Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139322e302f31392d3234203d3e203237393937.roa
File:                     3138362e352e3139322e302f31392d3234203d3e203237393937.roa (raw, json)
Hash identifier:          5MczNZs3mdV5c21lpxDgW8f52KZIv6fIL0LKtUiSWN4=
Subject key identifier:   15:A5:3D:AC:B5:F7:10:DF:BE:4F:4B:DD:43:D4:42:12:09:40:96:9C
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       6D05CF8CBF57E75CC42B2B6EE3BBAD03CEC27EAE
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139322e302f31392d3234203d3e203237393937.roa
Signing time:             Tue 05 Mar 2024 17:58:56 +0000
ROA not before:           Tue 05 Mar 2024 17:53:56 +0000
ROA not after:            Tue 04 Mar 2025 17:58:56 +0000
asID:                     27997
IP address blocks:        186.5.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:05:cf:8c:bf:57:e7:5c:c4:2b:2b:6e:e3:bb:ad:03:ce:c2:7e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Mar  5 17:53:56 2024 GMT
            Not After : Mar  4 17:58:56 2025 GMT
        Subject: CN=15A53DACB5F710DFBE4F4BDD43D442120940969C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:83:e9:ac:ba:75:b4:c5:6d:0f:54:ba:40:
                    04:fa:80:8d:e7:b5:ee:df:ba:3b:31:ae:cc:90:84:
                    c0:7a:43:cc:87:a1:e6:c0:e1:49:14:7b:65:28:9d:
                    39:0e:0f:13:45:2b:c1:5b:c6:1e:f7:ac:e4:d7:b5:
                    af:82:3d:89:21:cd:7d:1d:77:36:b1:5f:29:ee:c8:
                    e9:9b:10:73:93:33:38:3b:aa:da:07:ca:29:58:0d:
                    f4:fc:57:4c:2b:c5:de:29:f2:8d:e9:8f:dd:6e:f2:
                    3a:22:b7:ef:ee:96:df:36:5f:77:2f:a5:8c:3f:42:
                    46:5d:e3:68:f7:71:f7:41:22:70:09:b6:07:8c:d6:
                    4a:98:ec:c5:60:ac:09:0d:5d:5d:1d:54:a4:a6:be:
                    8f:8a:ee:e8:8b:4b:4b:92:59:33:54:30:bf:b4:5e:
                    da:70:1d:53:b6:f0:c7:f1:d6:52:18:7c:c0:4d:d3:
                    2e:f9:e0:a0:6e:23:93:7b:fd:bb:cc:88:41:dc:94:
                    bd:ab:6d:b2:1d:3b:cd:09:3b:af:11:40:b4:d4:6e:
                    4b:f0:4b:90:6f:29:b0:6b:29:c9:f8:f2:a1:06:3f:
                    7b:4b:07:1e:c8:d8:43:7a:a9:dc:f8:b0:99:fb:7a:
                    fb:29:16:f1:6c:41:ff:c1:fd:02:21:1f:93:99:6e:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A5:3D:AC:B5:F7:10:DF:BE:4F:4B:DD:43:D4:42:12:09:40:96:9C
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139322e302f31392d3234203d3e203237393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:1a:79:32:09:50:79:68:6c:b4:de:0a:b4:df:a4:05:59:74:
         f0:2f:b2:7b:d9:6e:d8:a5:a8:eb:2b:06:24:16:eb:e0:42:49:
         6b:1a:11:d2:c7:28:7d:fb:dd:b3:d4:49:2e:77:53:e0:b0:7e:
         56:07:16:2c:5f:e5:9a:ff:6d:e7:c4:cc:15:27:ac:be:f5:9e:
         48:97:9e:c3:cc:63:0b:3c:d5:96:28:87:d6:16:95:e4:4d:05:
         f7:4b:d7:fe:d8:c8:b0:c5:da:6a:94:ee:07:66:e9:c1:18:1b:
         83:86:60:f6:9e:fa:b8:4d:53:7f:81:69:61:64:69:99:a6:70:
         47:f1:bd:87:9a:d7:32:76:38:39:ef:a0:4b:a3:bb:75:60:ff:
         8f:ca:86:34:01:ca:3c:6a:5e:89:95:a1:32:d1:37:61:92:7d:
         33:09:52:b0:81:f8:c7:76:ac:54:df:b3:00:75:58:01:59:ab:
         54:18:a0:b6:ba:3c:3a:3c:ff:9a:6a:97:49:26:88:f1:2a:0e:
         06:85:d5:8c:c0:01:60:1d:c8:d8:d4:47:c4:8d:3b:08:53:7a:
         74:bc:dc:71:ad:48:c4:ec:92:74:88:86:36:ad:cd:3f:0b:4d:
         6e:c9:fe:98:3b:b8:d8:ab:37:18:37:17:88:a9:1c:03:d2:77:
         c9:da:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org