Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3139322e302f31392d3234203d3e203230323939.roa
File:                     3138362e33322e3139322e302f31392d3234203d3e203230323939.roa (raw, json)
Hash identifier:          C/PIHDAo+TQvUSde5dkGu8sHS8toZDzIMt3Z3Q+HcHw=
Subject key identifier:   74:F7:6A:9D:6E:CB:71:31:B6:48:A1:95:EC:37:8A:89:3A:57:28:BA
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       3F797D8BA6E8DB0332A9DF48D518EAF377352817
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3139322e302f31392d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 17:59:53 +0000
ROA not before:           Tue 05 Mar 2024 17:54:53 +0000
ROA not after:            Tue 04 Mar 2025 17:59:53 +0000
asID:                     20299
IP address blocks:        186.32.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:79:7d:8b:a6:e8:db:03:32:a9:df:48:d5:18:ea:f3:77:35:28:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:53 2024 GMT
            Not After : Mar  4 17:59:53 2025 GMT
        Subject: CN=74F76A9D6ECB7131B648A195EC378A893A5728BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:7a:77:a6:88:20:2c:61:3e:e5:93:e7:c5:
                    3d:96:70:0b:1a:6e:83:5f:1f:c6:9d:c5:72:50:69:
                    9b:3c:7e:60:5c:1b:f9:aa:cb:98:cd:b3:cf:5b:e5:
                    6f:4f:68:33:9b:6a:cd:70:15:a4:14:7a:76:19:e8:
                    08:fa:6e:e6:a2:54:73:39:19:80:fc:ec:38:f5:23:
                    3b:77:53:cd:d1:dc:5e:d1:dc:db:2f:0f:aa:82:de:
                    1d:a6:44:84:5b:d4:72:b1:16:be:5d:21:a8:71:5b:
                    2f:ca:2f:2b:df:fc:73:af:0c:c8:1f:7b:4a:6c:94:
                    de:f9:1a:e9:74:f1:b9:52:2c:56:a0:67:31:ba:55:
                    ec:e0:ca:c2:ff:13:a7:f7:32:62:ba:b4:c0:63:04:
                    46:c3:8b:07:da:e8:30:c2:77:35:16:3d:31:f5:c9:
                    cc:d1:14:c1:cd:10:a3:01:7c:ba:27:58:31:0e:96:
                    c6:2d:47:3c:bf:94:4b:22:2d:89:fa:83:b7:26:a5:
                    3e:b5:cc:56:cd:48:be:8b:4a:44:74:4f:1a:c2:af:
                    5b:83:a7:9d:47:c0:ba:34:53:0d:8e:14:4c:7c:1b:
                    e2:03:4b:d0:54:6f:d2:42:f5:ab:8b:63:a9:10:63:
                    f5:95:bf:a8:73:08:50:cf:84:63:0b:84:67:af:4c:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F7:6A:9D:6E:CB:71:31:B6:48:A1:95:EC:37:8A:89:3A:57:28:BA
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3139322e302f31392d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:e7:fb:5b:81:38:dc:03:98:52:9e:e7:a4:b9:91:5e:c9:41:
         8b:f2:d1:9a:61:37:7e:49:0d:4f:71:86:f3:8a:94:3a:29:e4:
         4f:1a:16:22:d5:1b:65:57:bd:e6:8e:6c:c9:a1:1f:8f:ba:ee:
         cb:ff:f8:f9:63:ce:19:64:7e:2f:4f:24:82:ff:76:9e:22:74:
         39:78:46:c9:81:b2:08:37:b9:60:57:60:7a:c4:e6:0e:9c:4e:
         34:c3:79:d0:a3:ac:20:99:7e:5c:dc:4d:70:82:35:3c:f1:14:
         b9:c1:e6:94:37:1f:1d:46:dd:db:e3:6e:42:38:fb:f6:26:46:
         2f:fb:5f:e1:9c:65:4c:60:2c:69:a5:68:5e:7e:b7:b0:9c:2e:
         42:3d:f5:87:95:4e:59:18:7d:35:b1:17:84:48:aa:9d:92:c1:
         ed:44:08:1a:f5:0f:2c:90:25:66:8c:fe:1b:4b:72:58:5e:cd:
         0f:59:1a:fc:96:66:2e:98:e3:29:70:5e:31:ac:7b:5a:7d:89:
         56:61:df:89:76:f4:f1:65:82:42:73:86:85:92:73:ba:3e:c5:
         ae:10:9e:67:a1:43:b6:33:3c:fd:40:e2:02:3a:71:6b:9d:69:
         b6:54:05:df:1a:fe:12:48:d0:6c:5b:3e:a9:94:95:93:d9:7e:
         63:66:4d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:25:22 2024 by rpki-client on console-fra.rpki-client.org