Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS52331.roa
File:                     AS52331.roa (raw, json)
Hash identifier:          xWSdrDPvB6zbdKmwUFllpsMHYAA6jMC7ZcNtmVpB7NM=
Subject key identifier:   77:46:20:45:E8:F0:13:6E:3F:53:33:D9:58:EC:AE:10:3B:08:00:9B
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       0A78239835BDFB9B29B9DEF7D66F9C61D90315DE
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS52331.roa
Signing time:             Tue 04 Feb 2025 18:07:29 +0000
ROA not before:           Tue 04 Feb 2025 18:02:29 +0000
ROA not after:            Tue 03 Feb 2026 18:07:29 +0000
asID:                     52331
IP address blocks:        181.188.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:78:23:98:35:bd:fb:9b:29:b9:de:f7:d6:6f:9c:61:d9:03:15:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Feb  4 18:02:29 2025 GMT
            Not After : Feb  3 18:07:29 2026 GMT
        Subject: CN=77462045E8F0136E3F5333D958ECAE103B08009B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:9c:80:51:86:da:60:48:b5:04:1f:57:ca:
                    47:5d:a8:2e:d4:29:17:1a:ce:0d:55:3c:4f:da:77:
                    ec:44:e0:cb:d0:3e:13:f5:9c:9f:03:5f:79:8a:96:
                    41:b1:cf:91:b7:78:d0:3f:c8:5f:b2:f4:18:6c:ed:
                    5d:48:d3:97:55:d5:48:db:27:e4:94:fe:eb:f0:69:
                    b1:24:5b:9b:b6:86:b3:fb:7a:8c:37:44:b0:76:5d:
                    62:6b:b9:f2:db:d3:3e:99:3b:4a:aa:f5:7f:8a:a6:
                    0d:a8:9f:83:01:42:66:3a:13:b1:5f:f4:4d:6a:91:
                    51:18:01:3f:fa:a7:6c:5c:43:78:2a:66:85:35:77:
                    dc:9a:d6:cd:d9:8e:31:8b:9b:e7:a4:e9:38:74:61:
                    3c:e3:1d:9c:ff:75:fe:c8:57:27:cb:05:49:af:69:
                    c8:03:69:56:8f:65:cb:8a:fb:ab:49:94:e8:21:34:
                    c8:28:6a:7c:04:6c:30:55:56:1b:9a:be:21:11:9a:
                    21:2c:10:e8:1e:c0:a9:67:ff:51:f6:a3:53:6c:9d:
                    53:33:c0:7d:c7:aa:f3:b7:8c:0a:e7:88:35:c7:15:
                    2e:94:13:e7:8b:c0:3b:0b:71:6c:61:80:7b:b5:ee:
                    c0:04:0b:b9:4d:1f:76:7f:df:a6:e8:12:8e:6d:3e:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:46:20:45:E8:F0:13:6E:3F:53:33:D9:58:EC:AE:10:3B:08:00:9B
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS52331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:b6:42:58:e4:b0:88:4b:a9:2f:32:21:7a:3d:9c:63:6c:d0:
         58:48:be:92:c7:d0:94:9e:a2:a7:e0:b9:02:b5:67:30:e8:2d:
         1a:65:e9:dd:ec:69:d9:60:94:95:b9:f2:53:79:ae:31:68:9b:
