Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e352e302f32342d3234203d3e203136393733.roa
File:                     3138362e3137362e352e302f32342d3234203d3e203136393733.roa (raw, json)
Hash identifier:          mxXDXChDBLy04oz95Yu7rA287oyzhCxroaeHlWuF0NE=
Subject key identifier:   51:A7:32:BC:C2:31:D4:DA:64:25:96:6F:35:07:54:8D:97:2F:91:37
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       01A3275EC254413D8148C5AA88AB46CAB061A5A9
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e352e302f32342d3234203d3e203136393733.roa
Signing time:             Tue 05 Mar 2024 17:59:56 +0000
ROA not before:           Tue 05 Mar 2024 17:54:56 +0000
ROA not after:            Tue 04 Mar 2025 17:59:56 +0000
asID:                     16973
IP address blocks:        186.176.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a3:27:5e:c2:54:41:3d:81:48:c5:aa:88:ab:46:ca:b0:61:a5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:56 2024 GMT
            Not After : Mar  4 17:59:56 2025 GMT
        Subject: CN=51A732BCC231D4DA6425966F3507548D972F9137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:81:43:1f:28:4c:a9:65:76:b1:97:00:14:4d:
                    66:6c:32:f6:0e:01:d7:ff:49:dc:d7:f5:96:ea:a3:
                    c3:fe:dd:89:cc:91:ac:34:da:37:d7:13:20:40:ab:
                    59:6b:81:27:ee:2a:87:e0:cc:f9:7e:43:d5:50:16:
                    0d:ce:2d:3e:f0:a4:7a:43:d0:c7:4f:d5:d3:63:fb:
                    45:4c:4d:d7:22:83:b8:79:48:5a:db:c0:51:8e:f5:
                    8b:79:22:97:d3:ba:d7:81:07:6e:fc:74:d9:4f:87:
                    0a:02:df:dd:1e:e0:95:80:c6:45:53:0f:ac:5d:98:
                    7e:33:82:44:c6:b2:22:16:7b:f8:47:55:f6:57:2b:
                    64:e8:fb:14:8d:74:34:a7:74:c7:89:4a:20:82:3c:
                    d7:ec:59:c3:4a:a8:f6:de:8b:84:69:df:f5:f7:54:
                    14:c1:8f:c1:b3:8e:69:e6:0f:41:65:50:d9:dd:a1:
                    8c:6d:b7:f0:e4:3a:83:62:52:c8:6d:58:2a:90:32:
                    92:dd:8a:c6:5e:46:ac:86:9d:33:82:ca:ac:3c:9c:
                    0c:2a:17:7e:08:45:d0:fa:81:96:13:c6:89:85:d4:
                    6d:15:bb:ab:a2:61:87:b7:2b:a4:5c:35:13:04:aa:
                    76:24:0e:c4:88:2a:8c:80:f8:6d:4c:70:87:f2:bb:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A7:32:BC:C2:31:D4:DA:64:25:96:6F:35:07:54:8D:97:2F:91:37
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e352e302f32342d3234203d3e203136393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:7d:53:a7:bb:72:f2:3a:1f:2f:fa:89:db:0e:b5:e9:12:bc:
         ea:41:f1:ae:6f:67:6b:08:ad:7e:5c:ee:f5:c8:99:33:83:ac:
         7d:11:2b:1e:16:18:d9:0e:60:e2:0c:c6:36:7a:bf:b5:41:9d:
         3f:7f:43:bf:12:7e:cb:4a:b1:f4:3b:80:52:e3:66:f2:88:93:
         a8:01:d3:17:9e:aa:e4:10:58:be:97:1f:78:1c:9f:8e:ac:24:
         3d:6b:fa:0c:74:9f:c4:0d:87:6c:51:8b:58:56:10:f8:4b:29:
         26:04:c3:ba:2c:33:0a:a4:ac:83:29:47:42:8f:32:42:96:7c:
         4e:96:4e:61:ab:20:96:3b:8b:16:07:f2:05:3d:56:d2:25:b0:
         25:1b:7b:2a:b7:f8:dd:89:c9:7f:96:20:a0:84:d1:a9:53:72:
         77:54:57:f4:52:d3:ab:23:84:5a:35:4d:39:be:f3:ef:35:bd:
         92:e9:0d:c9:f0:51:fc:b4:95:4d:93:db:67:04:4e:ae:8e:3d:
         7c:ce:25:ef:12:33:90:67:bf:f1:b0:8a:03:0f:6b:33:d0:36:
         18:b8:ce:72:bd:3a:21:9f:a8:8f:6c:fa:6b:18:a4:66:13:28:
         8b:cd:57:c6:06:ce:65:d2:81:46:9a:26:d2:a7:1e:98:f3:ba:
         26:47:0f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org