Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31362d3234203d3e20323632323036.roa
File:                     3138362e3137362e302e302f31362d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          P7lnIRislFbMIu3AUdGw+UKtU2+O3BaiaqpOGgyO+YU=
Subject key identifier:   1A:5E:AC:FA:69:3F:A4:EE:5B:EA:96:DF:A6:E0:A6:E4:F8:25:DC:5E
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       4EFD28389FDD2B8160E26624D6A792DD596257CC
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31362d3234203d3e20323632323036.roa
Signing time:             Wed 08 May 2024 20:35:01 +0000
ROA not before:           Wed 08 May 2024 20:30:01 +0000
ROA not after:            Wed 07 May 2025 20:35:01 +0000
asID:                     262206
IP address blocks:        186.176.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fd:28:38:9f:dd:2b:81:60:e2:66:24:d6:a7:92:dd:59:62:57:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: May  8 20:30:01 2024 GMT
            Not After : May  7 20:35:01 2025 GMT
        Subject: CN=1A5EACFA693FA4EE5BEA96DFA6E0A6E4F825DC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ba:fc:53:b8:f6:b4:37:86:d7:c9:2d:4b:6b:
                    f3:71:6a:4e:9c:ef:4c:78:b2:00:cd:08:3c:a1:9a:
                    80:c2:1b:31:2e:d7:4b:17:5e:f6:d4:44:3f:01:ce:
                    e1:b5:5a:53:e9:4d:4c:6e:73:ea:22:05:d8:e5:ec:
                    26:fb:1b:00:17:12:80:40:de:7f:49:75:1e:33:74:
                    a2:9c:3d:89:49:bc:b3:98:25:e5:18:cb:e0:85:27:
                    85:74:58:85:35:42:6e:68:96:b8:b6:02:e0:ab:6f:
                    c9:8d:f5:b3:67:f0:88:9c:a6:84:7a:94:42:88:3a:
                    ef:02:df:d9:36:b7:b6:e9:01:10:a3:d6:a9:dd:a0:
                    5e:d6:c8:3c:c0:4e:5b:c8:3a:c9:4c:bf:ee:54:88:
                    08:5b:67:42:aa:94:f8:96:08:6d:89:0d:95:c0:04:
                    6c:87:74:9a:44:96:15:7d:e8:de:f7:4d:06:c0:52:
                    21:de:d5:c5:a7:c7:11:d9:31:4f:a6:ad:de:48:34:
                    c1:75:bc:fa:7d:60:2e:d6:7a:44:54:c0:1b:03:27:
                    8c:f4:fb:56:52:51:ba:25:45:f4:b7:d7:cf:25:7e:
                    24:a8:84:9e:b5:d1:23:15:c1:82:22:9b:38:1e:89:
                    c6:d4:97:8c:3d:ee:ce:18:b2:9b:b4:2a:90:0b:34:
                    94:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5E:AC:FA:69:3F:A4:EE:5B:EA:96:DF:A6:E0:A6:E4:F8:25:DC:5E
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31362d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1d:cd:d9:23:26:64:81:14:52:1a:54:86:9f:6d:92:0b:16:4e:
         32:c3:95:d7:01:14:86:81:ce:43:6e:2c:f3:f1:f4:00:b9:77:
         24:14:de:05:f5:48:fe:7f:2c:27:cd:a2:f5:d5:47:80:ef:04:
         34:db:df:2c:6d:fc:ea:b0:6b:79:7a:34:57:06:b2:a4:e1:d0:
         d3:b6:0a:3e:ee:94:25:6a:1c:b0:70:27:d9:e6:2a:3a:5d:be:
         80:d8:6f:b0:cb:fd:68:f0:89:a0:9d:78:e2:6f:9c:ac:d4:0b:
         1d:e5:3e:04:b9:f6:a9:81:de:33:2c:92:7c:15:58:b8:2c:c2:
         9a:ef:75:b2:2f:9a:0f:f1:95:5e:37:44:3a:f8:6a:8a:2b:92:
         75:b8:b9:7d:b1:40:5c:20:73:ee:13:45:ad:7c:0c:a1:de:a3:
         ec:95:58:06:8d:ec:72:f3:b7:3d:d4:f5:b9:29:9f:be:38:90:
         df:76:3b:ff:e9:e9:fc:a4:ab:39:2e:28:2e:31:7f:80:59:1a:
         5d:18:e1:c4:0a:c1:2e:98:19:d2:4a:bf:40:8c:55:d2:82:e6:
         8e:64:23:52:74:b7:6e:69:7a:3a:b5:27:e8:7b:0a:f6:05:89:
         d2:91:8a:37:5f:d0:7d:d3:12:6d:29:37:f3:69:b2:d8:e9:5e:
         3b:45:a1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org