Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3138372e3235312e3136302e302f31392d3234203d3e203631343638.roa
File:                     3138372e3235312e3136302e302f31392d3234203d3e203631343638.roa (raw, json)
Hash identifier:          y1gYoc8YD5LaAgEzYuAIinV32T/hJh5G+ZkA5J6FkvE=
Subject key identifier:   5E:99:44:7C:F6:DA:3F:76:AB:D4:43:17:84:40:82:E1:BC:F1:CB:63
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       18162593B554E491DAF6581C95C4910A063CC1F6
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3138372e3235312e3136302e302f31392d3234203d3e203631343638.roa
Signing time:             Fri 07 Jun 2024 18:40:00 +0000
ROA not before:           Fri 07 Jun 2024 18:35:00 +0000
ROA not after:            Fri 06 Jun 2025 18:40:00 +0000
asID:                     61468
IP address blocks:        187.251.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:16:25:93:b5:54:e4:91:da:f6:58:1c:95:c4:91:0a:06:3c:c1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Jun  7 18:35:00 2024 GMT
            Not After : Jun  6 18:40:00 2025 GMT
        Subject: CN=5E99447CF6DA3F76ABD44317844082E1BCF1CB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:c9:15:a4:08:ac:1f:dc:2b:73:54:35:2d:
                    65:be:6d:aa:17:3d:fd:9f:93:c1:63:7f:8f:59:72:
                    e5:b5:b8:8e:bc:54:b5:b6:e8:54:85:88:8b:76:91:
                    a7:ad:75:57:4d:ad:3d:82:59:a8:59:36:af:dc:ac:
                    40:1b:ff:72:99:e8:ca:d9:c8:b0:6e:4f:b8:c2:15:
                    c5:78:17:0f:05:17:21:33:85:84:99:eb:6a:42:aa:
                    6b:ac:d8:7d:e1:7a:ff:73:6d:00:aa:f7:5e:5c:8f:
                    95:1b:83:81:d4:c3:16:7c:60:e9:62:f0:22:fb:a8:
                    b6:0a:13:4b:e5:ce:05:02:c2:c4:88:e9:70:ee:88:
                    49:cf:1c:db:c9:9e:5f:66:0b:3b:20:2b:f3:ec:91:
                    63:1f:ed:eb:56:cd:84:15:c0:e6:87:e0:b3:5c:79:
                    12:23:82:1d:4a:ec:ec:b7:8b:b4:86:5d:b5:46:26:
                    dc:a6:33:00:67:f5:20:63:1c:dd:fe:e3:56:c1:9b:
                    1a:c3:75:e5:e7:6f:af:68:bb:12:2f:f7:be:99:1d:
                    e5:0c:3f:b5:d7:f7:5a:29:db:fb:b1:09:56:53:c2:
                    b1:5a:e3:73:96:d5:00:23:3b:86:75:8b:cb:cf:9f:
                    e3:a3:a4:0d:36:fc:28:12:59:b1:74:95:26:6c:cb:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:99:44:7C:F6:DA:3F:76:AB:D4:43:17:84:40:82:E1:BC:F1:CB:63
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3138372e3235312e3136302e302f31392d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:ed:4d:5b:4b:3e:91:39:34:61:78:9c:fe:40:a2:be:78:20:
         ee:de:61:23:e5:3a:0c:8c:f7:23:61:bd:61:f5:a1:80:4c:f1:
         95:f4:55:7e:70:66:bf:1c:b5:b8:c0:cd:fc:71:92:5d:88:a2:
         a1:1d:5b:1f:85:b0:aa:0e:8b:15:48:a3:f3:70:81:56:fc:70:
         ff:e2:a9:7e:bb:a0:13:9e:b4:6f:e9:0d:12:6c:a6:03:82:80:
         da:25:90:79:36:b4:7e:34:3f:3b:f4:4a:f9:e2:66:39:b3:a2:
         a7:42:75:e4:23:6c:0c:fe:53:4b:04:f3:75:da:42:b0:19:ea:
         d1:5f:d6:3d:2d:88:79:0a:7f:2c:1b:66:08:f8:ce:5b:dd:8e:
         ca:40:e9:56:13:b1:62:bc:6e:68:59:56:fb:4c:c3:f0:d4:a2:
         7e:82:19:3b:b9:20:ae:9d:af:29:3c:73:b8:8b:cc:da:43:59:
         64:b4:45:07:ea:f0:51:c3:96:69:1c:f9:12:0c:5e:af:d2:5f:
         05:71:f9:85:c3:a6:c3:05:f5:27:8c:8b:9f:50:12:47:f8:3f:
         ed:65:9b:07:6c:1a:8c:ef:b6:ed:31:96:8b:65:94:8c:6b:9f:
         2a:98:5d:36:f4:59:1f:8b:ef:f1:5e:ba:3a:11:f6:3f:30:f0:
         47:19:98:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org