Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e302e302f31372d3234203d3e203230323939.roa
File:                     3138362e3137372e302e302f31372d3234203d3e203230323939.roa (raw, json)
Hash identifier:          WhYoOIBQplW6tFO7Il7cZu8mqqBHd7Lm4voqKXqCuEc=
Subject key identifier:   67:F8:50:52:8A:0D:06:49:71:CF:74:F5:4A:91:3F:2A:3B:76:68:39
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       4830EC1B29D6EC2814CE9B2F319F5B849179723D
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e302e302f31372d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:00:02 +0000
ROA not before:           Tue 05 Mar 2024 17:55:02 +0000
ROA not after:            Tue 04 Mar 2025 18:00:02 +0000
asID:                     20299
IP address blocks:        186.177.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:30:ec:1b:29:d6:ec:28:14:ce:9b:2f:31:9f:5b:84:91:79:72:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:55:02 2024 GMT
            Not After : Mar  4 18:00:02 2025 GMT
        Subject: CN=67F850528A0D064971CF74F54A913F2A3B766839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:df:42:9f:df:5d:e4:ca:24:55:e9:67:91:
                    26:4a:5d:3d:80:c0:d2:16:03:5e:18:9a:1f:12:26:
                    49:c6:30:65:98:76:82:fc:15:96:22:92:7b:0d:c6:
                    d8:b9:ee:bf:53:57:8a:bd:8d:25:ee:ee:3b:90:f0:
                    35:4a:e8:a7:bd:f4:3d:ba:57:7a:b8:5b:b7:88:90:
                    88:0d:8b:b9:98:39:7b:06:21:15:dc:61:b9:db:10:
                    ed:05:6b:56:c6:90:fa:9f:eb:5c:a0:48:5e:69:eb:
                    3c:81:96:46:3a:5d:c3:cf:3d:91:80:f6:d9:c0:6e:
                    53:41:36:6f:50:68:ec:88:1d:05:7d:c3:03:80:6c:
                    38:15:e2:18:49:92:85:1b:7f:e3:38:dd:97:c6:53:
                    d0:ca:65:d2:71:32:8e:20:7e:19:2e:da:d4:37:0d:
                    91:20:ee:3b:13:86:fe:41:d3:59:48:c9:c4:41:17:
                    d5:6d:40:19:c8:8d:1c:cb:0d:82:d4:5e:0c:1f:73:
                    ea:e9:24:2d:b8:a6:62:c6:e0:ef:57:81:09:db:76:
                    be:a5:09:4a:7c:a1:5a:e4:75:aa:37:4a:db:07:ff:
                    1c:93:d8:79:ab:78:a1:ab:60:da:19:fe:8b:3e:4e:
                    c2:01:84:1d:d5:8a:31:3b:91:35:50:a5:41:16:74:
                    54:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F8:50:52:8A:0D:06:49:71:CF:74:F5:4A:91:3F:2A:3B:76:68:39
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e302e302f31372d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a8:7c:33:95:63:e0:1d:e2:7f:0a:40:8a:08:21:2e:3d:5e:32:
         84:8d:96:a3:3d:89:07:01:93:2b:ac:c9:ce:f9:cb:f7:19:e6:
         df:c9:fa:38:cc:e9:1a:b8:e8:58:6e:0c:6e:49:2e:55:94:9c:
         7c:40:2c:f1:19:5b:41:39:b4:0d:ed:15:12:7b:7d:96:5c:8a:
         80:6a:62:1d:52:bb:c9:49:ca:ee:91:10:0f:4f:12:dd:38:98:
         d3:1c:2d:d0:f6:43:05:f2:ca:f0:13:b6:ed:22:41:11:40:e8:
         80:5c:87:73:eb:fb:df:f2:49:b7:ac:67:eb:25:e7:12:5c:e8:
         c8:30:fd:c9:da:8f:6d:03:d7:cf:be:67:c9:93:bc:66:36:1d:
         6b:ae:b3:aa:d2:71:ad:0d:aa:e4:dc:72:a9:2a:a9:13:cd:e5:
         ec:a8:22:2b:42:71:82:37:c4:34:8e:00:4a:41:39:21:ee:b8:
         41:93:31:d5:75:46:79:28:33:ae:a8:e9:f5:1c:a4:ed:d5:89:
         47:e4:6c:b3:58:8d:fc:f7:79:a2:b6:83:ca:35:9c:d9:d1:df:
         ff:c0:30:4b:4e:25:5e:c4:bd:dd:ef:28:34:d2:2e:95:fc:39:
         16:72:18:17:4a:9e:7b:81:b1:86:b4:ed:65:c0:88:8a:e0:cb:
         d9:08:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org