Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e352e302f32342d3234203d3e203136393733.roa
File:                     3138362e3137362e352e302f32342d3234203d3e203136393733.roa (raw, json)
Hash identifier:          WfJ4ruwoDw2HRvprloQ2uy0UugWbfjsrDzux9JjjemA=
Subject key identifier:   F6:30:7C:99:46:4C:9E:CF:B9:A0:01:2A:DA:C6:AE:D4:C8:92:2F:4B
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       5939D8EBEFF3860920E9FB8C8C2ED4A7A94D2E22
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e352e302f32342d3234203d3e203136393733.roa
Signing time:             Tue 04 Feb 2025 18:14:28 +0000
ROA not before:           Tue 04 Feb 2025 18:09:28 +0000
ROA not after:            Tue 03 Feb 2026 18:14:28 +0000
asID:                     16973
IP address blocks:        186.176.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:39:d8:eb:ef:f3:86:09:20:e9:fb:8c:8c:2e:d4:a7:a9:4d:2e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Feb  4 18:09:28 2025 GMT
            Not After : Feb  3 18:14:28 2026 GMT
        Subject: CN=F6307C99464C9ECFB9A0012ADAC6AED4C8922F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:02:ad:de:c2:13:d2:87:1c:fa:6f:ba:a2:
                    d4:38:f6:d0:ec:e3:36:9f:bc:96:31:d1:0c:29:22:
                    0b:b5:bf:2d:81:8e:26:09:28:85:3b:70:c9:6c:fa:
                    bf:61:6c:4b:d3:06:7d:23:cc:0a:dd:9c:cb:0b:ee:
                    45:a3:10:b8:9e:fe:57:d6:94:8a:a2:70:40:80:d9:
                    08:da:69:b3:c1:72:f3:7f:f9:77:76:e9:0d:2a:74:
                    20:67:16:9a:bd:ef:63:69:fd:c9:77:2f:1f:8c:a8:
                    ca:0d:1e:32:a6:22:9c:bb:2a:4e:ce:e2:ea:ee:cf:
                    82:d9:5f:d0:e1:48:9b:d0:63:1e:55:14:44:0d:d4:
                    3b:f8:6a:fb:87:58:f7:bd:c4:d1:f3:6c:d2:61:57:
                    08:00:76:b6:c3:1d:f7:d6:f5:87:a5:31:71:ae:6d:
                    82:70:d8:61:f0:e3:71:78:4b:74:02:6c:b4:ad:3f:
                    20:90:98:ea:34:b2:bc:1d:bd:e2:f3:e1:70:63:fa:
                    2f:f7:f1:c8:14:8b:71:2c:78:13:e6:c5:12:69:b9:
                    30:85:9a:f8:3e:83:eb:9e:2b:6e:25:d6:16:bd:a4:
                    eb:6c:9f:d4:a5:20:24:65:52:72:3c:94:5f:5b:00:
                    cb:fe:98:d8:c0:b8:80:b2:83:0a:d9:3f:f3:29:cf:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:30:7C:99:46:4C:9E:CF:B9:A0:01:2A:DA:C6:AE:D4:C8:92:2F:4B
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e352e302f32342d3234203d3e203136393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:17:38:86:ca:c6:8a:17:21:21:d8:7f:55:79:b9:b8:4e:35:
         9c:44:69:c5:d0:20:62:c4:78:0e:d8:70:b3:22:fb:01:f9:c8:
