Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e302e302f31342d3234203d3e203231353735.roa
File:                     3138362e3136302e302e302f31342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          jJGyfPPnAUHIDy8f42fN5mScBdUxA0UsCpsH1iHE1Po=
Subject key identifier:   2A:2B:34:B1:3B:F7:59:43:63:61:2E:3A:E8:B7:72:53:DD:C0:7B:64
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       0DBB9418DBED39AAD58472C44FE20C067741BE81
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e302e302f31342d3234203d3e203231353735.roa
Signing time:             Tue 05 Mar 2024 17:56:50 +0000
ROA not before:           Tue 05 Mar 2024 17:51:50 +0000
ROA not after:            Tue 04 Mar 2025 17:56:50 +0000
asID:                     21575
IP address blocks:        186.160.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bb:94:18:db:ed:39:aa:d5:84:72:c4:4f:e2:0c:06:77:41:be:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:50 2024 GMT
            Not After : Mar  4 17:56:50 2025 GMT
        Subject: CN=2A2B34B13BF7594363612E3AE8B77253DDC07B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:41:ba:98:4b:d8:03:3c:60:31:cf:a8:fc:
                    ce:36:83:9d:31:86:31:8e:b4:a4:76:cc:82:f9:4b:
                    3b:45:cf:73:80:06:0f:7e:08:36:8f:9d:43:82:62:
                    09:9f:d1:54:35:c8:8d:a3:cf:3d:3f:5b:6e:78:c6:
                    96:4e:57:b5:95:6d:25:60:27:a6:ab:3b:d5:a7:ca:
                    55:a8:82:d8:de:f6:40:f7:11:14:69:e2:21:db:a6:
                    6d:ff:e4:b1:1a:66:31:a9:df:21:f4:70:52:97:c8:
                    64:ad:4b:c0:1d:af:0d:01:c3:06:d1:07:31:31:8e:
                    00:cc:52:f6:71:a3:fd:81:ed:3f:bd:37:04:c6:15:
                    f6:bb:6e:03:84:d8:7a:00:db:60:0a:ff:fc:cd:cd:
                    37:88:c9:79:6b:bd:18:b3:d2:c2:5e:a2:7f:5c:60:
                    ee:4a:42:c9:00:2f:a0:ab:ce:ec:66:dd:2b:58:ef:
                    8e:6d:57:e9:82:0c:69:ed:73:8d:9d:7d:ff:59:3b:
                    68:9b:c0:58:e4:ff:7f:73:ef:ed:a4:bf:23:f4:1e:
                    5f:86:e2:73:1f:5b:16:27:91:c7:7c:46:de:15:4c:
                    35:d0:b6:c6:74:c0:92:19:bc:ea:68:25:ab:8b:44:
                    2c:fb:4b:d1:86:61:1a:b0:c9:91:95:48:05:b2:4c:
                    54:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2B:34:B1:3B:F7:59:43:63:61:2E:3A:E8:B7:72:53:DD:C0:7B:64
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e302e302f31342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         6c:3d:0c:dc:e1:37:8c:27:9f:2a:1e:fa:0d:ec:84:f7:6d:aa:
         20:af:be:a0:a7:99:31:37:1c:fb:bd:50:dd:16:2b:2f:7f:8f:
         24:5e:54:e9:3c:c4:fe:56:34:81:02:50:93:37:df:b8:75:f6:
         f2:82:47:dd:8a:3a:d8:9e:b9:59:ca:7c:7d:90:19:d1:f1:d9:
         65:62:e5:ae:a6:83:9e:d8:46:84:ac:3f:11:cc:67:7c:63:74:
         ce:27:52:2b:98:67:c7:39:13:86:53:cd:53:ab:21:bc:fe:fd:
         b6:16:ea:ce:78:2d:66:66:c3:08:cd:fe:21:eb:53:a1:4f:db:
         0f:e4:e5:46:24:df:7b:7a:5c:46:b6:86:6b:86:0c:26:be:8a:
         b1:86:a6:c1:ce:7b:56:cd:3a:51:dc:4c:ff:04:22:d3:87:7c:
         58:8f:dd:fb:fd:73:bc:a5:78:b6:5a:91:1c:07:66:3d:79:f7:
         bf:b3:37:6e:60:e4:d5:17:e7:b7:e5:15:22:44:52:a8:8b:8d:
         a8:25:5f:ae:68:93:71:70:c5:b4:9e:8e:7e:f6:3d:9c:36:0e:
         0f:0d:50:2a:2c:8b:d2:9a:5a:e8:39:ff:b8:d6:d3:05:df:29:
         e4:f1:99:7b:15:63:8f:58:a0:26:b7:5a:40:68:c8:5c:e0:44:
         ff:68:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:03:10 2024 by rpki-client on console-fra.rpki-client.org