Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3136302e302f31392d3234203d3e20323632323036.roa
File:                     3138362e33322e3136302e302f31392d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          bi5xj1wZkaFx8mA5oHMIMoOOwq5ACqe8g8eZuGVYaTM=
Subject key identifier:   B8:C2:BE:E2:38:5B:FF:76:F9:05:AA:44:19:D0:43:85:D8:20:04:52
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       3BA82A27C217D934C928B92A03E564ED50017F00
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3136302e302f31392d3234203d3e20323632323036.roa
Signing time:             Tue 05 Mar 2024 17:59:50 +0000
ROA not before:           Tue 05 Mar 2024 17:54:50 +0000
ROA not after:            Tue 04 Mar 2025 17:59:50 +0000
asID:                     262206
IP address blocks:        186.32.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a8:2a:27:c2:17:d9:34:c9:28:b9:2a:03:e5:64:ed:50:01:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:50 2024 GMT
            Not After : Mar  4 17:59:50 2025 GMT
        Subject: CN=B8C2BEE2385BFF76F905AA4419D04385D8200452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3e:7b:fa:29:0d:d9:da:a1:19:83:89:5f:3a:
                    31:0b:25:87:95:11:c5:a1:45:c2:a1:c2:93:e5:8b:
                    6e:26:ec:ef:0c:d5:7f:16:30:fc:15:de:44:fe:08:
                    20:c3:69:7c:7f:80:aa:9f:2e:39:6c:c2:40:50:c9:
                    3d:87:72:ba:f3:f8:63:6b:f0:14:04:49:73:5a:a6:
                    25:b8:5c:2b:65:75:d4:b1:04:53:f5:c2:fd:e0:01:
                    d7:92:b7:9e:60:a1:47:2f:6a:8c:ba:3c:55:62:06:
                    c3:c9:4d:21:c2:58:8c:96:8c:40:84:cd:88:6d:e8:
                    e1:93:dd:ad:32:0d:97:a8:b1:1e:2a:28:b6:32:ed:
                    00:f7:c6:48:22:52:f1:13:50:48:01:61:65:95:5d:
                    81:af:67:a4:1b:58:7d:6f:b5:38:83:43:bb:10:bc:
                    10:25:31:a9:cf:c4:5b:37:f8:63:ec:ba:dd:05:7e:
                    90:2e:c1:94:38:43:f7:f4:98:ef:5c:e6:f4:8c:fe:
                    0f:03:eb:e3:02:bd:7d:f1:c2:3e:9c:54:f8:9e:90:
                    e8:31:41:14:9e:87:80:78:20:07:7e:00:41:f8:1a:
                    1a:aa:22:24:b9:79:a9:84:33:53:50:0e:4f:bd:50:
                    cc:a4:e6:cc:4a:06:ec:d9:60:26:73:70:d7:46:2f:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C2:BE:E2:38:5B:FF:76:F9:05:AA:44:19:D0:43:85:D8:20:04:52
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3136302e302f31392d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         10:f5:41:c5:db:a1:7a:91:40:c5:d4:51:01:a7:ae:33:f9:77:
         21:ab:cd:ba:09:f3:e6:a0:a0:52:e8:4f:45:26:f5:8c:f5:2c:
         ca:62:4b:c3:f5:88:da:e2:f6:ff:8c:8b:af:d4:b9:01:20:31:
         75:9a:e1:3b:25:61:2a:7b:78:97:c1:01:5d:19:56:e6:ce:fb:
         4c:32:84:9b:dc:28:d9:cc:46:f9:44:42:da:73:f8:fa:07:ca:
         97:1c:76:1f:78:e8:da:c7:a2:c5:c1:d8:15:2c:ce:c2:9c:64:
         e2:ce:f3:03:5e:c6:3c:c3:8f:2e:df:80:e4:0d:33:5d:3b:66:
         e5:c8:1c:e1:7b:6c:7c:cd:90:37:e0:53:df:11:52:85:95:fe:
         88:b2:40:f1:d1:19:ce:de:35:07:e1:aa:e1:a2:bc:e3:3c:fe:
         0b:f4:7d:a0:cf:c7:6b:f7:b0:47:e7:07:45:13:b1:9a:5c:52:
         43:21:cd:c9:db:25:22:27:eb:70:2e:c1:5d:ce:7b:49:58:44:
         33:e7:d6:ea:a2:13:d1:82:01:bf:cf:19:2b:15:a4:a1:8c:1d:
         c1:86:ea:b0:df:08:d6:53:14:32:99:a7:07:a1:4d:5d:65:eb:
         6b:11:d7:ce:11:e3:76:62:d0:70:ed:ef:93:f7:da:b9:de:f0:
         20:9c:09:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:40 2024 by rpki-client on console-ams.rpki-client.org