Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e3132382e302f31382d3234203d3e20323632323036.roa
File:                     3138362e3137372e3132382e302f31382d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          l+XhC21X2HD4EwFEHMl4iVeErI527LMVA6JXXDlymAw=
Subject key identifier:   10:A3:70:B6:64:8D:30:BD:22:64:B1:87:E5:04:3E:48:F2:08:CC:99
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       63758457B8A20E3F8DDD7D1B9F2BF6E565A03957
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e3132382e302f31382d3234203d3e20323632323036.roa
Signing time:             Tue 05 Mar 2024 17:59:56 +0000
ROA not before:           Tue 05 Mar 2024 17:54:56 +0000
ROA not after:            Tue 04 Mar 2025 17:59:56 +0000
asID:                     262206
IP address blocks:        186.177.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:75:84:57:b8:a2:0e:3f:8d:dd:7d:1b:9f:2b:f6:e5:65:a0:39:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:56 2024 GMT
            Not After : Mar  4 17:59:56 2025 GMT
        Subject: CN=10A370B6648D30BD2264B187E5043E48F208CC99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:32:ea:43:a0:23:32:50:91:97:7b:a8:3a:
                    fe:19:7b:2b:23:5b:79:29:09:54:25:7d:a6:0a:9d:
                    a4:00:67:67:d0:4e:3a:70:49:c7:ab:aa:fe:21:d7:
                    19:50:0f:fa:ad:a9:31:60:0e:05:5d:e5:4f:4c:db:
                    9c:bd:80:c1:fb:13:04:07:e5:ce:79:8e:d1:70:f1:
                    28:89:60:08:94:e5:15:d9:c1:25:6b:c9:04:da:8d:
                    33:14:21:e2:ed:6b:f7:46:32:d4:e2:76:52:0e:be:
                    5a:59:d9:5f:60:d5:da:3b:3d:b9:02:04:56:f3:36:
                    8d:6a:ac:55:7b:ea:39:df:13:02:d3:58:16:ce:81:
                    db:1c:a4:4a:8f:ed:0c:a5:2b:c4:6c:bc:43:8f:b2:
                    62:51:20:b8:41:08:bc:a9:ee:36:dc:a3:fb:20:cb:
                    03:1d:be:3a:59:91:4d:5d:87:31:88:8a:72:0d:b5:
                    f4:90:55:6d:00:88:07:3a:31:91:fa:bc:57:ac:17:
                    11:b3:26:02:a3:f3:0c:04:de:4a:6a:f5:ee:11:66:
                    3b:7a:32:54:a5:44:aa:a7:30:55:1c:9f:4d:90:b8:
                    26:ba:b1:99:50:87:b0:6a:c9:83:bd:19:57:08:7d:
                    c2:57:54:33:fc:f3:e1:c7:0c:59:d4:fb:7d:48:4f:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A3:70:B6:64:8D:30:BD:22:64:B1:87:E5:04:3E:48:F2:08:CC:99
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e3132382e302f31382d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ab:58:ac:26:92:6c:6c:5b:6c:d1:49:e2:6b:b1:d8:70:de:ef:
         38:e4:9a:f1:20:5c:b4:5b:10:2a:15:e0:e4:ab:0a:f2:a9:3e:
         07:2f:f6:ee:75:68:d7:1c:28:bc:34:f0:8f:b9:2f:f6:ed:eb:
         1d:33:47:2f:88:09:e2:74:59:6e:82:c2:dd:2c:20:06:c7:35:
         f5:22:ad:71:4c:59:e0:c7:0b:12:6c:3c:f8:ad:17:f4:05:ba:
         47:c1:02:4d:58:08:3a:48:ea:d4:f0:24:dc:23:60:6c:7a:6f:
         48:37:aa:a5:63:9e:91:9d:97:ba:0e:5b:1d:ff:b8:22:32:22:
         55:c7:6a:93:84:b9:eb:27:54:d2:6d:97:2e:2a:e4:a8:e7:24:
         a1:bc:e5:c2:c2:10:97:59:8d:4f:de:45:a9:06:85:f2:5d:6d:
         e7:33:76:aa:0f:48:6b:e1:e9:51:8b:d2:a8:5c:0e:54:fc:10:
         11:5b:a4:8c:55:da:9a:69:c6:76:b1:55:92:91:19:79:1d:d9:
         d7:c2:43:8a:a9:4b:6f:14:0b:b5:fa:e1:08:f5:63:7a:7d:04:
         fc:8f:d5:e3:4f:ce:96:e2:7c:0a:2c:61:d7:56:ae:76:1c:9f:
         78:5d:ae:75:30:6a:7a:c3:eb:5d:d5:f1:36:53:55:f8:29:58:
         b2:56:13:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org