Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e39362e302f32312d3232203d3e203139313830.roa
File:                     3138362e3136302e39362e302f32312d3232203d3e203139313830.roa (raw, json)
Hash identifier:          4ShBsoDzCmIFNxJ5yyCeB8tfE63rZcgcdjLl2XAcC10=
Subject key identifier:   87:59:6C:12:CB:65:47:6F:6A:70:30:CF:05:D8:5A:81:C4:71:7B:A3
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       441AC2F27290DCAC529AFFCB279143DC84818F86
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e39362e302f32312d3232203d3e203139313830.roa
Signing time:             Tue 04 Feb 2025 18:18:02 +0000
ROA not before:           Tue 04 Feb 2025 18:13:02 +0000
ROA not after:            Tue 03 Feb 2026 18:18:02 +0000
asID:                     19180
IP address blocks:        186.160.96.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 09:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1a:c2:f2:72:90:dc:ac:52:9a:ff:cb:27:91:43:dc:84:81:8f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Feb  4 18:13:02 2025 GMT
            Not After : Feb  3 18:18:02 2026 GMT
        Subject: CN=87596C12CB65476F6A7030CF05D85A81C4717BA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:2d:ab:79:08:20:cf:cb:11:a7:1a:2c:5d:
                    6e:2d:46:8d:f0:bf:aa:85:eb:ca:f6:d2:c8:76:77:
                    e3:e4:df:0a:d1:0e:3d:41:71:7c:b6:84:89:35:ea:
                    bf:6b:f6:b7:dd:1e:f8:a7:54:00:a3:2e:87:78:22:
                    6e:7b:7d:66:e1:34:b0:fc:e7:ac:c5:c7:3c:0e:6c:
                    34:4a:28:ea:59:ac:b7:ee:cf:05:99:2c:ac:53:8f:
                    9e:39:9d:85:c1:78:4a:2a:d0:d6:9c:96:3e:4b:4a:
                    10:25:e1:2e:6e:b5:5f:0f:8c:c2:da:57:e2:f5:32:
                    ce:ec:f8:e1:ce:28:c5:f8:41:d0:45:62:6e:23:21:
                    44:b4:f4:89:7b:4c:f4:0c:03:72:5b:db:11:b6:43:
                    d9:bf:af:99:5c:d4:6c:91:3b:1b:69:22:dc:45:36:
                    4d:0b:c8:f5:18:2e:38:09:aa:66:38:ae:f8:c5:9a:
                    5d:72:89:ff:ea:94:ff:fc:d6:8f:a3:99:e4:48:4e:
                    e9:ed:42:20:bd:7c:d7:1a:28:f8:8e:42:24:8e:08:
                    6f:1b:22:5a:fb:55:1e:96:61:59:a4:7a:86:9c:c2:
                    01:8b:b0:d2:d4:0f:1c:c2:ce:c4:3e:fc:f0:21:56:
                    6f:db:03:69:24:6a:da:83:65:02:88:d3:61:3a:4f:
                    a3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:59:6C:12:CB:65:47:6F:6A:70:30:CF:05:D8:5A:81:C4:71:7B:A3
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e39362e302f32312d3232203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.160.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:28:54:99:38:1d:b3:af:82:3a:4e:76:62:e4:67:6f:8b:79:
         5a:c4:02:48:f5:9c:be:9a:90:5c:38:31:c9:47:4c:d0:87:57:
         22:a6:13:c8:49:f7:c1:ee:a2:ee:2c:bc:20:fb:17:46:ca:91:
         0e:96:f9:f4:80:70:b0:7e:19:2d:87:79:53:2c:c6:41:13:c5:
         0e:5c:d7:f8:ea:2c:5d:2a:9e:66:80:93:75:59:c8:7c:be:1f:
         1f:90:53:56:d0:af:2b:3d:ec:69:88:37:00:93:04:33:8e:4c:
         2b:e6:36:e2:0e:be:6c:08:fa:1e:ef:34:ea:e7:6b:03:e5:d5:
         00:17:d1:45:55:d8:9e:55:17:12:b0:ce:1b:ea:53:7e:1f:21:
         cf:44:b5:b8:e9:de:86:de:08:c1:a3:3b:9b:81:e7:dd:de:be:
         69:b5:77:08:93:e9:be:40:92:a6:57:26:63:33:82:a7:97:85:
         54:4f:5d:59:98:d2:be:4b:35:38:d7:06:4d:79:db:4c:03:8c:
         09:12:0c:18:b6:6d:e4:b5:14:cd:c1:af:c7:5d:de:3f:1e:a9:
         5b:ef:ff:1b:4c:be:64:b3:c4:72:3f:51:0d:86:00:2e:75:ec:
         ee:2d:87:00:7d:ee:38:4a:5a:6f:24:fc:05:78:8e:8a:b0:6a:
         81:d6:c7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:29 2025 by rpki-client