Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3139342e3138342f32392d3239203d3e20323632323032.roa
File:                     3138362e3137362e3139342e3138342f32392d3239203d3e20323632323032.roa (raw, json)
Hash identifier:          615RHX5DJCIPp3Zt+mu9nRTExX+SUK5rr6ann86gYPg=
Subject key identifier:   73:0F:7C:AE:1A:46:4D:D1:BC:54:8B:5A:C5:F5:24:60:05:D9:7B:09
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       3D272234182AEC6D23F0AED15DF043BE1B31D34D
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3139342e3138342f32392d3239203d3e20323632323032.roa
Signing time:             Tue 04 Feb 2025 18:14:26 +0000
ROA not before:           Tue 04 Feb 2025 18:09:26 +0000
ROA not after:            Tue 03 Feb 2026 18:14:26 +0000
asID:                     262202
IP address blocks:        186.176.194.184/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:27:22:34:18:2a:ec:6d:23:f0:ae:d1:5d:f0:43:be:1b:31:d3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Feb  4 18:09:26 2025 GMT
            Not After : Feb  3 18:14:26 2026 GMT
        Subject: CN=730F7CAE1A464DD1BC548B5AC5F5246005D97B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:bb:f3:55:ee:53:8a:47:30:a6:c6:6a:75:
                    da:f3:f4:84:61:b4:ba:c6:e6:1e:83:29:c6:da:5c:
                    f1:f3:7e:76:01:26:39:6d:b3:8e:ba:39:0a:be:7b:
                    85:f2:09:19:6b:25:c4:26:1d:4c:a4:c9:c1:57:70:
                    c3:f0:c2:17:72:a2:4e:b7:df:fa:35:53:18:a2:dc:
                    56:a6:a0:37:02:a2:0f:08:68:a4:5c:aa:3e:a2:64:
                    c6:4d:da:69:34:7c:d6:61:3c:31:62:57:c1:3d:88:
                    7e:10:e3:c9:61:04:42:4a:0f:b8:00:a0:c8:2e:65:
                    74:d9:a2:ca:56:9a:ac:fe:b6:05:51:bb:53:99:83:
                    05:88:b6:03:13:0b:eb:7c:30:9e:9f:1a:5b:fb:d5:
                    ee:3d:a0:ca:7b:ca:5c:44:9a:ec:3a:bd:40:35:88:
                    b5:8a:53:6a:09:90:aa:08:c2:19:bc:25:30:8a:04:
                    3e:ce:ac:9d:fa:07:69:d4:c4:61:99:64:07:af:4a:
                    8f:f1:d3:36:2a:24:10:14:f4:b7:b3:10:05:58:51:
                    e1:8a:71:4f:bc:be:f6:de:b2:13:30:8a:39:36:b6:
                    88:8b:91:f6:a9:49:a0:65:8e:e7:62:5b:16:1f:77:
                    55:c3:ce:03:ae:74:40:bb:c3:d5:24:1e:ca:65:9f:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0F:7C:AE:1A:46:4D:D1:BC:54:8B:5A:C5:F5:24:60:05:D9:7B:09
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3139342e3138342f32392d3239203d3e20323632323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.194.184/29

    Signature Algorithm: sha256WithRSAEncryption
         7b:7f:75:8e:48:5c:a5:31:09:25:f3:f6:b3:5a:b2:d6:04:d2:
         06:91:51:c9:80:53:40:6d:33:7f:12:05:1b:bd:9f:8d:aa:e6:
         16:6c:2c:3b:9b:bb:67:39:de:fd:15:62:80:91:72:fc:9a:9c:
         ba:98:df:1e:6a:3a:8f:5b:28:79:7f:33:ba:b8:9c:f2:28:bb:
         0b:08:f1:c4:61:82:92:70:6d:28:c8:ed:fe:f7:ef:2c:85:0a:
         de:3b:20:e5:5b:d9:cf:86:7c:01:3d:32:6b:e2:48:47:75:4f:
         e0:08:fc:b2:fa:a4:96:05:08:5d:ad:0a:77:2b:67:20:9d:d6:
         a5:3b:e7:4e:a7:0f:a5:45:9b:94:61:aa:23:93:3b:96:22:df:
         18:9f:e0:1d:fe:23:68:17:2c:a9:2d:a8:f4:a4:7c:0c:51:11:
         05:fb:e9:63:37:54:0c:c7:a6:c4:f2:5a:47:89:c6:09:13:63:
         e0:42:07:e6:21:64:b9:fb:ab:b1:f1:86:9d:c1:57:46:78:a4:
         c6:4b:fa:7e:a2:67:97:8c:28:14:c8:8c:91:c2:96:0a:1d:bb:
         7a:15:ca:12:4c:b3:15:d4:e0:53:21:6c:0a:36:47:1f:17:fe:
         b0:1a:a7:eb:46:33:16:2d:f6:36:2a:dd:93:ab:d8:f9:af:a3:
         c8:fe:e5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:02 2025 by rpki-client