Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/3138362e312e3136302e302f31392d3234203d3e203237383337.roa
File:                     3138362e312e3136302e302f31392d3234203d3e203237383337.roa (raw, json)
Hash identifier:          9OizsUYs1A2D+ohFREe2O129yQOXBf7FwMd5CYjtXLA=
Subject key identifier:   68:EB:9E:EE:8A:B7:07:30:EA:62:B5:3D:4E:EA:CC:C3:D2:F4:B7:7C
Certificate issuer:       /CN=4C35789BFFFE0B4B4D1B262477AD44AA4723EE20
Certificate serial:       1C4770CCBE4815855F9A2D0119EAB6BB688897B8
Authority key identifier: 4C:35:78:9B:FF:FE:0B:4B:4D:1B:26:24:77:AD:44:AA:47:23:EE:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/3138362e312e3136302e302f31392d3234203d3e203237383337.roa
Signing time:             Tue 05 Mar 2024 17:54:10 +0000
ROA not before:           Tue 05 Mar 2024 17:49:10 +0000
ROA not after:            Tue 04 Mar 2025 17:54:10 +0000
asID:                     27837
IP address blocks:        186.1.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:47:70:cc:be:48:15:85:5f:9a:2d:01:19:ea:b6:bb:68:88:97:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C35789BFFFE0B4B4D1B262477AD44AA4723EE20
        Validity
            Not Before: Mar  5 17:49:10 2024 GMT
            Not After : Mar  4 17:54:10 2025 GMT
        Subject: CN=68EB9EEE8AB70730EA62B53D4EEACCC3D2F4B77C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:17:b7:71:29:c3:b3:e8:48:e3:47:2e:7a:bb:
                    56:00:34:00:6e:67:40:45:cf:05:79:68:56:1b:39:
                    b5:9c:32:03:be:2f:9f:7e:a4:41:ac:96:69:22:00:
                    73:36:a4:de:29:9d:c3:18:81:6b:25:f7:66:38:4f:
                    c4:7f:e2:63:fc:d9:cc:1a:e6:ce:f9:e4:c3:37:23:
                    b6:ba:a1:f9:68:45:d9:ca:50:b5:6e:86:c7:dc:d0:
                    c5:4f:ce:af:82:18:a0:92:9e:20:cc:a8:78:4c:d3:
                    4b:90:b5:71:c2:0a:eb:ff:0f:91:90:81:a6:ba:31:
                    59:57:db:a8:60:57:62:25:2d:7b:a2:19:a6:b4:54:
                    e1:64:64:e4:b8:41:c8:fa:ab:55:9d:34:84:69:10:
                    c4:6f:14:d3:00:ee:2b:40:ec:fc:df:1f:25:a0:cc:
                    46:a0:f5:21:df:21:c7:49:b5:d5:4b:0c:fd:98:88:
                    ce:fe:24:a6:9a:39:51:2f:3c:55:5d:eb:d0:42:03:
                    a3:1c:86:cd:fc:be:f2:4d:a5:db:aa:01:52:f4:73:
                    02:29:98:27:35:ff:76:b8:21:e4:27:55:6e:53:50:
                    4b:67:91:4b:5e:4a:13:d1:e4:0a:d7:81:28:53:3b:
                    6f:af:10:73:6e:67:46:cf:29:6e:73:10:2d:b4:7a:
                    97:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EB:9E:EE:8A:B7:07:30:EA:62:B5:3D:4E:EA:CC:C3:D2:F4:B7:7C
            X509v3 Authority Key Identifier:
                keyid:4C:35:78:9B:FF:FE:0B:4B:4D:1B:26:24:77:AD:44:AA:47:23:EE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/3138362e312e3136302e302f31392d3234203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:6a:54:6c:0e:53:b4:b6:28:63:5b:af:04:52:19:ad:cb:57:
         50:b1:a9:f5:4a:b5:56:b9:bc:c2:fd:73:ff:ce:06:91:48:54:
         e9:96:09:2f:ce:87:f0:9a:bc:fc:fb:28:24:a8:ca:c3:a2:47:
         d7:0b:9f:22:f8:ea:c4:c9:fb:01:32:f0:a8:ce:a2:c0:ae:80:
         5a:fc:a3:bd:2e:24:b7:e6:6f:41:e8:21:d3:a7:3c:70:16:a1:
         c5:9a:13:8d:12:97:1a:7e:31:e3:07:11:7a:4b:7e:9c:8c:93:
         37:25:0c:e9:40:58:9c:49:b8:3f:7b:f0:39:bc:8f:7f:64:56:
         12:a9:1c:2f:07:37:d8:c3:14:a5:61:03:01:c8:e4:4e:e4:01:
         ee:37:ef:e2:8e:7b:44:8c:a9:4d:5b:1a:46:d4:09:0a:56:64:
         91:11:c5:86:b7:f0:3c:c0:55:fe:54:87:c9:ff:d7:a2:2a:08:
         6a:02:37:32:60:7b:f0:17:46:5f:b5:15:30:24:fc:cc:65:c4:
         ac:02:91:23:cd:d5:2f:03:fc:ee:0b:8f:ac:5b:6c:c8:8a:9f:
         ff:9b:df:18:91:1d:f6:b7:b0:c0:bb:42:75:d0:ce:bc:aa:32:
         0d:a6:a1:23:72:49:ad:f0:78:db:43:64:20:a7:6e:bd:c2:71:
         3c:10:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org