Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e38302e302f32302d3232203d3e203139313830.roa
File:                     3138362e3136302e38302e302f32302d3232203d3e203139313830.roa (raw, json)
Hash identifier:          sCaIoXYuMAdIQ9QKmrP1DumfuJmN+BzQ5gNmRlG/JHE=
Subject key identifier:   C2:E0:D5:EB:88:C8:DD:11:45:E0:5B:C9:53:F6:4B:0E:B0:9A:66:B6
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       2BBBA77F786BCCF1419CC41DF62667C6951B50D8
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e38302e302f32302d3232203d3e203139313830.roa
Signing time:             Tue 04 Feb 2025 18:18:02 +0000
ROA not before:           Tue 04 Feb 2025 18:13:02 +0000
ROA not after:            Tue 03 Feb 2026 18:18:02 +0000
asID:                     19180
IP address blocks:        186.160.80.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:bb:a7:7f:78:6b:cc:f1:41:9c:c4:1d:f6:26:67:c6:95:1b:50:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Feb  4 18:13:02 2025 GMT
            Not After : Feb  3 18:18:02 2026 GMT
        Subject: CN=C2E0D5EB88C8DD1145E05BC953F64B0EB09A66B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c9:87:f0:23:5b:b0:1d:74:a2:7c:3d:5d:c2:
                    2f:77:3d:cc:eb:a3:7f:1b:6c:ac:96:9a:b6:4a:01:
                    75:a5:2c:83:e3:c2:e4:fa:34:e9:60:29:df:cb:eb:
                    04:03:ac:ba:3b:3f:ab:86:28:2c:64:46:02:f4:45:
                    a5:bb:95:f6:fb:20:0e:db:3b:af:8e:14:8f:21:4b:
                    81:51:9d:4d:55:36:aa:5e:84:11:d4:78:52:59:11:
                    f5:da:6b:e2:69:64:b3:ac:be:fa:55:12:69:1e:7e:
                    62:f9:5a:20:a8:c6:60:89:15:e5:52:e5:ef:c5:de:
                    ba:75:93:7f:0d:d6:c6:ed:bf:bd:94:fd:66:15:68:
                    4d:70:2e:37:8d:db:df:99:dc:e4:65:73:d4:fc:84:
                    1e:ff:2b:4c:da:9b:3b:f2:1e:d1:b7:f9:50:2b:9d:
                    51:98:4c:19:1b:2d:ef:69:45:c7:63:c0:50:70:c6:
                    2b:2e:92:bc:a3:3a:2e:95:05:c3:6b:c7:8e:5b:14:
                    5e:d7:7d:ec:9b:5c:04:0d:82:96:ff:3f:54:b4:23:
                    c0:08:b7:01:ef:3b:79:62:e3:5e:31:55:10:96:0b:
                    1b:93:c9:3f:02:4b:4c:1b:42:87:ba:f9:6b:ec:8b:
                    ec:e2:10:36:92:3a:22:f3:81:86:a5:6d:b4:81:47:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E0:D5:EB:88:C8:DD:11:45:E0:5B:C9:53:F6:4B:0E:B0:9A:66:B6
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e38302e302f32302d3232203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.160.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:2e:33:10:1a:c9:d4:58:9b:f0:2c:be:81:14:6f:d7:30:c7:
         d3:08:ed:5c:79:28:84:c8:19:69:7d:3c:76:5d:03:13:55:dd:
         7d:89:3b:e1:c7:0d:b4:62:81:94:a5:fb:38:77:75:a0:36:e4:
         d3:36:76:b4:2e:9c:72:c0:99:c8:20:cd:63:87:51:a2:b5:9a:
         5e:63:0d:98:af:c9:ab:6d:a8:29:08:8e:2b:24:d3:cd:39:52:
         16:91:13:21:1d:fd:a9:2e:77:4f:50:80:1a:cf:93:e7:e9:0a:
         3b:9b:49:9e:60:ba:c1:a0:f2:df:a4:d2:2f:f7:68:61:90:35:
         a3:4e:13:3f:5b:fc:51:f5:6a:ff:e4:f7:b0:de:eb:06:5c:86:
         5c:b9:77:f9:45:3f:0b:97:13:f2:5a:70:85:94:4c:56:68:8d:
         e8:eb:dd:7e:01:8b:88:67:58:40:ad:14:13:f8:87:98:97:6d:
         d1:a5:7e:19:d4:60:fd:70:1f:3f:83:e0:fd:d0:3e:03:ff:f6:
         e9:fd:23:1f:c0:cc:a5:47:24:ae:71:cd:6e:54:f1:d6:83:50:
         58:32:9f:6a:2c:65:d1:4c:8f:c1:be:15:f3:b8:f6:af:95:68:
         14:31:50:dd:58:56:98:ae:6c:47:45:51:8a:cb:0f:54:2c:ca:
         5c:c3:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:40 2025 by rpki-client