         ce:f0:f3:6e:f8:bb:1a:7d:56:42:a7:3b:39:c8:77:12:cf:6a:
         a1:b3:bd:2b:51:33:ec:0d:0b:65:b5:cf:b8:c1:16:77:c6:99:
         5d:9c:38:6b:69:7f:2d:26:57:ca:12:a2:1b:63:41:4b:06:ce:
         82:b3:c8:53:21:2f:36:0e:c5:b5:53:23:bb:f2:98:ae:e8:9a:
         19:67:41:3a:ab:0a:33:f3:a9:e4:e8:a0:03:dc:c2:13:cc:ce:
         fb:cb:8e:90:d9:35:0f:e0:3e:d0:db:ee:68:1e:3d:7c:93:f5:
         a5:54:cb:eb:5d:4e:7a:9b:03:28:cf:84:cb:66:19:ea:fc:d1:
         fb:d3:48:27:f6:72:ce:7a:92:43:6d:ee:ae:d1:1c:5e:77:28:
         b6:06:7e:3e:84:49:43:fd:38:41:2a:47:3b:9c:72:57:56:ac:
         4c:da:e3:75:ee:bb:93:75:d5:df:2c:2a:2d:a1:be:78:dc:02:
         15:56:1e:9a:3f:8a:fa:4f:1e:5f:c4:9e:33:3d:d8:84:cb:e5:
         68:ef:15:db:9e:a4:a7:ea:b8:3f:45:f3:8e:99:d7:be:97:0a:
         65:04:6a:67
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUWTnY6+/zhgkg6fuMjC7Up6lNLiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBNTUxMEM3RkNEOTY2RTAyNDg2RDMyNTcyQkY2QkNC
MUI4RkYyRTAeFw0yNTAyMDQxODA5MjhaFw0yNjAyMDMxODE0MjhaMDMxMTAvBgNV
BAMTKEY2MzA3Qzk5NDY0QzlFQ0ZCOUEwMDEyQURBQzZBRUQ0Qzg5MjJGNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9QKt3sIT0occ+m+6otQ49tDs
4zafvJYx0QwpIgu1vy2BjiYJKIU7cMls+r9hbEvTBn0jzArdnMsL7kWjELie/lfW
lIqicECA2QjaabPBcvN/+Xd26Q0qdCBnFpq972Np/cl3Lx+MqMoNHjKmIpy7Kk7O
4uruz4LZX9DhSJvQYx5VFEQN1Dv4avuHWPe9xNHzbNJhVwgAdrbDHffW9YelMXGu
bYJw2GHw43F4S3QCbLStPyCQmOo0srwdveLz4XBj+i/38cgUi3EseBPmxRJpuTCF
mvg+g+ueK24l1ha9pOtsn9SlICRlUnI8lF9bAMv+mNjAuICygwrZP/Mpz+8FAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU9jB8mUZMns+5oAEq2sau1MiSL0swHwYDVR0j
BBgwFoAU5aVRDH/Nlm4CSG0yVyv2vLG4/y4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkU3MDg2ODkwNENFRTdCQUNDNDgzNzlBQTNGMkUyNjkz
QUUxMzI5MTQxMUM1OEYzMzlCNDI3RjMzMEE5OEJGLzAvRTVBNTUxMEM3RkNEOTY2
RTAyNDg2RDMyNTcyQkY2QkNCMUI4RkYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE1NTEwQzdGQ0Q5NjZFMDI0
ODZEMzI1NzJCRjZCQ0IxQjhGRjJFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJFNzA4Njg5MDRDRUU3QkFDQzQ4Mzc5QUEzRjJFMjY5M0FFMTMyOTE0
MTFDNThGMzM5QjQyN0YzMzBBOThCRi8wLzMxMzgzNjJlMzEzNzM2MmUzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzOTM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC6sAUwDQYJ
KoZIhvcNAQELBQADggEBANwXOIbKxooXISHYf1V5ubhONZxEacXQIGLEeA7YcLMi
+wH5yM7w8274uxp9VkKnOznIdxLPaqGzvStRM+wNC2W1z7jBFnfGmV2cOGtpfy0m
V8oSohtjQUsGzoKzyFMhLzYOxbVTI7vymK7omhlnQTqrCjPzqeTooAPcwhPMzvvL
jpDZNQ/gPtDb7mgePXyT9aVUy+tdTnqbAyjPhMtmGer80fvTSCf2cs56kkNt7q7R
HF53KLYGfj6ESUP9OEEqRzuccldWrEza43Xuu5N11d8sKi2hvnjcAhVWHpo/ivpP
Hl/EnjM92ITL5WjvFduepKfquD9F846Z176XCmUEamc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:07:29 2025 by rpki-client