:a2:b1:d5:3d:d3:fd:e4:42:1c:30:86:
                    50:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1C:27:7F:47:19:D9:EE:A7:2F:43:83:D7:57:BF:09:74:D3:41:65
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e39362e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:f8:08:52:d5:0e:20:8d:65:cc:51:71:a5:0c:59:66:52:5d:
         54:e0:45:71:65:15:28:2f:47:96:a5:39:84:41:91:59:16:3a:
         31:e2:ab:5e:c5:cd:5d:ad:08:0e:04:21:cb:c7:5f:ef:33:0e:
         44:8b:1c:2c:3d:2a:3b:90:2e:5a:70:24:93:e2:b7:f0:e2:a7:
         9d:5c:07:06:7f:94:97:cb:ab:3c:58:3a:6e:2b:97:8f:98:93:
         6b:02:47:1c:23:ed:90:33:b3:f0:ca:87:0e:bb:d1:eb:fb:8a:
         f6:99:e4:4d:27:06:9a:96:26:61:a1:31:4b:30:33:ba:b0:99:
         46:0d:fd:2d:53:b1:f6:80:47:f7:14:57:71:b7:ef:b4:69:29:
         68:3a:1a:e3:88:cc:14:31:14:89:fd:0e:5a:13:be:81:62:f7:
         87:c0:45:68:62:11:83:3b:9a:24:5b:31:4a:c0:5f:bf:f7:be:
         75:5d:e3:99:33:bc:72:e1:3a:3e:88:a8:d6:2f:27:fe:f4:66:
         a5:b0:82:cc:db:98:30:05:73:20:81:da:b0:11:ce:7f:b9:28:
         2f:c8:7a:28:3d:b1:40:bb:52:1d:15:fc:06:ed:a5:38:5d:14:
         e4:36:84:99:20:d3:6d:36:29:bb:ab:cb:c6:4f:16:71:41:6f:
         34:9e:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:00:08 2024 by rpki-client on console-ams.rpki-client.org