Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e382e302f32332d3234203d3e203237373432.roa
File:                     3138362e33322e382e302f32332d3234203d3e203237373432.roa (raw, json)
Hash identifier:          6LSH7vdAslRLq7ddH49CEb6ReYGkjV0XhoQjdMcasKI=
Subject key identifier:   1F:A6:67:DC:9B:7A:02:35:CF:3B:EE:8C:96:8A:DE:7B:E5:F7:41:CD
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       4A34DE304EB5B8E7486092B2DF74FDE0648244DA
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e382e302f32332d3234203d3e203237373432.roa
Signing time:             Tue 05 Mar 2024 18:00:04 +0000
ROA not before:           Tue 05 Mar 2024 17:55:04 +0000
ROA not after:            Tue 04 Mar 2025 18:00:04 +0000
asID:                     27742
IP address blocks:        186.32.8.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:34:de:30:4e:b5:b8:e7:48:60:92:b2:df:74:fd:e0:64:82:44:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:55:04 2024 GMT
            Not After : Mar  4 18:00:04 2025 GMT
        Subject: CN=1FA667DC9B7A0235CF3BEE8C968ADE7BE5F741CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:40:9c:a6:b9:d9:1b:d5:00:b9:c6:28:0c:37:
                    ab:04:03:f0:c5:cb:40:63:79:17:e1:e5:f1:d4:43:
                    bf:4c:e3:a0:b9:71:fd:73:53:ac:f3:82:42:44:a2:
                    8f:00:70:50:18:90:29:f2:b1:de:4c:bd:92:95:49:
                    02:22:3d:b3:30:f7:9a:9c:2d:32:45:59:ff:60:68:
                    77:52:0d:64:36:c8:51:e5:d8:31:d8:6e:9a:72:65:
                    49:82:50:97:f4:0e:fd:f8:81:bf:55:36:88:d2:66:
                    b7:8a:4d:bb:f4:ff:6d:0b:a3:84:34:51:4e:cc:2e:
                    aa:db:28:3d:fc:34:89:81:16:da:f7:92:85:d0:dc:
                    9c:33:86:6d:4b:e2:09:21:79:23:6c:e1:d8:6f:cc:
                    09:21:34:14:0f:ba:e3:7e:84:52:bb:3f:a4:f5:80:
                    43:2e:1b:db:71:a7:99:07:97:4b:0c:f9:29:e7:ea:
                    80:d6:b5:15:ab:65:53:e1:40:22:65:8b:2a:22:e4:
                    3e:5a:f1:ad:45:ed:ec:bd:52:35:8b:0c:fb:d7:6c:
                    99:09:85:18:83:d7:f7:4d:51:38:d5:42:e9:3b:38:
                    67:5d:f0:b5:ed:eb:76:d1:0a:c5:39:de:d7:71:b2:
                    3d:a9:17:5e:95:c3:2f:0f:2e:47:f0:3b:2f:71:3e:
                    74:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A6:67:DC:9B:7A:02:35:CF:3B:EE:8C:96:8A:DE:7B:E5:F7:41:CD
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e382e302f32332d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:b4:2f:0a:61:81:2d:97:9d:80:af:3c:21:0f:f4:db:fb:d4:
         7f:bc:24:2e:2e:b9:c3:4a:f4:24:e6:94:03:b9:f6:7e:30:4e:
         b1:37:e4:49:0e:f4:93:bb:eb:6b:9d:c6:4c:5e:25:78:d1:37:
         b3:67:00:d0:a0:a3:fd:f9:81:c4:48:d5:0e:9a:72:d9:ec:6a:
         a2:fb:8b:1c:71:ee:4f:f9:45:42:95:50:46:37:df:23:75:e9:
         ef:61:ab:2c:4f:75:e0:37:5c:71:61:37:5b:61:da:1b:6c:73:
         fd:67:4e:7a:5f:33:fc:c2:34:01:87:3f:cf:1a:9a:de:d8:6a:
         6e:b3:c3:d2:61:62:1b:92:2f:ab:a7:67:7d:39:25:9d:9d:88:
         08:39:40:d1:05:2c:7d:20:ca:31:9b:9a:3b:ad:11:1c:fc:cd:
         9c:d6:d9:92:3c:22:7a:3d:f3:ac:d5:60:cf:3b:6b:8d:37:a9:
         00:f0:53:da:e1:42:aa:b2:5c:f3:95:a9:4e:c0:da:d5:80:e0:
         37:03:c6:b7:e2:a8:06:fb:15:4a:a6:04:31:d0:c1:8d:62:61:
         6f:c1:ab:43:b3:78:2d:e7:ef:1b:fa:82:4a:eb:c6:d7:e9:86:
         44:e0:25:ab:6d:56:7a:a3:f8:57:ed:db:64:c9:7a:23:16:b8:
         35:9f:81:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org