Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231372e302f32342d3234203d3e20323733393731.roa
File:                     3138362e352e3231372e302f32342d3234203d3e20323733393731.roa (raw, json)
Hash identifier:          MFbD2JW4xY31MsrwFa19GU1lFh402QRPzGICzG1uq3M=
Subject key identifier:   5E:0E:C0:BC:F1:41:0A:8D:C5:4B:63:58:AB:73:03:F9:E0:AE:37:A4
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       144E58ED2634DF417614B058E44FF89AC6DD2532
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231372e302f32342d3234203d3e20323733393731.roa
Signing time:             Tue 10 Dec 2024 19:05:00 +0000
ROA not before:           Tue 10 Dec 2024 19:00:00 +0000
ROA not after:            Tue 09 Dec 2025 19:05:00 +0000
asID:                     273971
IP address blocks:        186.5.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4e:58:ed:26:34:df:41:76:14:b0:58:e4:4f:f8:9a:c6:dd:25:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Dec 10 19:00:00 2024 GMT
            Not After : Dec  9 19:05:00 2025 GMT
        Subject: CN=5E0EC0BCF1410A8DC54B6358AB7303F9E0AE37A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:4d:e8:15:c2:b9:25:0e:01:2a:d8:c1:94:
                    5a:7a:e0:ad:a2:1e:4f:88:a4:83:b4:75:e6:dc:36:
                    d3:1b:29:41:cd:63:70:5e:b0:3e:34:6d:af:00:ee:
                    f1:5f:6a:25:82:6b:1c:2e:73:69:55:be:dd:67:8c:
                    ad:c4:80:b3:93:3b:42:b5:0f:69:55:95:ce:a7:d1:
                    79:8f:39:5b:28:a9:6d:42:81:94:b8:99:3e:c5:94:
                    0e:a3:a6:75:ff:0b:7a:01:10:56:b4:67:23:f2:3a:
                    33:c1:09:b3:67:50:7f:1a:5c:24:31:46:d5:01:ca:
                    68:53:d1:f6:1a:69:00:6b:bb:17:f9:31:b5:de:b7:
                    8c:1f:4d:46:58:9c:41:fa:af:0b:8b:f0:b7:c9:6a:
                    c2:7a:a4:e6:7e:c2:32:8d:f5:b5:95:7f:21:ba:65:
                    a3:f3:4a:c6:9d:14:97:2d:45:3b:f9:f4:ba:3d:07:
                    17:02:38:13:60:e4:fc:12:ad:cf:7b:c6:b4:f9:32:
                    4f:c8:16:d6:4d:f8:67:5f:22:a0:26:ee:d8:17:22:
                    84:7a:c6:0e:d9:8a:9c:b8:18:6c:db:04:6b:ae:5b:
                    15:ff:dc:c6:4b:b0:fb:f3:d9:a6:cb:1d:ce:34:64:
                    46:e6:fd:3f:8e:be:10:8a:a0:89:48:8b:df:99:db:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0E:C0:BC:F1:41:0A:8D:C5:4B:63:58:AB:73:03:F9:E0:AE:37:A4
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231372e302f32342d3234203d3e20323733393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f0:ce:8d:2a:46:c2:31:c3:95:a0:e3:bb:90:06:85:7a:d8:
         a8:f2:5d:c1:ef:7d:cb:65:4d:b8:19:d4:da:e8:94:c0:e9:27:
         8b:85:42:af:b7:51:f7:fa:b6:85:e5:28:f2:24:e3:e2:89:ac:
         c4:5c:06:11:66:56:4d:e5:4d:23:f5:ce:4a:82:35:a6:73:ab:
         cc:29:89:dc:d6:c2:c8:f7:82:21:f7:f1:ca:be:58:8a:2c:81:
         7d:07:b6:24:ad:84:24:61:6a:f9:d3:06:19:58:85:e1:3b:b8:
         76:5c:40:d5:93:a0:fd:b6:a0:69:b7:30:fa:43:80:13:bd:e7:
         4c:2b:7e:74:0a:f8:9a:5f:e5:44:90:ea:ae:9e:cc:b7:53:1e:
         98:2b:15:c0:50:87:d9:4a:2b:48:a9:46:cc:59:84:32:b4:a9:
         80:42:91:ce:bd:69:2b:a5:0e:b9:db:66:d3:01:af:35:3e:62:
         fa:73:4a:ca:f3:89:c0:41:f0:6d:af:de:04:97:59:a9:f5:47:
         1f:9d:83:ba:61:f3:3f:08:8c:49:65:2d:b4:36:d0:4f:d1:d3:
         2b:9c:e1:d5:97:e8:62:3b:ea:ab:8e:4f:20:88:5c:41:d4:27:
         3d:2f:7e:07:7b:57:b5:d9:e1:01:f8:51:32:7c:86:c6:d9:db:
         68:e6:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:59:11 2025 by rpki-client