Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS52256.roa
File:                     AS52256.roa (raw, json)
Hash identifier:          t3gBTd4OFmze4jitOXkOJ34ELMEC3+sBz56Ih6CKFow=
Subject key identifier:   08:B4:0F:86:42:FA:47:6E:43:29:EB:12:1C:E1:D1:52:75:68:FC:39
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       2F18E9EE682B627738C7466694DCFD5EBE40D622
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS52256.roa
Signing time:             Tue 04 Feb 2025 18:19:59 +0000
ROA not before:           Tue 04 Feb 2025 18:14:59 +0000
ROA not after:            Tue 03 Feb 2026 18:19:59 +0000
asID:                     52256
IP address blocks:        190.255.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 10:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:18:e9:ee:68:2b:62:77:38:c7:46:66:94:dc:fd:5e:be:40:d6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Feb  4 18:14:59 2025 GMT
            Not After : Feb  3 18:19:59 2026 GMT
        Subject: CN=08B40F8642FA476E4329EB121CE1D1527568FC39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:35:65:45:65:dc:26:96:8a:a6:a9:b4:2f:
                    ca:ee:62:ac:29:e1:1d:13:d2:ae:db:bc:ed:a4:47:
                    88:60:88:69:f2:76:9b:e3:28:7b:c5:ec:1e:84:3b:
                    54:68:79:b2:22:83:0b:2d:29:1f:1f:ab:3c:21:6d:
                    63:0f:d5:e8:a6:6f:da:11:95:d3:08:e7:89:63:24:
                    bc:c5:9e:8f:cc:2c:2a:b6:f4:a9:70:a2:04:67:00:
                    12:5e:fe:d6:0e:25:bd:c1:86:63:36:f1:36:eb:18:
                    d4:b6:df:67:8e:b0:7a:75:44:f5:15:ee:f7:9c:16:
                    e5:bc:59:f6:04:b8:95:61:6a:51:4f:92:39:2f:87:
                    c5:a3:3d:d0:5a:99:aa:b6:ab:ec:58:70:65:53:79:
                    36:a3:3c:5a:aa:2f:6a:08:a9:ee:e1:aa:d8:ce:d3:
                    e2:c9:03:6b:ca:3a:64:30:f6:6d:32:60:87:b3:5b:
                    1c:33:37:3c:58:d9:8a:1a:be:24:c5:0d:cc:64:5d:
                    5b:89:f4:aa:ca:7d:94:1a:0f:ee:91:5c:61:30:9d:
                    09:2e:3a:ba:e2:e3:fc:00:8f:f4:eb:d0:55:e6:d5:
                    0f:f2:ce:94:a0:2f:f2:cd:87:79:23:0f:d2:ef:62:
                    3e:1e:28:c1:4b:22:63:7a:7e:98:1b:86:5d:44:6c:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B4:0F:86:42:FA:47:6E:43:29:EB:12:1C:E1:D1:52:75:68:FC:39
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS52256.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.255.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:6e:24:7d:60:6a:d3:8b:d6:34:86:b8:a3:fc:d1:77:00:70:
         fa:c6:c6:b7:00:59:d5:af:d5:6b:f0:90:b4:69:95:90:bd:ba:
         f2:e1:86:00:02:32:26:ee:9f:79:a5:24:21:de:83:c5:a5:cc:
         c7:17:6b:02:9e:33:fb:7f:6f:56:cd:0f:43:5e:dd:45:8b:d5:
         ea:5e:5b:df:5c:42:62:19:52:86:3c:88:4f:53:fc:71:77:f4:
         4c:0c:61:2c:41:1b:cb:b4:ba:e1:1b:be:57:f0:b4:ef:d1:20:
         71:51:fb:08:44:e4:2b:58:89:5e:81:65:72:fd:f5:71:75:63:
         49:c9:b1:70:62:51:9f:61:49:7d:2d:d4:51:ab:34:97:c0:1d:
         0a:4b:0b:00:76:41:34:b0:4a:4b:a0:b7:f7:a5:7a:eb:cf:82:
         06:77:ee:8d:70:ab:21:56:ce:16:b7:43:51:d0:62:51:3f:6e:
         5c:02:a4:13:a5:7b:80:28:a7:ea:a4:07:a8:8c:bd:01:08:21:
         71:20:5c:46:91:a1:33:0e:8b:4c:82:1c:8a:ef:a5:ae:db:4a:
         85:2f:86:21:15:f8:c5:cd:e0:ab:77:57:e1:00:27:84:8a:4b:
         4e:45:74:fb:ec:8f:12:52:bb:7b:89:07:97:28:1c:73:31:5c:
         f7:33:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:54 2025 by rpki-client