Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3234203d3e20323632313937.roa
File:                     3138362e33322e302e302f31382d3234203d3e20323632313937.roa (raw, json)
Hash identifier:          WDqR/VrNsawPPt2ai8E+37O3YbKvzq/r8yRKXvlZP44=
Subject key identifier:   71:C2:2D:56:AB:A1:B7:03:B3:14:C4:E9:C1:48:A4:95:BD:11:ED:AB
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       2E7DDB04F3E5A53177BAC2DE1F799418A457B687
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3234203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 17:59:49 +0000
ROA not before:           Tue 05 Mar 2024 17:54:49 +0000
ROA not after:            Tue 04 Mar 2025 17:59:49 +0000
asID:                     262197
IP address blocks:        186.32.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7d:db:04:f3:e5:a5:31:77:ba:c2:de:1f:79:94:18:a4:57:b6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:49 2024 GMT
            Not After : Mar  4 17:59:49 2025 GMT
        Subject: CN=71C22D56ABA1B703B314C4E9C148A495BD11EDAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:c4:d2:9f:16:ee:be:2b:bf:a9:68:69:1b:
                    09:a1:a9:51:41:66:bc:3d:cc:38:cc:f1:2a:d0:93:
                    27:73:c2:00:72:23:e3:7a:4d:53:aa:84:52:16:b5:
                    74:a1:5b:9a:21:78:06:4b:7e:c5:59:fe:6e:3f:14:
                    30:84:89:cf:92:52:6c:42:68:94:07:c2:b2:82:4c:
                    8b:81:45:0a:5c:4d:26:9d:42:df:53:88:7e:5d:cc:
                    37:6c:19:7c:00:71:99:3d:0d:11:98:83:f4:6f:b6:
                    01:af:a2:e8:26:51:7a:67:78:60:fb:32:a4:9a:bf:
                    59:ae:a3:d2:13:6c:49:c6:a3:66:90:39:9a:a2:61:
                    d7:ce:a7:01:50:24:28:e3:2e:1d:ff:8b:11:d2:6c:
                    28:64:dc:c9:16:4a:ac:cb:04:82:89:fb:e0:1c:05:
                    61:0b:63:06:35:28:9e:fc:d2:9f:d1:27:c6:a3:17:
                    08:27:69:76:7c:8b:be:78:7b:80:c3:5f:99:7e:81:
                    13:f7:2f:9e:a5:0c:24:b6:4f:bd:18:59:96:4a:ea:
                    27:84:e2:11:cb:ca:1e:ed:a8:31:d1:aa:f6:a7:37:
                    39:ca:4c:eb:f3:42:8f:d0:40:7f:b1:06:b9:ec:a7:
                    81:21:f6:cf:3d:b3:bd:1e:68:ac:15:fe:50:41:00:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C2:2D:56:AB:A1:B7:03:B3:14:C4:E9:C1:48:A4:95:BD:11:ED:AB
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3234203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6c:c8:2c:f1:e2:7e:f4:a3:e3:ee:c2:37:96:dc:8f:82:f6:83:
         95:4b:68:7b:a6:3e:89:7e:7d:98:61:7a:6c:42:7a:b9:cc:a1:
         7f:ae:76:23:e0:60:98:d6:f6:a6:47:49:bc:c2:24:bf:4d:4c:
         32:ea:7e:86:31:57:db:41:a4:d0:2a:3f:34:97:fb:bc:e9:2a:
         1f:ef:a1:10:3d:f2:b1:cf:b2:76:c8:bc:11:5f:3e:0e:f3:1c:
         89:13:02:55:95:2a:96:d5:3b:b4:10:ef:a2:4a:8e:bd:d3:cc:
         14:68:05:1d:35:d4:38:6b:c5:21:07:b4:69:52:e1:a5:cd:4a:
         65:bb:3f:01:21:35:0c:65:d5:ac:d1:42:c1:95:12:d3:b1:42:
         fe:c5:56:dc:e3:c1:d6:fc:74:a9:35:3f:6d:ff:1e:ec:90:90:
         52:14:ac:49:27:2b:12:7b:cf:41:a2:25:0d:63:cb:28:b2:24:
         76:e0:28:78:84:40:ab:ed:d9:f1:47:c2:2c:55:65:4b:aa:78:
         5e:c7:f4:74:1b:b9:ea:63:11:63:0c:af:5f:a0:06:e0:97:e0:
         00:c0:d0:27:3f:7d:d4:db:8b:21:25:a1:4e:78:8e:93:32:63:
         f8:07:7c:e6:be:f3:0a:ec:d7:e7:ad:06:1c:65:66:51:dd:8c:
         7d:88:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org