Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3234203d3e20323634383435.roa
File:                     3139302e3131322e35322e302f32322d3234203d3e20323634383435.roa (raw, json)
Hash identifier:          U5+iKrNRw+zRA3P5KskRg/Eo+KAWTNLcc4Rrz9LV4sI=
Subject key identifier:   C3:96:3A:85:74:76:7C:17:03:76:4F:AC:90:8E:6B:63:3C:20:74:6C
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       79B0E52E2D42B9F508C17F84B5BCF3B3D5650608
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3234203d3e20323634383435.roa
Signing time:             Tue 05 Mar 2024 17:39:51 +0000
ROA not before:           Tue 05 Mar 2024 17:34:51 +0000
ROA not after:            Tue 04 Mar 2025 17:39:51 +0000
asID:                     264845
IP address blocks:        190.112.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b0:e5:2e:2d:42:b9:f5:08:c1:7f:84:b5:bc:f3:b3:d5:65:06:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:51 2024 GMT
            Not After : Mar  4 17:39:51 2025 GMT
        Subject: CN=C3963A8574767C1703764FAC908E6B633C20746C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:04:78:09:14:34:64:08:93:a2:29:9d:85:8e:
                    7f:83:8c:4f:2a:db:01:74:9f:65:27:93:e5:60:35:
                    83:35:80:6d:59:b1:e2:da:c4:c7:38:3f:08:c9:cb:
                    e2:d4:c2:dc:75:56:45:b4:39:d5:23:01:6c:d3:f3:
                    e3:c2:8e:4d:1f:d6:0b:59:b6:ba:4e:74:ec:cc:be:
                    6b:52:af:a1:3d:c6:8e:bb:ec:cc:86:f3:a4:d8:79:
                    ab:a0:c0:80:c5:fc:08:55:a3:39:4c:41:ff:8c:73:
                    fb:a7:51:b2:85:cb:66:35:30:ad:74:f1:ce:27:ee:
                    8a:03:26:a4:86:2c:2d:92:0b:24:fd:86:7d:fb:8e:
                    7e:c4:fb:4d:aa:c6:18:2a:7a:c7:c3:6a:9f:49:35:
                    7a:9f:7a:e0:fa:97:ba:72:f6:c5:dd:37:db:a8:b0:
                    68:44:85:55:49:12:ec:32:8b:94:74:fd:24:40:3a:
                    33:41:4c:bf:ab:f4:62:9a:fd:04:4e:03:b4:23:8c:
                    39:b6:eb:6e:35:6c:46:b8:13:74:4b:b4:ac:eb:f5:
                    84:4b:03:e8:d5:86:a3:1c:a7:38:5a:b6:a0:28:86:
                    4e:3d:7a:d1:59:4b:ec:5e:63:69:49:f7:ec:80:18:
                    a4:76:95:33:fc:35:f8:41:b0:f4:02:53:cf:55:a7:
                    0a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:96:3A:85:74:76:7C:17:03:76:4F:AC:90:8E:6B:63:3C:20:74:6C
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3234203d3e20323634383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:ea:79:1f:e0:8b:65:9d:19:15:8c:a3:53:b1:6d:af:53:ef:
         87:2d:c7:fb:90:2d:c4:0f:79:6e:a1:19:d7:72:4d:da:31:e2:
         57:dd:a9:b5:e0:2a:d1:ed:d2:7f:a5:b9:26:d8:ad:b5:99:28:
         25:fe:06:be:72:2f:55:af:e6:c0:ca:f3:ce:9c:3f:42:5f:ab:
         f7:c7:f0:20:5c:37:4a:ba:47:f9:70:5e:c1:7c:29:46:03:91:
         90:dc:de:d5:87:80:88:76:39:65:c6:62:29:c1:47:61:f4:96:
         80:4b:8f:02:17:38:c8:4f:56:36:09:58:05:a9:84:ec:f5:6e:
         ac:b6:53:30:78:3b:ad:38:3a:84:3b:50:51:df:e5:64:ee:f2:
         a6:a3:32:0d:6b:22:98:3a:f4:6b:5d:81:cd:b3:9f:b0:e6:db:
         46:2a:ff:f9:a9:f7:25:e0:e1:a8:a5:c4:0b:dd:0e:87:bb:79:
         4a:4e:d4:e1:30:2b:81:d8:8f:ff:1d:f2:36:be:7a:41:47:d7:
         87:4b:80:7f:62:a5:01:ef:29:54:d8:8c:19:70:bf:71:c7:46:
         6f:10:99:6d:cf:7b:0a:cb:19:65:ca:2b:8b:7d:5d:38:7d:18:
         6c:be:be:62:0e:29:7c:0c:77:e6:b8:5a:c8:2d:86:e6:c3:29:
         38:45:3d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:22 2024 by rpki-client on console-fra.rpki-client.org