Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3139302e35322e33322e302f32312d3234203d3e203532333132.roa
File:                     3139302e35322e33322e302f32312d3234203d3e203532333132.roa (raw, json)
Hash identifier:          zyBydb4TE+lHYrM+tvBrMEfT3cj/wPYBmP7nxPf9pT4=
Subject key identifier:   78:56:6B:78:67:ED:28:49:9A:AC:85:7C:7F:09:B0:70:0A:4E:AE:6F
Certificate issuer:       /CN=46B816F254BE102454BE2E382FEA14873A13755C
Certificate serial:       5C48F574946A4A8F0753EBAC643E8FFDF48AC251
Authority key identifier: 46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3139302e35322e33322e302f32312d3234203d3e203532333132.roa
Signing time:             Tue 05 Mar 2024 18:12:14 +0000
ROA not before:           Tue 05 Mar 2024 18:07:14 +0000
ROA not after:            Tue 04 Mar 2025 18:12:14 +0000
asID:                     52312
IP address blocks:        190.52.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:48:f5:74:94:6a:4a:8f:07:53:eb:ac:64:3e:8f:fd:f4:8a:c2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B816F254BE102454BE2E382FEA14873A13755C
        Validity
            Not Before: Mar  5 18:07:14 2024 GMT
            Not After : Mar  4 18:12:14 2025 GMT
        Subject: CN=78566B7867ED28499AAC857C7F09B0700A4EAE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2b:a3:b3:c2:ab:67:8b:47:3d:e0:aa:96:7e:
                    42:d9:3b:51:d9:4c:cd:dd:f6:d8:fd:fa:fd:bb:2a:
                    ba:fb:71:c6:34:73:69:47:23:c0:e6:b9:ad:f9:ff:
                    97:01:d3:10:a6:ac:94:08:2d:9a:0d:cd:92:c0:ce:
                    cc:fc:ff:20:90:34:49:14:4b:7e:52:a3:16:d6:b6:
                    94:64:00:b9:47:57:53:d0:52:7e:2d:7c:ae:86:e8:
                    43:b9:c8:d5:50:dc:44:ef:03:57:e9:d6:db:1d:13:
                    c5:b5:bd:f1:ee:5c:93:0e:d2:52:5b:40:62:92:6a:
                    5b:da:fd:e7:2d:52:54:1b:44:f5:1c:0b:d4:37:ac:
                    97:6b:40:17:de:53:82:85:0c:fc:d8:4c:ed:21:a0:
                    56:ce:85:e4:be:56:4b:d3:15:be:99:72:1b:af:6b:
                    7c:60:ac:90:83:40:f7:39:39:89:c5:63:4a:f6:74:
                    8a:ec:1b:cf:21:26:2a:8b:62:e8:59:01:5d:b1:08:
                    97:c6:37:4f:a5:af:c2:cb:b6:4d:e5:e0:01:6a:ff:
                    c9:63:18:cb:1b:7a:bd:00:5e:3f:89:e0:f7:94:b3:
                    c5:2b:15:c4:1a:02:f5:eb:0e:0a:af:98:a4:90:09:
                    b8:d9:fd:1e:8a:1f:79:ba:a5:d0:14:69:67:68:b5:
                    50:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:56:6B:78:67:ED:28:49:9A:AC:85:7C:7F:09:B0:70:0A:4E:AE:6F
            X509v3 Authority Key Identifier:
                keyid:46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3139302e35322e33322e302f32312d3234203d3e203532333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:5a:d8:ec:70:0a:e1:dd:ba:08:d3:0a:08:2d:23:18:e0:c7:
         a7:e9:12:47:b0:f7:32:51:bf:94:7c:1a:da:f6:5f:4f:ad:aa:
         a5:87:1f:79:21:a0:86:20:e8:47:9c:e4:3a:9a:08:70:3e:5c:
         c6:33:65:86:c7:cf:b9:0a:4a:ff:f0:a8:4c:48:2d:c4:ef:4c:
         1c:d6:21:cd:0e:04:69:49:56:73:7e:6a:4e:5f:0a:54:bf:74:
         78:8b:88:5f:c6:8d:f6:46:06:7b:ce:87:2c:8d:1a:2f:62:d9:
         9c:09:30:28:3c:0f:12:87:8c:7d:06:3f:60:48:a9:9a:b4:c7:
         bc:73:44:55:7a:dd:23:80:dd:96:7f:4b:f2:6e:b9:fe:1d:b3:
         cf:2c:ce:b5:70:39:e6:bc:ad:df:d9:26:7a:b7:eb:9c:70:25:
         c1:c2:ce:f3:b6:6a:b8:cc:4f:a8:87:7a:05:b1:b5:af:7d:85:
         4f:bc:c6:2e:ef:03:ab:76:4b:ee:62:83:e7:22:13:c4:c3:cd:
         e6:9d:d6:61:48:a3:c0:15:24:38:5c:94:53:c8:da:86:73:4c:
         91:70:81:ae:c8:f7:f7:1f:c0:ab:e1:32:61:dd:1a:a2:f9:16:
         1a:2e:d9:3f:27:f2:38:d5:88:dc:94:e4:77:cd:f4:05:c1:64:
         c2:41:8c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:19:00 2024 by rpki-client on console-ams.rpki-client.org