Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3133302e302f32332d3234203d3e203236343236.roa
File:                     3138362e352e3133302e302f32332d3234203d3e203236343236.roa (raw, json)
Hash identifier:          lYyeBGW+cM7I0qwgGvmxh1WwqNi98R9vm1RHSfTvIDo=
Subject key identifier:   DD:50:E3:D7:33:AF:D8:36:A2:B4:52:F9:46:73:68:36:1E:9A:26:25
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       727930CD23EBF922E8B5260DC2E3611AD58BC91B
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3133302e302f32332d3234203d3e203236343236.roa
Signing time:             Wed 11 Sep 2024 14:35:06 +0000
ROA not before:           Wed 11 Sep 2024 14:30:06 +0000
ROA not after:            Wed 10 Sep 2025 14:35:06 +0000
asID:                     26426
IP address blocks:        186.5.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 17:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:79:30:cd:23:eb:f9:22:e8:b5:26:0d:c2:e3:61:1a:d5:8b:c9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Sep 11 14:30:06 2024 GMT
            Not After : Sep 10 14:35:06 2025 GMT
        Subject: CN=DD50E3D733AFD836A2B452F9467368361E9A2625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:af:8f:77:6a:37:db:7f:48:a7:0d:2d:ca:1b:
                    b6:4f:60:2f:f2:11:0a:c0:e8:9a:46:5e:07:e9:b3:
                    bf:ba:7b:07:14:4a:2f:57:d8:5c:73:ae:20:4c:72:
                    62:8d:67:ee:17:f0:e0:2d:e1:df:2f:b5:04:1d:cc:
                    44:0d:a7:11:8f:b5:99:ee:a6:2b:7a:2c:9d:59:c0:
                    75:ca:24:91:24:c8:e8:04:da:63:a3:30:62:25:2d:
                    9e:06:bd:c3:2c:46:0a:e3:8b:aa:bc:87:92:0d:62:
                    dd:1f:d2:6e:b9:ae:6e:47:aa:e5:94:95:89:ab:58:
                    09:a6:76:23:7f:89:ec:af:64:33:2c:58:57:18:42:
                    c7:ae:65:77:8e:19:a6:43:07:0d:80:b6:05:eb:f4:
                    bb:f1:96:6f:47:6d:cc:7e:29:d0:da:1e:e8:21:71:
                    4c:ca:9e:69:51:66:b6:15:41:48:d5:15:78:04:e1:
                    e0:fa:f6:a5:61:2e:f1:c6:1e:36:65:fd:b0:b3:06:
                    c2:ec:03:66:89:04:76:b5:94:1d:0d:d1:58:ce:45:
                    45:14:e3:12:b6:98:72:5c:0d:5a:de:61:c0:18:a2:
                    a8:60:5d:8c:44:7d:e6:13:08:c8:f7:79:b5:c5:3b:
                    38:19:1d:f3:41:43:a3:34:54:86:2f:aa:53:f5:43:
                    28:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:50:E3:D7:33:AF:D8:36:A2:B4:52:F9:46:73:68:36:1E:9A:26:25
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3133302e302f32332d3234203d3e203236343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:c1:9d:a3:0d:7b:d5:78:a9:3b:7b:6f:a7:19:d4:ba:8e:
         b9:5a:77:5a:36:4b:b3:ef:79:16:25:c2:d0:95:79:f0:19:97:
         93:70:94:ad:e6:b9:3d:d9:45:34:0a:da:d0:6d:fb:cc:d1:8e:
         ca:89:35:04:da:ee:56:9a:ab:ce:40:08:26:a8:35:0f:d4:d1:
         1a:50:8c:48:07:ec:78:47:6b:d4:73:cd:a2:32:bc:77:e5:06:
         64:88:4f:8d:93:a9:23:54:14:b8:0b:3b:6c:4e:8d:82:7e:6a:
         b7:fe:17:b4:39:6a:ab:8f:63:57:03:86:70:a4:7b:4e:6c:f3:
         cd:d8:f8:11:54:4e:aa:d7:8b:f3:c3:6d:97:f1:49:f6:29:e8:
         52:bd:70:04:4d:4c:e8:39:a0:a9:e9:3a:1d:c3:44:4c:17:34:
         02:5f:da:dd:6e:c9:45:63:37:41:a3:db:8b:1a:a1:11:8d:ff:
         55:dc:71:d8:d0:e5:da:b3:02:d5:4f:12:00:b3:7f:28:de:a9:
         67:04:62:9a:dd:57:56:7e:8a:ef:d8:98:b2:41:f4:6e:5c:7f:
         4f:07:c7:96:81:34:3c:97:07:d8:a2:25:88:3f:08:26:cb:dd:
         2c:8e:1d:d0:56:64:da:65:81:a9:ee:b7:6f:55:7d:f7:79:30:
         8a:e7:12:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:33 2025 by rpki-client