Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139342e302f32342d3234203d3e20323636383734.roa
File:                     3138362e352e3139342e302f32342d3234203d3e20323636383734.roa (raw, json)
Hash identifier:          1pFsSHxmOYOsydrajKcGlHnG6vvxafvRl7StfaD4pWA=
Subject key identifier:   46:A9:D8:7E:96:CA:39:B5:FB:A5:85:FA:6A:3B:5C:E6:12:7B:AA:BE
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       323705AA6BD93BCAC00383AF4F248B68D9CF01BB
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139342e302f32342d3234203d3e20323636383734.roa
Signing time:             Sat 07 Dec 2024 16:25:00 +0000
ROA not before:           Sat 07 Dec 2024 16:20:00 +0000
ROA not after:            Sat 06 Dec 2025 16:25:00 +0000
asID:                     266874
IP address blocks:        186.5.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:37:05:aa:6b:d9:3b:ca:c0:03:83:af:4f:24:8b:68:d9:cf:01:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Dec  7 16:20:00 2024 GMT
            Not After : Dec  6 16:25:00 2025 GMT
        Subject: CN=46A9D87E96CA39B5FBA585FA6A3B5CE6127BAABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c8:bb:8c:c2:91:85:72:35:7c:9c:50:9b:50:
                    91:d5:c2:f3:52:43:b8:34:fb:55:41:9d:bd:81:28:
                    df:88:31:3e:ab:af:bc:d7:c0:3d:5e:a9:d7:de:21:
                    db:72:ac:12:45:46:29:4d:a7:2e:bc:cb:3d:be:70:
                    48:cc:a7:6b:1a:27:15:b6:72:c0:ba:6a:5d:63:b0:
                    6e:b2:59:90:95:cc:fd:1e:a7:04:b5:4a:65:62:0a:
                    ad:28:17:90:67:87:90:de:d0:fe:54:86:0e:ff:3a:
                    91:ca:ac:1b:ea:e9:88:94:4c:0b:14:21:2b:8d:ec:
                    5f:a8:aa:e4:89:57:e7:36:f2:ca:9a:32:de:3a:4b:
                    99:10:d7:39:9f:b9:7a:88:d6:f4:5f:22:0a:a8:2a:
                    c4:e2:4a:6e:12:58:d2:c4:ba:f2:a9:07:a2:57:1e:
                    3f:af:89:0f:7a:82:64:64:1f:7b:0f:78:4a:14:8b:
                    67:a0:54:7e:0a:97:8e:01:1f:54:16:af:87:e0:b4:
                    4c:05:81:2c:0f:0f:f2:7c:bb:74:1f:23:9c:d4:d7:
                    23:04:57:a5:4e:12:d7:35:f2:af:37:70:84:e0:c7:
                    d7:af:9f:1e:bb:93:e4:29:79:98:2c:8a:08:ae:bf:
                    13:22:89:43:da:d4:05:97:4d:25:c0:0a:a6:1c:ca:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A9:D8:7E:96:CA:39:B5:FB:A5:85:FA:6A:3B:5C:E6:12:7B:AA:BE
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139342e302f32342d3234203d3e20323636383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:6c:02:71:91:d2:5e:e9:26:e3:ac:24:be:fe:2d:c2:02:a1:
         03:30:fa:34:8a:78:d3:91:e7:1b:1d:60:c3:5b:0e:a7:29:19:
         9a:c9:46:49:24:66:5d:cf:0d:2a:65:97:46:db:7c:16:2a:74:
         bd:89:16:09:e3:8d:6c:f3:b3:b8:69:98:de:c7:37:ba:22:2e:
         da:9e:6a:64:53:12:b6:20:0f:05:48:c9:48:e1:87:c4:ad:c4:
         cc:2c:96:db:67:7a:bb:98:93:12:c3:4b:60:6a:01:7e:7b:db:
         7a:1a:1a:19:a8:bb:7c:fd:0a:1b:80:02:3b:ab:db:63:29:00:
         24:cc:37:db:81:07:86:7e:37:0b:dd:a5:15:cb:69:07:76:4c:
         ba:c8:c8:08:56:7b:7f:37:83:7c:d2:3a:9e:4d:00:dd:3c:4d:
         40:9b:2e:bb:4d:a4:93:8a:e2:c9:1a:0f:5f:3d:b9:87:d6:fe:
         2a:82:24:92:ef:34:45:a8:c2:e5:b3:28:6e:37:2e:ae:48:48:
         da:99:ec:7c:39:8c:16:ca:84:e9:06:c3:6b:f3:be:f6:90:78:
         e0:47:ee:7c:77:6f:3b:2f:b4:a5:d0:d9:d7:21:53:2e:ae:08:
         e7:09:d8:be:32:77:a9:05:96:3f:3e:57:35:9d:17:66:53:82:
         16:31:cd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:59:11 2025 by rpki-client