Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e372e3234382f32392d3239203d3e20323632323032.roa
File:                     3138362e3137362e372e3234382f32392d3239203d3e20323632323032.roa (raw, json)
Hash identifier:          OlDgQDDta4K/zLntU0M5fK4VB9a8Cw1HKBllOtVnRoU=
Subject key identifier:   33:5C:47:52:AC:9D:5D:8C:34:B5:9A:FC:57:24:30:6D:B3:68:BF:1B
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       58FC575C695F5F19DC4C6AA514DFBBA316830102
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e372e3234382f32392d3239203d3e20323632323032.roa
Signing time:             Tue 05 Mar 2024 17:59:54 +0000
ROA not before:           Tue 05 Mar 2024 17:54:54 +0000
ROA not after:            Tue 04 Mar 2025 17:59:54 +0000
asID:                     262202
IP address blocks:        186.176.7.248/29 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fc:57:5c:69:5f:5f:19:dc:4c:6a:a5:14:df:bb:a3:16:83:01:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:54 2024 GMT
            Not After : Mar  4 17:59:54 2025 GMT
        Subject: CN=335C4752AC9D5D8C34B59AFC5724306DB368BF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:41:f5:99:4d:70:68:7b:2f:f0:19:b8:a1:
                    3b:e6:14:ee:9b:3a:60:d6:70:43:85:80:5c:ed:55:
                    bc:8d:02:18:a8:7b:44:bf:fc:bf:63:4e:67:09:38:
                    65:63:f5:f3:16:cd:ec:ee:b3:0c:d7:cc:a5:33:71:
                    f3:f0:ef:37:d0:a6:e3:7a:d5:f5:47:f1:43:b2:86:
                    7e:45:73:01:9d:d7:fe:a5:4a:e1:09:d7:c8:68:18:
                    4c:8c:0c:fa:91:b8:91:b2:26:9a:ea:8e:92:f1:dd:
                    ea:2c:2d:30:0f:b7:c6:b1:df:8e:c3:03:bb:11:77:
                    0e:09:30:af:59:dd:d7:c2:68:3f:2b:d5:1a:e8:fb:
                    df:20:25:97:93:fd:b2:55:15:58:d5:19:9e:54:ce:
                    a4:4e:49:fa:df:3d:31:eb:07:71:4f:70:27:57:72:
                    a0:fa:b6:b1:83:c7:33:77:d5:1b:79:cd:04:73:03:
                    d8:71:7e:13:00:f8:3e:16:b5:ff:41:1c:f4:37:35:
                    61:5b:3a:33:0d:9a:b5:a2:79:9a:37:8d:94:8d:91:
                    4e:36:39:8f:62:a9:c1:24:bd:0f:04:6b:3e:a1:ab:
                    3a:99:10:ae:80:a4:58:ee:7a:b5:7e:a1:52:91:75:
                    7a:47:e3:b4:52:20:25:50:be:ff:32:a7:63:23:70:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5C:47:52:AC:9D:5D:8C:34:B5:9A:FC:57:24:30:6D:B3:68:BF:1B
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e372e3234382f32392d3239203d3e20323632323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.7.248/29

    Signature Algorithm: sha256WithRSAEncryption
         c5:ff:f5:a4:5f:e0:42:7e:0a:d4:db:57:b0:13:f2:b1:83:61:
         0b:dd:7d:de:f5:2d:84:0c:4e:a7:62:a5:19:50:fc:e8:fa:cb:
         99:95:3c:fd:fc:f5:33:ff:ef:eb:9b:bc:76:9b:a1:7c:f8:e7:
         4e:ee:24:73:3a:fb:84:f9:06:2e:08:79:26:ca:58:fd:cc:9e:
         ae:3a:8c:97:ea:68:71:56:9f:a3:f7:8f:bf:88:ed:a6:53:87:
         ee:41:4a:bf:2b:5c:30:14:b5:c6:16:84:b2:94:50:49:0a:56:
         95:1a:49:50:f4:ec:f9:86:96:2c:9c:bb:b0:9b:10:12:6c:64:
         bd:78:62:b5:7a:c8:ce:c5:98:46:6f:a7:47:c8:f2:81:2c:e2:
         72:2c:e0:49:e9:b0:8e:b1:94:95:10:28:e8:34:6a:bb:a7:91:
         6c:a5:f2:30:e4:d6:1b:f2:6f:56:97:da:6f:3f:ff:bf:e2:a8:
         dc:d8:d3:4c:55:34:b6:e1:93:18:82:4f:3c:3b:52:47:9d:21:
         27:3f:49:de:d6:d4:23:cd:1f:5d:c9:8a:a0:90:af:05:2a:59:
         6f:40:99:bf:3c:6e:05:84:20:ef:12:e8:91:0b:49:40:22:e4:
         fa:83:00:a2:69:b3:5f:b2:c9:a4:9b:cf:71:00:3d:68:2e:b1:
         73:f2:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:40 2024 by rpki-client on console-ams.rpki-client.org