Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e342e302e302f31382d3234203d3e203230323939.roa
File:                     3138362e342e302e302f31382d3234203d3e203230323939.roa (raw, json)
Hash identifier:          8ZqvLdhfQL/6ySJkEVRajMPG7l9Skfixd9jlnzMwRVY=
Subject key identifier:   D6:B3:64:28:A0:6E:3A:03:7A:A1:58:B6:50:A4:68:70:CE:20:06:9A
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       4566D02465F74BAA6B4979F9A0EFE807916EE48D
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e342e302e302f31382d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 17:59:55 +0000
ROA not before:           Tue 05 Mar 2024 17:54:55 +0000
ROA not after:            Tue 04 Mar 2025 17:59:55 +0000
asID:                     20299
IP address blocks:        186.4.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:66:d0:24:65:f7:4b:aa:6b:49:79:f9:a0:ef:e8:07:91:6e:e4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:55 2024 GMT
            Not After : Mar  4 17:59:55 2025 GMT
        Subject: CN=D6B36428A06E3A037AA158B650A46870CE20069A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:14:e3:64:38:a8:59:a0:99:77:37:9e:39:
                    d7:d5:64:ca:e5:c4:5a:37:61:94:64:58:b5:d1:26:
                    ae:16:d4:bf:ad:e7:23:7b:56:cd:d9:98:05:78:c9:
                    9a:71:0b:76:36:bd:b8:c1:14:ce:75:4c:0e:2e:5b:
                    0c:7d:a5:05:ac:67:a7:1e:f3:f7:c0:b6:d5:80:1a:
                    c9:ec:be:1f:a5:f6:d0:5f:b3:a3:af:c0:c1:22:6a:
                    b7:14:c8:d8:49:9d:93:17:eb:3b:23:ce:0d:89:f8:
                    2f:2b:32:ad:0f:bd:f6:46:e3:87:db:5d:33:73:48:
                    e8:47:e7:fa:17:b2:39:2b:67:f1:ce:f2:9a:21:3d:
                    0f:83:cb:7d:00:0d:95:59:e8:53:7a:69:3d:1e:41:
                    97:c0:f7:26:f9:a4:8d:bb:f4:ee:87:98:79:9d:c2:
                    21:07:08:e6:68:d2:c2:a2:25:4f:2a:43:3d:a6:6e:
                    5a:2d:64:2f:ac:f9:93:c9:45:85:e1:81:1b:3a:fc:
                    6f:aa:45:78:3a:9d:47:2b:d3:3a:97:7b:70:aa:50:
                    22:c0:2b:bb:77:d6:39:56:3c:0e:56:89:15:3f:54:
                    98:2e:15:79:da:26:94:9c:2a:8f:be:bb:83:1f:1d:
                    80:74:bd:f8:2f:20:34:cb:a7:a7:e5:e5:7a:b9:aa:
                    2d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B3:64:28:A0:6E:3A:03:7A:A1:58:B6:50:A4:68:70:CE:20:06:9A
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e342e302e302f31382d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.4.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3e:88:fd:2c:87:58:69:7f:eb:39:64:b4:34:ea:4b:c7:2c:12:
         37:64:75:75:fb:c9:38:49:37:10:20:19:f8:24:44:34:ca:82:
         52:45:40:5f:3e:7e:75:9d:62:ad:fc:49:b5:5b:76:bf:b4:de:
         dc:48:ff:c8:25:f8:97:77:4a:d8:00:9a:c6:bb:57:45:0c:92:
         b3:cc:5d:83:36:a1:db:30:b0:b7:9e:c9:46:a0:23:13:0c:05:
         2f:1e:4a:d7:f7:d5:16:7e:a6:1b:58:f6:ba:9d:73:94:72:81:
         ef:ca:4a:fb:76:13:c9:d2:e5:93:db:f3:66:27:0d:d1:d7:c9:
         ac:ef:55:74:a8:a3:3f:d0:1e:62:75:35:88:80:3b:4b:a8:13:
         78:a4:29:ad:fe:85:ba:fe:03:f3:dc:45:01:b5:e2:cf:00:05:
         f2:f0:3d:92:31:6f:3f:04:d4:03:ff:d9:8f:bd:3e:e6:d7:b6:
         3e:af:e6:6d:b9:4b:fe:4a:c6:db:55:2a:a3:52:d7:4b:f2:00:
         5e:9d:b5:f5:3a:14:0b:8b:98:79:4d:a0:3b:3f:b0:fd:44:dd:
         62:74:b9:a3:6c:8b:e3:cf:c4:88:21:3d:2c:25:c4:14:c0:56:
         4e:40:3c:70:37:a4:2e:39:61:32:12:86:bb:93:80:c1:73:11:
         e4:21:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org