Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e39362e302f32312d3232203d3e203139313830.roa
File:                     3138362e3136302e39362e302f32312d3232203d3e203139313830.roa (raw, json)
Hash identifier:          LdxcVRbh2lnED4C7lEBF1i8crbbXK+SstCez8z+IaPk=
Subject key identifier:   D8:0E:C1:50:20:0B:95:53:AA:CA:97:31:3E:6D:7C:5D:36:AA:BA:1C
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       5D1FEA5D139C7F687B603809C293E18F50CD367E
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e39362e302f32312d3232203d3e203139313830.roa
Signing time:             Tue 05 Mar 2024 17:56:42 +0000
ROA not before:           Tue 05 Mar 2024 17:51:42 +0000
ROA not after:            Tue 04 Mar 2025 17:56:42 +0000
asID:                     19180
IP address blocks:        186.160.96.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 20:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1f:ea:5d:13:9c:7f:68:7b:60:38:09:c2:93:e1:8f:50:cd:36:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:42 2024 GMT
            Not After : Mar  4 17:56:42 2025 GMT
        Subject: CN=D80EC150200B9553AACA97313E6D7C5D36AABA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:b4:cb:cb:85:a8:2b:d1:c3:f2:ee:0d:3f:
                    73:28:2e:ae:14:11:21:e8:57:f5:32:12:ad:75:3b:
                    24:a3:84:d1:bc:97:19:d4:1e:5c:68:17:00:e9:88:
                    ea:85:bb:ef:72:18:0e:c4:7d:fb:63:15:6b:1e:3e:
                    6d:3d:3c:d5:9c:cf:28:84:48:09:ea:7d:a0:63:24:
                    a3:8a:7b:b4:e9:3a:c6:2e:ac:8d:8d:96:63:68:68:
                    69:55:9e:35:1a:b5:6c:e2:a0:5e:39:8a:91:0d:e2:
                    63:eb:2d:6f:0d:fd:54:65:11:8b:e7:8d:d2:41:73:
                    5f:05:72:cb:72:f8:70:0d:66:fb:ce:3f:f3:46:4e:
                    ed:7d:e0:c0:b3:2b:bb:77:dd:a6:e8:55:a8:8b:e0:
                    8c:d2:25:ae:a2:7b:19:73:d3:6a:5d:2e:0b:74:d2:
                    08:c7:a1:34:20:00:45:8e:aa:0a:c1:d9:dd:6d:64:
                    d8:bf:85:dc:52:a9:67:85:ed:19:1c:70:46:c0:94:
                    79:c6:ec:4b:a7:92:98:71:12:64:83:f7:0b:19:3e:
                    2c:3f:a0:a2:cd:e1:15:f4:60:5c:36:cd:18:6f:e0:
                    cc:0b:21:18:6c:6d:58:71:7d:bd:48:7e:4d:d3:84:
                    01:19:ef:33:c3:8d:20:86:bc:5e:c2:12:2d:b0:71:
                    be:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0E:C1:50:20:0B:95:53:AA:CA:97:31:3E:6D:7C:5D:36:AA:BA:1C
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e39362e302f32312d3232203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.160.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:6d:e0:a9:5b:9b:7f:b7:4e:c7:8a:b3:aa:de:b3:80:e2:
         52:f4:3f:40:94:ca:00:bd:b5:6e:4c:fc:fa:0c:cc:1d:9a:c7:
         7c:cb:32:cd:f4:56:76:7f:8e:c7:29:dc:1c:ee:5b:88:01:a8:
         8b:f2:08:20:66:e0:49:e0:28:0a:87:5d:2d:6e:a2:50:ab:f5:
         b7:e7:29:16:01:6f:ae:3d:9d:c2:4b:d2:ef:8c:23:f7:d7:8e:
         e6:13:ac:e1:10:d1:8b:15:18:89:86:49:27:96:f2:3a:41:27:
         fe:7b:73:d5:b3:15:d4:1f:72:3c:f4:31:21:92:ab:68:55:db:
         a9:f9:2e:5c:e7:be:b8:7a:fd:b7:b5:c9:36:3b:64:88:37:b5:
         cb:17:6d:87:cd:aa:90:d3:a7:49:28:cf:0a:28:d7:21:72:9a:
         e3:7c:80:c0:97:d8:c1:79:db:6c:1f:a9:ea:ee:04:a6:b7:fc:
         38:7b:fc:01:7c:5f:d1:ea:8f:83:83:c2:d4:00:3e:a9:7d:36:
         70:e9:94:a1:4e:92:3c:b1:a9:65:9c:87:9f:d0:55:8e:ff:16:
         a6:a0:d1:04:76:a6:4e:83:d4:d1:d6:f3:44:e1:4d:7f:75:2e:
         67:30:c3:94:dc:e9:dd:08:f0:e0:1f:ed:0d:0e:6b:fb:8c:11:
         de:8a:1c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 01:35:10 2024 by rpki-client on console-fra.rpki-client.org