Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3139322e302f31392d3234203d3e20323632313937.roa
File:                     3138362e33322e3139322e302f31392d3234203d3e20323632313937.roa (raw, json)
Hash identifier:          rAcVZoh3ziQP0c/GaMeJsKzKML0Wt2pQoQbWnc2OBaM=
Subject key identifier:   1E:3B:9C:0D:1F:43:39:D7:92:4A:36:6E:FF:EF:12:7F:85:5F:01:A2
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       32499AC52A9936B803DEF75BA68154E0B824B9D1
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3139322e302f31392d3234203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 18:00:02 +0000
ROA not before:           Tue 05 Mar 2024 17:55:02 +0000
ROA not after:            Tue 04 Mar 2025 18:00:02 +0000
asID:                     262197
IP address blocks:        186.32.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:49:9a:c5:2a:99:36:b8:03:de:f7:5b:a6:81:54:e0:b8:24:b9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:55:02 2024 GMT
            Not After : Mar  4 18:00:02 2025 GMT
        Subject: CN=1E3B9C0D1F4339D7924A366EFFEF127F855F01A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:66:18:94:41:9a:6b:0d:50:23:c7:d8:0d:
                    90:c4:da:25:99:62:72:fd:8c:16:1f:12:0d:15:f6:
                    ca:56:87:52:ff:bf:70:59:7d:ba:41:8a:39:82:20:
                    44:c9:f2:b5:0f:73:37:9f:b5:f5:26:14:b5:04:35:
                    44:15:a6:b2:92:64:17:73:2f:83:63:f1:62:9a:ea:
                    72:1b:4a:36:ac:8a:82:c1:a6:91:a9:3c:1d:1b:71:
                    52:10:5a:9f:c9:21:ed:c3:82:2c:c8:c6:b1:81:ad:
                    e9:be:fc:c9:47:0f:7a:4e:b0:89:77:e0:b9:2d:e4:
                    6e:7c:db:b6:65:72:ce:11:da:3f:16:74:e5:13:e6:
                    a8:b8:d3:ce:22:8f:07:65:0e:c1:27:59:10:27:5d:
                    35:2d:a1:50:cf:24:d6:ab:b7:ec:62:68:33:c7:e6:
                    79:70:8b:06:ef:5f:1b:4d:31:e2:d9:7f:71:43:ec:
                    a9:a3:d4:3b:4a:c8:ae:21:c8:6c:90:1d:84:a5:34:
                    f0:e4:26:57:41:0f:c7:d3:7a:eb:fe:e0:1f:f4:07:
                    7c:8f:77:01:0c:df:a9:4c:1c:ac:3c:21:64:55:e8:
                    10:de:d5:d2:db:12:6f:71:c3:fe:63:7c:64:aa:0e:
                    ab:74:d2:b9:e5:80:08:bf:14:88:7c:75:4d:2a:92:
                    75:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3B:9C:0D:1F:43:39:D7:92:4A:36:6E:FF:EF:12:7F:85:5F:01:A2
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3139322e302f31392d3234203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         40:63:ea:e2:c4:4c:b6:8a:8d:aa:9b:77:d1:5f:d8:82:a3:c1:
         f9:50:37:0e:1e:81:0c:75:1a:ec:be:a2:5a:aa:5d:77:a7:39:
         f6:92:53:40:e8:4d:86:51:58:c6:62:a3:7c:9f:1c:5d:f6:1e:
         b5:00:d1:b9:3c:5a:88:bf:2f:26:a1:90:0a:23:9b:19:f0:44:
         8b:a9:03:2c:3f:d0:92:0a:4c:d1:82:0e:8a:69:39:c5:3a:f9:
         15:79:8b:18:1c:c9:24:90:0d:0b:ee:c5:a5:9b:82:24:00:14:
         f3:d0:87:21:c0:fb:e7:8f:26:99:62:80:1c:ba:dc:ff:59:21:
         71:52:b8:ae:56:6c:49:ef:b1:a2:ea:70:04:3f:81:c5:79:2c:
         02:d3:91:70:44:5c:93:99:3a:fd:9e:96:20:47:84:42:cb:74:
         51:69:fb:cd:a3:f7:aa:1f:5e:ca:ce:c4:fc:cc:75:81:62:1f:
         b5:64:59:f1:a0:63:52:7d:c3:ef:7a:f5:b5:ba:f0:d8:eb:65:
         b6:a0:3a:2f:68:e2:0b:ee:89:f1:52:38:65:87:c9:41:76:95:
         f8:fb:94:b4:de:57:1b:dc:bf:f1:88:e3:af:15:3d:5d:c4:5f:
         88:b8:33:81:6a:4c:a2:e0:90:30:54:8b:b4:da:99:b5:4f:f9:
         9a:e2:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org