Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e32322e302f32332d3234203d3e203136393733.roa
File:                     3138362e3137372e32322e302f32332d3234203d3e203136393733.roa (raw, json)
Hash identifier:          qNP9JzreloHfcJncc2NAwLi8B/JnUqSstnxzCb5pllI=
Subject key identifier:   1A:30:C4:61:3C:55:F3:73:BF:83:55:B2:20:B4:5A:C8:E2:CA:08:9B
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       28FB1FFD7145E2339C8E3E4037C1051BC2A6FDF5
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e32322e302f32332d3234203d3e203136393733.roa
Signing time:             Tue 04 Feb 2025 18:14:28 +0000
ROA not before:           Tue 04 Feb 2025 18:09:28 +0000
ROA not after:            Tue 03 Feb 2026 18:14:28 +0000
asID:                     16973
IP address blocks:        186.177.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fb:1f:fd:71:45:e2:33:9c:8e:3e:40:37:c1:05:1b:c2:a6:fd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Feb  4 18:09:28 2025 GMT
            Not After : Feb  3 18:14:28 2026 GMT
        Subject: CN=1A30C4613C55F373BF8355B220B45AC8E2CA089B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:7f:e7:10:08:b0:89:82:0b:f6:71:e0:4a:
                    43:92:44:12:ab:40:30:b4:05:48:c9:1b:a9:12:92:
                    55:1c:c7:90:16:5a:67:d9:05:42:7e:be:b0:67:d6:
                    51:a2:25:48:3b:68:a3:9e:81:bf:21:b0:1e:0f:6c:
                    08:f3:25:f1:90:8f:d0:a8:f0:38:f6:92:d0:b6:95:
                    10:d0:b6:e4:9b:64:f3:39:d1:76:a6:1a:71:c5:e2:
                    22:c3:c4:f6:12:a8:66:1b:10:d9:c5:b2:fc:4b:b3:
                    2d:27:2e:b4:64:d9:9a:ba:02:75:20:77:7d:31:f1:
                    d4:c2:6b:43:d9:61:e3:bd:6c:f8:bd:3d:cf:52:3e:
                    1d:37:3d:68:77:92:66:31:2e:b2:99:4a:45:0d:16:
                    00:4b:bb:9a:95:1e:e8:40:5d:11:e8:73:32:2f:ff:
                    2e:4f:80:4f:4e:8e:dc:d1:fe:0f:e1:17:fc:b8:24:
                    ee:1c:a4:70:1a:14:de:35:65:bd:22:8c:d2:db:78:
                    72:3b:39:27:23:b9:65:98:b6:f6:f6:4a:6f:77:8a:
                    a9:bf:4c:99:d9:91:aa:7d:df:d5:4c:be:99:a0:f0:
                    53:20:5f:9f:7c:45:2e:97:08:4a:71:53:7f:3c:1f:
                    bc:45:15:91:79:9b:40:68:ef:79:9a:1b:0d:87:41:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:30:C4:61:3C:55:F3:73:BF:83:55:B2:20:B4:5A:C8:E2:CA:08:9B
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e32322e302f32332d3234203d3e203136393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:38:ef:8a:0b:09:31:33:31:ef:5f:e0:c6:54:b5:c3:fe:51:
         15:93:0b:f7:47:c8:5a:0c:88:d0:8a:ec:29:65:09:c9:7f:e2:
         b9:54:9f:d0:a6:64:e3:94:3e:0b:75:41:54:e5:c5:30:2e:b2:
         87:de:80:bb:67:8c:a8:4e:c3:ee:3b:49:f2:ff:5a:6e:eb:b8:
         1c:63:f2:de:78:b0:42:1e:4c:18:5b:cc:7b:43:05:9f:c6:88:
         57:3f:a1:ff:96:48:e5:be:5b:19:91:81:19:b8:71:da:77:bf:
         6d:fe:86:11:e7:dc:50:9d:da:38:7b:e5:a9:d8:0a:c7:ea:99:
         63:49:57:e9:95:8c:a1:f5:46:b2:f2:d8:e0:d4:93:01:85:58:
         46:86:fc:e1:34:bb:f1:9e:d7:3d:8e:b3:9c:b3:5b:31:3d:74:
         e0:3e:ed:fe:c1:3a:26:ee:cf:e8:d6:3b:59:ca:6a:6a:0d:fc:
         e6:15:57:bd:a7:d1:7c:62:a4:12:9c:0c:e9:db:27:7b:62:43:
         5b:05:15:13:c8:cb:67:64:5b:83:c1:c9:87:e0:ea:60:f6:9b:
         e7:f0:58:16:a2:c2:a7:fe:e5:9c:d0:12:c0:35:d0:c4:2d:68:
         72:4c:6f:8e:3f:3f:a9:35:9a:cd:b6:24:87:b3:fa:08:f5:70:
         4f:b0:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:26 2025 by rpki-client