Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3136322e302f32342d3234203d3e203532323432.roa
File:                     3139302e3138312e3136322e302f32342d3234203d3e203532323432.roa (raw, json)
Hash identifier:          P8DLeV2J7pEQ9QZjYKP6KrT6B3qew3uJQbdxApCxM3I=
Subject key identifier:   60:E4:EB:FB:97:BA:51:AC:5D:78:04:82:16:F3:B2:A9:E5:DB:C9:F4
Certificate issuer:       /CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
Certificate serial:       1ADAC9D6509EFE5D1CA4804EC8991B1576D26A96
Authority key identifier: 16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3136322e302f32342d3234203d3e203532323432.roa
Signing time:             Tue 05 Mar 2024 17:44:34 +0000
ROA not before:           Tue 05 Mar 2024 17:39:34 +0000
ROA not after:            Tue 04 Mar 2025 17:44:34 +0000
asID:                     52242
IP address blocks:        190.181.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:da:c9:d6:50:9e:fe:5d:1c:a4:80:4e:c8:99:1b:15:76:d2:6a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
        Validity
            Not Before: Mar  5 17:39:34 2024 GMT
            Not After : Mar  4 17:44:34 2025 GMT
        Subject: CN=60E4EBFB97BA51AC5D78048216F3B2A9E5DBC9F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:d8:63:2c:f0:ed:05:15:26:35:a7:43:1d:
                    bd:fa:92:43:6a:8c:58:da:d7:92:75:8e:95:b9:d8:
                    b7:1b:4e:8a:b6:74:69:e4:85:69:33:d2:1c:07:96:
                    53:11:ca:5a:8e:8e:37:c0:b6:79:d0:47:e0:6b:b3:
                    df:01:bf:e4:26:38:50:b8:68:3e:fc:59:f4:c1:0e:
                    ca:ba:52:c4:b8:91:a5:50:79:7d:23:d5:a6:8b:44:
                    c7:e1:e5:03:a2:37:9b:be:e5:fc:9a:e8:78:57:a9:
                    57:37:fe:96:cf:6b:0d:de:8b:e9:3d:e4:f7:43:e6:
                    2d:26:d3:da:a3:ed:78:b8:cc:ce:38:97:7a:b0:35:
                    5e:e7:d2:a1:3a:44:c9:bf:9c:d4:5c:16:45:c4:cd:
                    a6:45:e9:d5:0e:6a:6f:e4:bd:bc:20:df:67:33:f5:
                    3f:dc:2c:75:f1:1e:0b:f2:34:92:d0:46:c8:3c:52:
                    f5:e5:d6:bb:0f:40:34:74:89:63:13:52:d1:76:25:
                    82:bc:da:65:03:67:17:f5:95:ec:f8:31:84:af:d6:
                    7b:6e:51:5c:ff:d9:eb:8a:7a:c2:77:91:89:c2:c3:
                    10:0d:05:d6:ce:47:b7:f9:1f:ff:f0:c1:67:92:32:
                    db:97:df:ba:cf:be:51:a0:c4:f9:ca:2d:26:b0:b6:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E4:EB:FB:97:BA:51:AC:5D:78:04:82:16:F3:B2:A9:E5:DB:C9:F4
            X509v3 Authority Key Identifier:
                keyid:16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3136322e302f32342d3234203d3e203532323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:45:f7:1e:0a:a8:f8:8f:40:b2:38:92:d0:d2:7f:ce:f8:42:
         18:a7:cd:c7:8f:5c:ae:a9:58:aa:09:2d:df:22:37:96:93:9c:
         ab:3b:c1:a7:a4:d0:7b:52:cc:09:67:bf:25:00:1c:45:20:b0:
         55:fe:1c:bd:1a:52:af:64:da:fc:87:9f:cd:6b:02:5a:35:56:
         d1:ec:d2:75:c3:e9:b2:b2:4e:fb:0b:b8:36:ea:5a:3c:f0:93:
         a0:0f:79:cb:cb:4e:f0:e5:da:0b:d9:19:50:8f:c7:14:da:83:
         f2:7f:96:ff:1c:32:24:7c:92:39:41:74:29:77:1f:b2:b1:25:
         ce:1b:9f:c4:2b:29:d1:2f:10:20:57:44:9e:c6:68:60:13:41:
         3b:94:50:ca:cd:ba:1c:44:7c:4a:17:37:33:eb:67:7c:d6:ec:
         78:24:a2:53:5b:90:97:d6:dc:d5:f1:8e:15:9e:dd:7d:66:5f:
         2a:14:a5:fe:83:94:35:8a:02:f6:90:db:f7:4b:96:17:82:59:
         4d:82:c8:9b:2a:4e:be:e1:e2:0d:74:89:88:bb:62:8f:a1:f4:
         ad:86:49:70:58:2c:a1:fc:47:91:82:55:f8:a6:4e:89:14:85:
         f2:6a:65:f4:18:b9:81:19:e2:dc:47:4e:33:bb:33:a5:79:23:
         c2:88:f4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:47:17 2024 by rpki-client on console-ams.rpki-client.org