Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3234203d3e20323632323036.roa
File:                     3138362e33322e302e302f31382d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          AhIbITLR1AxGa7haZEKwdZ3myRZfoq1TOQp1AB/Mf9E=
Subject key identifier:   53:2C:62:E4:D1:FB:8B:08:AE:F0:0A:EA:F8:27:F0:0F:1A:90:55:FA
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       1206EA03B3B825EBE9177C16A17087B6E6C639B4
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3234203d3e20323632323036.roa
Signing time:             Tue 05 Mar 2024 17:59:49 +0000
ROA not before:           Tue 05 Mar 2024 17:54:49 +0000
ROA not after:            Tue 04 Mar 2025 17:59:49 +0000
asID:                     262206
IP address blocks:        186.32.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:06:ea:03:b3:b8:25:eb:e9:17:7c:16:a1:70:87:b6:e6:c6:39:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:49 2024 GMT
            Not After : Mar  4 17:59:49 2025 GMT
        Subject: CN=532C62E4D1FB8B08AEF00AEAF827F00F1A9055FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:01:b4:d0:a8:6a:d4:ba:d7:b9:7e:4e:df:
                    7b:dd:2f:f7:c0:e7:9c:aa:3e:7d:3f:c6:c6:ad:e2:
                    16:cc:b5:7f:d6:df:37:0d:f9:cd:9c:33:20:d8:6d:
                    43:37:3b:3e:f7:df:10:53:5c:41:26:8f:31:4b:ef:
                    4f:f9:1d:dd:d6:a4:b3:ca:16:e8:6b:c5:b5:6b:e2:
                    18:75:f6:5b:eb:83:60:d2:e4:20:ea:e9:1e:3e:d6:
                    7e:15:e4:53:e1:0a:9a:80:f5:8e:47:3d:64:0b:2b:
                    35:62:b9:5c:03:a0:29:8e:d6:4d:0f:7b:8c:5d:f2:
                    53:fa:27:c3:a2:a0:fd:6a:90:64:e5:d2:4f:33:bc:
                    81:bf:2a:b0:c3:a6:0b:e8:a5:cc:25:8b:87:b6:3d:
                    f8:7a:6c:3b:3f:2e:9c:a3:14:35:b6:dc:77:97:ad:
                    cb:e6:eb:47:34:f5:ab:fd:71:eb:c1:c5:23:aa:2c:
                    ad:6b:50:9b:0e:e0:0a:9c:c9:9f:c5:a3:43:45:29:
                    4e:fa:52:e6:53:a9:e6:21:b4:25:f2:a4:fa:59:fc:
                    2b:c0:45:17:46:7e:bb:3e:41:ec:eb:b1:58:a0:cc:
                    b0:eb:5b:b6:65:61:c3:07:fc:5a:18:85:29:d8:22:
                    57:b2:f6:3d:89:43:15:51:f1:c3:1e:4a:d4:01:e4:
                    1e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2C:62:E4:D1:FB:8B:08:AE:F0:0A:EA:F8:27:F0:0F:1A:90:55:FA
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:54:67:6b:13:3b:ca:7e:50:84:3b:16:90:2c:a0:0f:63:1b:
         2f:a8:4b:3b:f0:50:56:ba:1c:b4:af:ca:ea:aa:0d:bc:f9:14:
         01:86:bd:7a:89:d5:d9:eb:27:71:8f:d8:7d:40:06:75:96:5b:
         f9:e2:c6:d5:49:fa:79:72:06:f4:99:7b:38:d1:04:84:11:88:
         01:6f:96:60:4b:5d:69:eb:93:33:7a:4f:8e:08:c3:cc:2d:b8:
         fb:17:04:50:c6:7b:d0:24:0c:c8:66:ab:1e:9e:a6:b4:a6:ef:
         2b:bb:ca:25:6b:7c:a6:02:99:54:67:48:b0:33:17:0b:0f:c9:
         14:aa:74:36:6a:b7:29:29:cb:a8:b9:c6:20:39:d4:3c:b4:7f:
         02:36:2b:88:da:c0:2a:c5:46:ba:38:43:ac:eb:d5:ac:ff:a6:
         c3:b3:36:a2:2e:74:12:40:dd:8a:bf:7d:a2:0f:f6:5a:0e:59:
         5e:91:c7:c8:38:9e:75:d2:c8:be:c2:66:27:10:6a:31:1e:16:
         d8:1b:46:69:28:36:c2:ee:7d:c8:96:f9:0b:35:3c:5a:7f:fc:
         69:08:24:6d:19:9c:e8:99:c0:9d:92:c1:b8:73:af:fb:88:0a:
         06:14:e4:ce:9f:43:bd:15:17:e6:5d:4b:2d:60:64:b6:0a:cf:
         6a:30:db:b1
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUEgbqA7O4JevpF3wWoXCHtubGObQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBNTUxMEM3RkNEOTY2RTAyNDg2RDMyNTcyQkY2QkNC
MUI4RkYyRTAeFw0yNDAzMDUxNzU0NDlaFw0yNTAzMDQxNzU5NDlaMDMxMTAvBgNV
BAMTKDUzMkM2MkU0RDFGQjhCMDhBRUYwMEFFQUY4MjdGMDBGMUE5MDU1RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClAwG00Khq1LrXuX5O33vdL/fA
55yqPn0/xsat4hbMtX/W3zcN+c2cMyDYbUM3Oz733xBTXEEmjzFL70/5Hd3WpLPK
FuhrxbVr4hh19lvrg2DS5CDq6R4+1n4V5FPhCpqA9Y5HPWQLKzViuVwDoCmO1k0P
e4xd8lP6J8OioP1qkGTl0k8zvIG/KrDDpgvopcwli4e2Pfh6bDs/LpyjFDW23HeX
rcvm60c09av9cevBxSOqLK1rUJsO4AqcyZ/Fo0NFKU76UuZTqeYhtCXypPpZ/CvA
RRdGfrs+QezrsVigzLDrW7ZlYcMH/FoYhSnYIley9j2JQxVR8cMeStQB5B6ZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUUyxi5NH7iwiu8Arq+CfwDxqQVfowHwYDVR0j
BBgwFoAU5aVRDH/Nlm4CSG0yVyv2vLG4/y4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkU3MDg2ODkwNENFRTdCQUNDNDgzNzlBQTNGMkUyNjkz
QUUxMzI5MTQxMUM1OEYzMzlCNDI3RjMzMEE5OEJGLzAvRTVBNTUxMEM3RkNEOTY2
RTAyNDg2RDMyNTcyQkY2QkNCMUI4RkYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE1NTEwQzdGQ0Q5NjZFMDI0
ODZEMzI1NzJCRjZCQ0IxQjhGRjJFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJFNzA4Njg5MDRDRUU3QkFDQzQ4Mzc5QUEzRjJFMjY5M0FFMTMyOTE0
MTFDNThGMzM5QjQyN0YzMzBBOThCRi8wLzMxMzgzNjJlMzMzMjJlMzAyZTMwMmYz
MTM4MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa6IAAwDQYJ
KoZIhvcNAQELBQADggEBABBUZ2sTO8p+UIQ7FpAsoA9jGy+oSzvwUFa6HLSvyuqq
Dbz5FAGGvXqJ1dnrJ3GP2H1ABnWWW/nixtVJ+nlyBvSZezjRBIQRiAFvlmBLXWnr
kzN6T44Iw8wtuPsXBFDGe9AkDMhmqx6eprSm7yu7yiVrfKYCmVRnSLAzFwsPyRSq
dDZqtykpy6i5xiA51Dy0fwI2K4jawCrFRro4Q6zr1az/psOzNqIudBJA3Yq/faIP
9loOWV6Rx8g4nnXSyL7CZicQajEeFtgbRmkoNsLufciW+Qs1PFp//GkIJG0ZnOiZ
wJ2Swbhzr/uICgYU5M6fQ70VF+ZdSy1gZLYKz2ow27E=
-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org