         16:15:36:9c:f8:89:c4:ba:09:14:67:ce:0b:60:4d:55:ff:58:
         1a:44:2a:d4:05:85:0d:12:93:f4:c5:35:33:51:a8:22:d9:a2:
         3c:3b:6b:ab:83:4b:5f:f8:cd:66:94:0d:a4:74:9e:d9:09:84:
         f7:c1:9d:9d:35:94:d4:05:68:3f:2d:83:4a:c5:bf:89:73:19:
         02:41:a7:5f:d4:7d:60:89:fd:1d:c4:b6:e2:c9:cc:dc:51:01:
         ba:13:eb:fd:ba:69:67:2e:c7:df:ab:ea:70:81:42:2c:2f:0b:
         55:b9:1d:29:2f:b1:74:10:8e:cb:a9:2a:9a:e1:c1:a5:b3:8f:
         95:d8:5d:15:39:d6:82:47:2e:9d:9a:42:ca:f6:80:af:1f:c8:
         42:a7:4b:87:2c:f0:4c:38:fd:a2:16:98:bf:05:06:c5:8e:12:
         92:9c:ee:35:f3:55:d3:cd:ad:b3:09:c3:b8:25:89:1e:15:bc:
         68:76:28:28:70:6d:89:4d:3f:a9:b5:0c:27:01:4f:24:1c:26:
         97:c1:6b:38
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUCngjmDW9+5spud731m+cYdkDFd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI1RTI5OENDQTBCODQwREI3MjZGNjBFRUQxNDBDMzdG
REIyM0JENjAeFw0yNTAyMDQxODAyMjlaFw0yNjAyMDMxODA3MjlaMDMxMTAvBgNV
BAMTKDc3NDYyMDQ1RThGMDEzNkUzRjUzMzNEOTU4RUNBRTEwM0IwODAwOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA85yAUYbaYEi1BB9XykddqC7U
KRcazg1VPE/ad+xE4MvQPhP1nJ8DX3mKlkGxz5G3eNA/yF+y9Bhs7V1I05dV1Ujb
J+SU/uvwabEkW5u2hrP7eow3RLB2XWJrufLb0z6ZO0qq9X+Kpg2on4MBQmY6E7Ff
9E1qkVEYAT/6p2xcQ3gqZoU1d9ya1s3ZjjGLm+ek6Th0YTzjHZz/df7IVyfLBUmv
acgDaVaPZcuK+6tJlOghNMgoanwEbDBVVhuaviERmiEsEOgewKln/1H2o1NsnVMz
wH3HqvO3jArniDXHFS6UE+eLwDsLcWxhgHu17sAEC7lNH3Z/36boEo5tPiF5AgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUd0YgRejwE24/UzPZWOyuEDsIAJswHwYDVR0j
BBgwFoAUcl4pjMoLhA23JvYO7RQMN/2yO9YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQjA3QTRDRjlDMDkzRDQ2QjE1RTZCMUIwOTk1NEZFOUM4
Mjc2MDA5MDc0RDAzNzcyRTQ1MjYxRDc2OTI3MUFDLzAvNzI1RTI5OENDQTBCODQw
REI3MjZGNjBFRUQxNDBDMzdGREIyM0JENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjVFMjk4Q0NBMEI4NDBEQjcy
NkY2MEVFRDE0MEMzN0ZEQjIzQkQ2LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8xQjA3QTRDRjlDMDkzRDQ2QjE1RTZCMUIwOTk1NEZFOUM4Mjc2MDA5MDc0
RDAzNzcyRTQ1MjYxRDc2OTI3MUFDLzAvQVM1MjMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALW81DAN
BgkqhkiG9w0BAQsFAAOCAQEAFbZCWOSwiEupLzIhej2cY2zQWEi+ksfQlJ6ip+C5
ArVnMOgtGmXp3exp2WCUlbnyU3muMWibFhU2nPiJxLoJFGfOC2BNVf9YGkQq1AWF
DRKT9MU1M1GoItmiPDtrq4NLX/jNZpQNpHSe2QmE98GdnTWU1AVoPy2DSsW/iXMZ
AkGnX9R9YIn9HcS24snM3FEBuhPr/bppZy7H36vqcIFCLC8LVbkdKS+xdBCOy6kq
muHBpbOPldhdFTnWgkcunZpCyvaArx/IQqdLhyzwTDj9ohaYvwUGxY4SkpzuNfNV
082tswnDuCWJHhW8aHYoKHBtiU0/qbUMJwFPJBwml8FrOA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:27 2025 by rpki-client