Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3132382e302f31392d3139203d3e203230323939.roa
File:                     3138362e33322e3132382e302f31392d3139203d3e203230323939.roa (raw, json)
Hash identifier:          5XBt+s3vJL6UDZpJmm/Sz+QkftwW/4ODpYABXubkJZY=
Subject key identifier:   DB:F1:EC:B1:19:32:CA:2F:F1:4B:CA:01:8E:FB:E7:6F:9E:30:C6:4F
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       49844DF876828056476CE2F3E7F88886F70FDA4D
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3132382e302f31392d3139203d3e203230323939.roa
Signing time:             Tue 04 Feb 2025 18:48:58 +0000
ROA not before:           Tue 04 Feb 2025 18:43:58 +0000
ROA not after:            Tue 03 Feb 2026 18:48:58 +0000
asID:                     20299
IP address blocks:        186.32.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 03:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:84:4d:f8:76:82:80:56:47:6c:e2:f3:e7:f8:88:86:f7:0f:da:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Feb  4 18:43:58 2025 GMT
            Not After : Feb  3 18:48:58 2026 GMT
        Subject: CN=DBF1ECB11932CA2FF14BCA018EFBE76F9E30C64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:3f:c4:42:31:c3:a8:19:54:a8:4b:c1:94:
                    b4:49:35:44:39:0b:67:78:37:36:b4:6e:2e:97:af:
                    e0:5f:e1:9c:78:62:16:e2:a2:1b:d5:f7:1b:d3:fc:
                    4c:31:60:f5:27:de:e8:e6:c4:39:28:47:45:7b:49:
                    56:76:e2:53:c8:23:64:93:c7:d8:cb:9a:78:66:35:
                    e1:6c:25:81:60:18:fe:3d:ed:e7:db:bb:14:50:5a:
                    21:a2:a0:f1:7f:e5:c4:29:c0:24:27:c7:2d:52:37:
                    91:1a:56:77:5f:fe:ca:94:95:76:af:3d:d4:e9:1a:
                    8c:91:cf:77:e2:6c:7d:39:cc:41:6c:93:0e:9d:90:
                    54:17:d3:a4:34:a1:61:59:99:bd:0b:05:df:c0:7f:
                    f6:08:e5:a1:63:20:7a:9f:0f:d1:eb:7d:53:13:e0:
                    13:62:07:e7:39:ab:76:db:ec:4b:58:55:9c:3f:5a:
                    de:7c:c3:bd:1a:29:1e:ea:55:e7:3d:ca:40:73:14:
                    4f:79:01:37:9b:26:32:fa:11:19:66:3a:b2:3c:9d:
                    e2:f9:c2:f6:cf:b0:4f:19:78:ed:15:42:ec:f0:2d:
                    38:50:6c:a4:70:4e:0c:2b:54:3c:4c:c9:94:03:4f:
                    99:25:d6:2b:8d:19:a2:80:a7:ae:33:d0:a9:f7:26:
                    04:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F1:EC:B1:19:32:CA:2F:F1:4B:CA:01:8E:FB:E7:6F:9E:30:C6:4F
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3132382e302f31392d3139203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:f2:63:90:93:14:8a:9f:9a:06:b5:3f:08:ec:8a:2c:58:42:
         c3:e4:af:35:a6:fa:47:43:96:6b:30:29:89:70:02:04:11:05:
         b7:f9:7f:f7:70:13:bd:36:6c:19:63:7b:27:9b:1b:fb:e0:03:
         09:c4:10:26:38:0d:8e:a6:b7:b0:75:40:c1:89:99:a0:73:13:
         37:1a:d1:81:a6:50:6d:b7:c4:ec:65:3a:fe:54:58:7d:22:af:
         da:f8:e3:e9:76:7b:39:e9:f1:d6:89:9f:29:81:b8:c8:8c:29:
         3e:be:69:0c:e4:0c:6f:60:6c:d6:50:eb:18:34:e5:fb:75:72:
         a5:c2:ef:9e:8f:cf:0d:e6:ba:28:ff:5d:bc:36:bb:8f:df:b0:
         9c:b5:3c:b5:1c:7a:2f:74:d6:0a:22:97:4c:4a:d4:84:66:9a:
         c7:dc:84:80:1f:e2:73:74:c0:67:61:82:0a:20:3e:a7:63:41:
         fc:92:6e:98:1c:73:4d:53:c1:44:ef:dc:e8:7d:36:06:a9:21:
         c7:5e:ea:e1:9a:e5:c3:4d:6f:b8:eb:ff:aa:68:90:ac:6e:1b:
         f9:d4:ca:a4:3b:5f:28:a1:e8:3b:ac:bd:21:d1:24:11:ee:b2:
         d3:92:15:6f:b5:bc:33:67:3c:0f:4e:47:2c:3c:fc:db:ce:e1:
         5f:39:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:56 2025 by rpki-client