Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e302e302f31372d3234203d3e203230323939.roa
File:                     3138362e3137372e302e302f31372d3234203d3e203230323939.roa (raw, json)
Hash identifier:          sznzJ5scCd4Os7/vCoeWPCOeTsSmPCbmJ2VuQB4zPW4=
Subject key identifier:   91:C6:B1:68:63:BC:92:FC:90:63:C7:2A:F9:11:9A:72:C6:6F:B4:FE
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       0550428F73AE1A0D6BA313A6DD70900BACF1BC01
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e302e302f31372d3234203d3e203230323939.roa
Signing time:             Tue 04 Feb 2025 18:14:23 +0000
ROA not before:           Tue 04 Feb 2025 18:09:23 +0000
ROA not after:            Tue 03 Feb 2026 18:14:23 +0000
asID:                     20299
IP address blocks:        186.177.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:50:42:8f:73:ae:1a:0d:6b:a3:13:a6:dd:70:90:0b:ac:f1:bc:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Feb  4 18:09:23 2025 GMT
            Not After : Feb  3 18:14:23 2026 GMT
        Subject: CN=91C6B16863BC92FC9063C72AF9119A72C66FB4FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:4d:ae:c8:46:57:37:22:67:ac:54:0b:4a:
                    32:93:5d:b1:fc:85:ce:29:88:b2:7e:16:ab:61:a6:
                    5f:c2:6c:b7:85:6f:70:37:db:46:13:17:e4:11:2c:
                    76:06:da:fc:10:5b:23:46:8f:3a:92:af:9b:75:e3:
                    12:a6:f3:dd:f7:bc:d1:86:40:e8:99:76:5b:43:27:
                    f4:c2:9e:fb:39:b7:45:43:cc:88:90:f7:1f:08:02:
                    2b:4f:78:aa:ca:83:73:59:67:9d:fc:e9:42:9b:d1:
                    d5:9c:d3:95:28:42:d9:d0:b9:f0:e6:65:6b:95:4c:
                    da:f0:43:e6:f1:95:9b:7f:67:80:40:c3:bf:3e:6e:
                    b2:be:c1:eb:e2:0f:68:71:a8:03:e8:ac:a9:57:44:
                    6a:1f:eb:ba:2e:9f:90:5b:46:f4:ee:6c:36:59:5f:
                    d2:a4:7f:2a:5d:01:7f:f0:45:aa:1a:4f:1e:44:e4:
                    e3:03:18:a6:2d:de:ce:2b:23:8f:2d:f5:ed:32:08:
                    11:67:2f:55:3f:13:cd:4a:0a:a3:22:b5:26:2e:55:
                    82:e8:a3:2a:03:38:0a:a8:f0:d4:8b:ea:e8:62:79:
                    21:ba:f7:fc:0f:2d:42:32:af:a6:cd:37:ca:a1:33:
                    ae:f1:49:33:ed:37:b8:76:3a:5b:e1:fd:10:57:ff:
                    cb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C6:B1:68:63:BC:92:FC:90:63:C7:2A:F9:11:9A:72:C6:6F:B4:FE
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e302e302f31372d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ca:66:c2:c8:64:04:90:90:91:51:a6:f1:c5:3a:28:41:67:4a:
         22:c7:74:63:40:0f:60:d4:d7:56:bf:09:cd:94:22:67:b2:48:
         cf:6b:33:e4:1f:ba:d9:a8:cb:c1:14:d5:59:96:d6:de:67:09:
         14:aa:2c:c3:a4:30:87:d0:42:26:3d:83:c9:b3:9e:44:33:c3:
         e5:2c:99:d8:7f:dc:29:7b:cf:b7:2f:b0:65:05:ee:45:95:a8:
         b0:16:52:d6:34:2e:ba:ea:a8:c9:4b:81:10:ea:9d:c1:77:fb:
         1c:d7:28:68:bd:fe:e2:84:5e:b9:9e:1a:5e:56:7c:d1:59:fc:
         a1:40:de:63:88:ed:d9:4b:2a:0f:ab:a7:a7:2f:11:f6:16:7c:
         3b:dd:03:2b:63:b1:a4:df:9c:09:fc:aa:9e:17:08:c0:71:76:
         b4:2f:31:04:ed:02:15:c5:c4:07:59:0a:94:07:ec:96:e7:38:
         98:11:48:25:e4:02:b0:d6:a8:c1:f6:45:a0:57:ce:07:2e:f9:
         d6:51:44:05:b4:70:23:79:35:0b:cd:b1:a8:6d:1a:b1:f8:7d:
         aa:e4:5b:5f:26:b0:70:48:a0:c7:83:db:95:19:40:28:ae:1c:
         88:13:47:65:5a:f6:f0:2e:b0:40:97:0d:91:1d:8c:1f:4d:f0:
         ed:28:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:53 2025 by rpki-client