Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3230342e39362f32382d3238203d3e20323632323032.roa
File:                     3138362e3137362e3230342e39362f32382d3238203d3e20323632323032.roa (raw, json)
Hash identifier:          hdf9hvzu899GVDyrAmEeBAZEQHR30cwqMYG0kq2rf1g=
Subject key identifier:   0C:FB:FB:47:48:3B:BD:1F:99:36:04:99:53:AA:99:B8:D6:3D:CD:9A
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       6C90636DA9B3F9813273D67A1D6D754B88A6371D
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3230342e39362f32382d3238203d3e20323632323032.roa
Signing time:             Tue 05 Mar 2024 18:00:05 +0000
ROA not before:           Tue 05 Mar 2024 17:55:05 +0000
ROA not after:            Tue 04 Mar 2025 18:00:05 +0000
asID:                     262202
IP address blocks:        186.176.204.96/28 maxlen: 28

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:90:63:6d:a9:b3:f9:81:32:73:d6:7a:1d:6d:75:4b:88:a6:37:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:55:05 2024 GMT
            Not After : Mar  4 18:00:05 2025 GMT
        Subject: CN=0CFBFB47483BBD1F9936049953AA99B8D63DCD9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:50:00:96:2b:18:d8:b1:16:33:27:96:ea:
                    de:de:be:8b:d2:29:23:6c:fb:87:35:2c:9e:57:97:
                    0e:4a:86:5f:b7:ba:7b:00:b9:0b:96:c5:3f:4c:c5:
                    2e:e4:a9:03:5d:bb:3f:48:40:80:8a:dd:14:dc:cb:
                    de:cc:01:01:63:41:23:f5:d1:e9:84:da:c9:6e:ec:
                    90:51:e3:39:92:0f:b3:cf:95:af:bb:b9:a0:74:52:
                    ba:29:a9:d0:ae:30:ef:6b:49:ef:f2:70:bb:7c:58:
                    bf:44:c3:44:62:88:21:ef:dd:23:ad:2c:76:e7:7d:
                    fb:21:ec:7f:45:84:dd:c3:cb:af:26:77:ce:c1:58:
                    dc:13:cb:04:63:cc:67:3f:33:bc:53:9e:9e:ea:8e:
                    d8:5e:e0:9a:13:60:2a:a6:99:ba:6d:46:5d:3a:3f:
                    ff:4e:cf:8e:7f:46:2b:9f:a0:80:e2:f5:01:c5:94:
                    d3:4c:04:ee:bb:32:0e:8f:fe:19:d7:a3:25:f5:be:
                    c9:ac:45:6b:94:76:47:c8:1a:03:27:97:80:0d:9f:
                    52:32:c8:34:5a:76:fc:a6:a6:cb:0e:49:9b:d6:8e:
                    d3:4d:33:77:d5:39:dc:cf:32:3c:d7:ac:00:55:e3:
                    d2:1a:4d:9b:48:55:a2:3f:1e:83:54:f3:93:07:ed:
                    30:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FB:FB:47:48:3B:BD:1F:99:36:04:99:53:AA:99:B8:D6:3D:CD:9A
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3230342e39362f32382d3238203d3e20323632323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.204.96/28

    Signature Algorithm: sha256WithRSAEncryption
         da:45:17:d2:2b:f5:00:43:44:f2:fb:bb:fa:75:72:bb:e1:e6:
         d7:1e:ff:f4:37:b0:6b:74:cc:89:f4:2a:ba:77:29:59:40:af:
         70:ea:82:df:0c:f5:97:8a:fe:ec:c5:12:4e:3d:02:db:a0:f2:
         b9:b3:3e:30:27:e0:53:23:7c:ed:71:9f:87:3e:44:17:18:1d:
         46:19:c3:f8:3f:e9:26:3f:fe:2e:1a:e8:ff:16:d3:cb:14:f4:
         7b:bb:41:cb:95:61:8a:a8:88:e0:4a:c4:86:29:c2:d1:43:bc:
         06:9e:90:6f:4e:82:dc:c7:27:de:a5:82:dc:2f:e0:cb:83:fd:
         68:b7:c0:52:a8:00:70:b3:f2:6b:62:65:1c:a1:7c:0d:f6:8c:
         b6:fb:0d:fd:57:da:4a:cc:0d:6c:5b:e8:a7:4d:3e:52:fd:21:
         b2:cb:1a:0b:6b:fe:ed:b1:aa:1b:1e:ee:7f:7d:c6:ec:20:c3:
         32:e7:9d:28:8d:1e:e8:f0:20:33:2c:2b:02:16:9e:43:43:f8:
         20:7f:06:f7:f4:22:a1:87:2a:65:6b:2e:54:24:ca:44:1d:2a:
         cc:70:ed:bc:29:d4:be:b9:71:ff:f2:bf:fa:96:76:97:07:0e:
         7d:a0:6f:9c:f2:7b:0f:c4:73:7a:f7:c6:d1:7d:a7:e8:73:ea:
         60:0a:0b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org