Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3133362e302f32312d3234203d3e203236343236.roa
File:                     3138362e352e3133362e302f32312d3234203d3e203236343236.roa (raw, json)
Hash identifier:          j3J/lptcz+Ln9v2FxMDd2mXvmDqxHauiDuaQ6s1DPRM=
Subject key identifier:   87:35:64:68:24:9F:67:60:72:C8:9A:05:6E:7C:24:68:49:FC:53:5E
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       35EF05B5B5B641D29D67613B1AB3229FD0E9C82E
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3133362e302f32312d3234203d3e203236343236.roa
Signing time:             Wed 11 Sep 2024 14:35:01 +0000
ROA not before:           Wed 11 Sep 2024 14:30:01 +0000
ROA not after:            Wed 10 Sep 2025 14:35:01 +0000
asID:                     26426
IP address blocks:        186.5.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 17:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ef:05:b5:b5:b6:41:d2:9d:67:61:3b:1a:b3:22:9f:d0:e9:c8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Sep 11 14:30:01 2024 GMT
            Not After : Sep 10 14:35:01 2025 GMT
        Subject: CN=87356468249F676072C89A056E7C246849FC535E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fe:71:d4:01:86:a8:27:a2:99:98:5e:67:a6:
                    48:62:46:de:b6:78:a7:d2:7f:1e:86:36:96:69:b4:
                    7f:51:fa:52:5f:17:91:ca:a1:e2:63:6e:5e:e2:04:
                    7e:94:55:b9:3a:86:9d:0c:5f:9b:dc:ae:e2:c2:f1:
                    93:3e:d1:b2:da:42:a2:c3:06:32:92:a9:e0:43:68:
                    e9:37:db:65:e2:ab:3e:03:b7:5c:8b:8a:67:08:ea:
                    7c:28:49:71:5c:2d:63:2c:64:11:46:e5:c1:6e:40:
                    eb:36:b7:30:98:1a:bb:63:aa:c3:3a:70:f1:0d:30:
                    2c:4f:78:18:74:f6:d4:63:8e:fc:26:e5:aa:e5:f4:
                    d4:f9:2e:8d:69:79:46:ec:8b:d6:d3:63:5e:a2:e4:
                    d0:05:d8:ca:2e:d3:07:7c:a0:8f:71:51:5f:05:e7:
                    9b:35:c7:4b:27:7f:64:29:b4:d1:33:4f:a9:99:b3:
                    0a:59:ea:1d:c2:fb:6a:a9:42:b1:f2:a0:25:ee:da:
                    80:0c:7f:b8:d4:5f:1b:22:95:42:bc:31:83:74:72:
                    08:f7:d4:8c:97:46:f1:55:9c:9a:99:80:aa:71:1f:
                    c4:5e:12:db:de:3e:fc:dd:ba:76:6b:ab:f6:f5:d0:
                    98:d8:45:57:e0:cd:81:1e:0a:b4:91:a6:80:89:6c:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:35:64:68:24:9F:67:60:72:C8:9A:05:6E:7C:24:68:49:FC:53:5E
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3133362e302f32312d3234203d3e203236343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:16:65:1d:24:2a:b1:15:90:63:db:08:45:a8:d7:79:45:7e:
         a5:34:85:fd:e5:1e:c0:b6:cc:f9:22:bf:b9:5d:3f:85:19:37:
         7c:b2:82:db:47:da:f8:0a:10:66:97:a2:03:a1:05:d9:44:77:
         91:06:1d:31:1b:4c:56:c7:46:ea:f2:09:97:92:9c:45:11:df:
         2f:32:41:2a:b0:35:f3:14:a5:35:46:77:03:57:d4:ca:d3:05:
         8d:53:cd:88:14:1e:f1:a4:2e:ad:56:a8:44:1e:d5:13:ac:46:
         3c:86:fe:70:5f:ba:8e:0d:87:87:2f:76:15:5a:1f:8e:67:06:
         69:6d:47:c8:b2:73:65:2f:7d:a5:9f:4d:49:c0:b9:07:a0:5c:
         ae:7c:50:c0:1b:13:3f:d2:fa:67:61:6f:cd:50:13:b3:60:ea:
         d0:f1:3d:2d:b3:24:de:7f:8e:48:ab:04:ab:d7:33:e8:67:f5:
         c5:ff:be:7c:97:cd:d1:fb:50:6e:6f:8a:6a:84:8f:76:b8:47:
         11:64:6e:69:9e:25:4a:2f:04:d2:b8:b3:27:11:e4:92:6f:af:
         00:0e:2e:cc:01:fe:75:ea:ce:1c:3d:8b:3d:2e:39:d2:74:9f:
         df:9c:15:fd:6e:b6:67:5f:20:38:5f:91:6d:53:d9:96:7a:56:
         12:a4:c6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:03:53 2025 by rpki-client