Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS52434.roa
File:                     AS52434.roa (raw, json)
Hash identifier:          Ln7Xr2Dba4JmvqFilpY5w9HMh5bAF1qxAZ0I52BBpKY=
Subject key identifier:   40:78:75:25:12:80:99:48:91:70:07:D7:94:66:37:A2:22:BC:FF:83
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       6A956D579EF1C9658D41D0D83BE0BA52C567E7D7
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS52434.roa
Signing time:             Tue 30 Jul 2024 17:10:04 +0000
ROA not before:           Tue 30 Jul 2024 17:05:04 +0000
ROA not after:            Tue 29 Jul 2025 17:10:04 +0000
asID:                     52434
IP address blocks:        190.242.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:95:6d:57:9e:f1:c9:65:8d:41:d0:d8:3b:e0:ba:52:c5:67:e7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jul 30 17:05:04 2024 GMT
            Not After : Jul 29 17:10:04 2025 GMT
        Subject: CN=4078752512809948917007D7946637A222BCFF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:54:ac:c4:0d:07:cf:ab:5d:62:6f:e6:e3:
                    ae:4d:ce:f7:66:41:9f:84:84:5f:62:a8:e3:4b:a2:
                    5e:74:db:fd:34:45:c7:50:a9:38:0c:ae:99:a0:df:
                    ec:fe:16:4a:2f:33:35:ed:ff:da:cd:c0:ca:fc:8b:
                    e2:8d:d6:77:8e:15:f2:ef:a8:ce:20:38:82:af:6e:
                    df:24:be:e6:1d:5c:7d:3c:c3:32:58:f7:16:80:ed:
                    65:c2:49:35:87:8f:9b:42:8f:4e:76:5f:98:8b:2c:
                    ed:f0:a1:35:28:ce:f3:2f:ab:60:ab:e3:91:06:85:
                    02:2d:a4:6c:b8:ee:be:8b:57:57:b6:b4:05:bf:60:
                    3b:fc:08:05:5d:5f:47:13:f6:95:39:81:a9:ec:4a:
                    7a:da:75:6f:bc:c4:f2:73:94:b3:d2:17:c2:2c:02:
                    e5:97:09:91:75:83:9a:75:66:8a:00:71:47:75:27:
                    b7:8c:06:ab:48:7d:70:39:2b:94:44:37:c7:6a:90:
                    73:0e:12:ea:5b:80:e7:52:17:12:c9:98:65:3f:02:
                    a7:d8:16:da:d9:ef:e9:b9:af:2b:20:af:f6:2a:71:
                    fd:96:9a:26:1d:34:76:7f:fe:e5:67:0d:41:2e:61:
                    4a:a2:1c:a2:b4:83:f2:8d:12:7e:ec:bd:a3:5b:39:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:78:75:25:12:80:99:48:91:70:07:D7:94:66:37:A2:22:BC:FF:83
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS52434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:68:b0:83:6b:c8:ad:ac:ec:3e:dc:f8:68:98:73:cb:b8:0c:
         51:6c:5e:92:7e:2d:aa:e3:59:83:fd:c4:cc:ff:62:51:74:fb:
         d3:80:fb:82:e9:1a:04:d4:c7:7b:f4:fc:33:0b:cf:5d:ab:13:
         d8:6d:2d:b5:e4:15:a4:61:f0:12:b0:05:50:99:a8:39:69:00:
         05:a3:05:62:4a:f3:7f:21:08:1d:fe:62:0b:8d:f0:9e:40:6f:
         f7:66:a2:90:e4:77:e3:16:f1:8b:64:e0:43:a6:bc:c1:25:ce:
         df:b9:ee:af:7b:51:30:97:aa:c5:87:ed:77:4f:a9:96:fd:bd:
         27:dc:76:98:25:6f:33:14:b0:a4:ae:04:c2:e2:df:8d:0c:d7:
         e6:2f:25:7b:e5:c6:e4:1d:b0:18:81:96:c8:34:ce:f2:c3:55:
         45:fa:f5:ad:b9:7d:6d:29:c2:0d:2a:db:e0:49:fd:da:08:d2:
         14:a6:cc:cb:3b:9a:b6:a8:6c:9d:f4:42:6e:b8:98:0b:b1:bf:
         a2:15:ba:97:37:0f:22:c6:43:d6:89:6d:8c:6b:3d:79:dc:33:
         f9:0c:6f:03:57:ba:85:fb:56:15:1a:18:54:a4:e7:67:35:98:
         5a:20:c3:37:e2:10:76:45:73:1a:76:6d:6a:e0:0d:27:38:7a:
         3f:8b:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:04 2024 by rpki-client on console-fra.rpki-client.org