Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3138362e352e3232382e302f32322d3234203d3e203532333732.roa
File:                     3138362e352e3232382e302f32322d3234203d3e203532333732.roa (raw, json)
Hash identifier:          gIxBmnMrWhZd1KafsSUbBtJVBWZRLmi+IKb3ow5sxUo=
Subject key identifier:   29:87:D2:0C:98:E2:2A:47:5A:03:DE:09:7D:92:B4:02:87:2C:ED:A3
Certificate issuer:       /CN=665B62B0D0F1D058A69B30EDFDD50B808A3A91EE
Certificate serial:       6BF6AD83C091864FDF8331FEDA6583F8523ABC88
Authority key identifier: 66:5B:62:B0:D0:F1:D0:58:A6:9B:30:ED:FD:D5:0B:80:8A:3A:91:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3138362e352e3232382e302f32322d3234203d3e203532333732.roa
Signing time:             Wed 24 Jul 2024 15:15:00 +0000
ROA not before:           Wed 24 Jul 2024 15:10:00 +0000
ROA not after:            Wed 23 Jul 2025 15:15:00 +0000
asID:                     52372
IP address blocks:        186.5.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f6:ad:83:c0:91:86:4f:df:83:31:fe:da:65:83:f8:52:3a:bc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665B62B0D0F1D058A69B30EDFDD50B808A3A91EE
        Validity
            Not Before: Jul 24 15:10:00 2024 GMT
            Not After : Jul 23 15:15:00 2025 GMT
        Subject: CN=2987D20C98E22A475A03DE097D92B402872CEDA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:10:78:07:24:2b:d5:0c:12:ce:7d:61:11:
                    8c:5f:16:ae:b2:a9:f2:c3:81:6b:ed:5d:e5:63:0c:
                    b8:64:e7:0e:3e:86:c6:07:03:f8:75:41:b6:fb:64:
                    e3:a1:be:42:2e:e9:56:9b:f5:78:7d:e0:3a:58:7a:
                    1f:c4:e5:43:81:6d:ea:c1:2d:69:8f:96:6a:f6:79:
                    ff:a9:01:81:df:2e:cd:a0:e8:89:9a:44:ad:a8:57:
                    1a:39:20:2a:22:24:be:8a:a9:6c:a8:16:71:75:50:
                    dd:87:82:59:6c:34:e2:4a:df:22:43:80:2a:71:68:
                    15:88:6c:6f:6b:5c:39:73:76:84:7f:d9:8c:cc:b1:
                    16:3f:e3:25:c8:a3:69:b8:05:ab:01:cc:c2:28:3f:
                    e4:49:25:cb:63:eb:40:7a:59:1d:dc:2c:87:0f:8f:
                    67:b8:8d:3b:ef:5c:6d:56:28:b6:29:05:cf:7a:6c:
                    02:f6:dd:69:c5:f1:b6:48:d9:b2:75:d2:fe:1b:69:
                    71:ce:97:ab:76:21:e7:84:9b:43:dc:43:32:97:12:
                    79:8a:20:5f:e8:95:b9:d6:db:dd:94:73:75:25:07:
                    b0:94:8d:7e:cf:c1:57:8d:1d:fb:c0:bc:84:d3:6f:
                    ce:d5:be:04:1b:e7:a9:6f:3f:22:4e:5b:42:f4:d5:
                    2d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:87:D2:0C:98:E2:2A:47:5A:03:DE:09:7D:92:B4:02:87:2C:ED:A3
            X509v3 Authority Key Identifier:
                keyid:66:5B:62:B0:D0:F1:D0:58:A6:9B:30:ED:FD:D5:0B:80:8A:3A:91:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3138362e352e3232382e302f32322d3234203d3e203532333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:56:1c:41:3b:09:73:8d:b3:d4:5b:f5:3d:63:b9:86:f1:ea:
         b5:de:c2:9a:da:41:bd:e1:d1:1a:38:0a:98:ce:5a:11:0d:f2:
         c8:09:28:a7:7a:f0:5d:8f:29:d4:24:fe:c6:dc:b6:11:88:71:
         b2:b1:f3:bf:41:85:4f:68:3e:99:a0:04:2a:cc:5e:b0:f6:29:
         c8:3e:57:b3:98:50:8f:3d:2c:49:7a:d6:38:3b:a8:cd:20:8c:
         33:da:6c:d5:0a:b4:46:bc:3f:05:a7:23:8d:dd:4c:fa:f9:9b:
         6d:4e:2e:ce:c7:f5:d2:39:16:9d:20:4f:4d:69:2d:15:98:35:
         f8:83:4f:8c:dc:84:48:40:b7:63:1f:ca:88:86:9b:cb:7a:b1:
         cb:a4:f5:bd:af:b9:0d:03:e2:80:96:e9:92:86:c1:9c:84:a8:
         b3:61:9d:17:20:45:2a:60:0e:6a:58:ea:46:8f:dc:f8:27:15:
         86:e5:25:5f:a8:09:79:48:6a:8d:5f:07:56:0b:65:c2:15:b0:
         0e:96:a3:54:26:d7:28:34:64:7c:0a:fd:8c:e6:27:3c:a7:2b:
         e6:29:b9:7b:1c:f3:7e:0c:da:88:14:bc:6d:53:8e:eb:26:af:
         05:5b:b8:4b:8b:76:1f:75:fd:20:8e:d7:6b:65:16:e1:b6:76:
         c6:88:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org