Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS52468.roa
File:                     AS52468.roa (raw, json)
Hash identifier:          eDIsmjNlbbcVDvM2GmEXQXb3YD7HFZf5qSUyP/9J2Q8=
Subject key identifier:   FF:5F:46:B1:E5:FD:05:36:D3:E9:85:C4:E8:15:C2:8E:9E:F0:37:D9
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       0729A9BD989D2900C4D89399E39533F5D023834D
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS52468.roa
Signing time:             Tue 05 Mar 2024 18:00:26 +0000
ROA not before:           Tue 05 Mar 2024 17:55:26 +0000
ROA not after:            Tue 04 Mar 2025 18:00:26 +0000
asID:                     52468
IP address blocks:        181.188.202.0/23 maxlen: 24
                          181.188.215.0/24 maxlen: 24
                          181.188.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:29:a9:bd:98:9d:29:00:c4:d8:93:99:e3:95:33:f5:d0:23:83:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Mar  5 17:55:26 2024 GMT
            Not After : Mar  4 18:00:26 2025 GMT
        Subject: CN=FF5F46B1E5FD0536D3E985C4E815C28E9EF037D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:76:e6:34:f2:f4:20:30:fb:d0:3b:48:21:
                    18:ec:9d:74:2c:5c:8f:f1:32:8e:7f:28:6b:07:b5:
                    74:7d:05:00:8a:fd:9f:e7:76:70:15:c3:ea:2e:3c:
                    8f:5b:ff:bb:20:bf:c5:4d:91:19:dc:f9:e8:3a:bb:
                    63:8e:b1:c1:03:40:4d:e5:67:9b:42:6b:bd:d2:11:
                    da:1f:b7:bb:d8:80:ce:8a:b6:83:02:b0:d2:0e:ce:
                    72:fe:1e:62:e8:f6:32:00:3b:4b:63:9f:a5:a2:9d:
                    c9:20:18:28:9a:68:37:f2:0c:f3:26:d7:88:9b:30:
                    17:4b:81:30:a5:fc:43:db:f2:0a:a1:55:52:92:09:
                    30:fc:47:65:a3:d6:5c:b3:24:1e:fd:33:b2:5a:cd:
                    d4:27:fe:5a:17:8d:2e:fc:c4:09:7d:d3:14:bc:7f:
                    e5:a1:68:85:fb:cf:e8:b4:d5:79:30:be:ff:51:94:
                    04:d3:09:03:e4:bc:aa:cb:e2:29:6b:c1:87:ce:95:
                    52:d5:8a:5e:5e:49:94:8a:2f:e7:a6:2b:5a:36:43:
                    5b:b2:8c:f5:a3:85:67:0b:05:9f:7f:ac:42:c5:dd:
                    dc:86:fe:89:d2:c4:63:8a:5b:aa:f0:bd:36:ce:42:
                    06:ac:95:15:f2:98:3e:cd:be:ca:b9:29:a6:61:ee:
                    46:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5F:46:B1:E5:FD:05:36:D3:E9:85:C4:E8:15:C2:8E:9E:F0:37:D9
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS52468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.202.0/23
                  181.188.215.0-181.188.216.255

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:cf:e5:99:0f:88:71:56:9e:55:e4:f4:71:43:92:16:3d:
         82:eb:13:ad:4b:8d:c8:2b:27:5b:6c:57:f4:68:3f:7d:9d:9c:
         6a:a8:2b:93:00:26:e9:a8:d1:22:af:9c:a7:04:27:7c:ca:bf:
         03:12:4e:2c:c7:69:ce:0f:8b:17:63:0a:82:81:9d:55:22:f6:
         9a:10:38:7e:64:78:50:92:b5:8d:4a:e4:be:88:62:d5:a1:5a:
         ff:d0:2c:fe:70:f9:e5:24:b1:b3:f8:5e:db:5e:39:3a:2c:a2:
         d8:22:d0:0e:92:19:17:a8:e4:8a:a0:63:97:79:b1:62:1f:27:
         a8:07:82:61:f7:5d:58:aa:0a:a1:1c:41:63:6c:bb:bb:1c:0d:
         86:1a:1b:e9:90:d6:e4:8d:44:01:63:8a:1c:9f:49:dc:4d:a8:
         3d:dd:9e:7f:73:d7:bc:92:76:4b:70:94:3c:eb:fe:d5:d5:af:
         fa:dd:64:91:4c:42:9a:df:9d:7e:2c:fe:d8:53:58:0a:95:2c:
         9a:a0:17:d5:3f:37:d4:d7:33:fc:b3:96:f8:6f:32:a9:06:4c:
         55:e3:3f:e4:12:d7:49:70:8d:4e:f1:3e:26:d6:36:7b:51:87:
         2e:05:2a:86:9c:3b:43:8c:ab:33:f8:34:3f:cf:d9:85:36:ee:
         d0:72:31:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org