Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS52256.roa
File:                     AS52256.roa (raw, json)
Hash identifier:          mzVt0ePcGmB/RryTFTgBgx4Aq5PYBEsu8mRJoVwK05I=
Subject key identifier:   FE:98:86:5D:57:5D:20:7C:6B:37:05:93:83:4C:7E:E8:8D:56:95:DF
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       35072D221479B4F3C65674D699D80A8705EFDC20
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS52256.roa
Signing time:             Tue 05 Mar 2024 17:55:22 +0000
ROA not before:           Tue 05 Mar 2024 17:50:22 +0000
ROA not after:            Tue 04 Mar 2025 17:55:22 +0000
asID:                     52256
IP address blocks:        190.255.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 20:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:07:2d:22:14:79:b4:f3:c6:56:74:d6:99:d8:0a:87:05:ef:dc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Mar  5 17:50:22 2024 GMT
            Not After : Mar  4 17:55:22 2025 GMT
        Subject: CN=FE98865D575D207C6B370593834C7EE88D5695DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5d:07:3e:14:4d:44:23:7a:bf:60:cf:5e:4b:
                    83:2f:b4:9d:87:8e:00:b6:e3:52:bf:66:85:e5:02:
                    23:b2:ca:a5:5b:5a:8f:4f:23:bc:d1:cf:64:5c:7b:
                    09:56:1f:cd:9d:d3:8f:0f:d0:01:8a:dd:3d:1e:86:
                    d4:b9:87:f5:a2:61:bc:ef:49:10:7a:c7:d4:cf:22:
                    15:50:a3:ab:f6:43:f6:36:49:59:20:cb:53:9a:ca:
                    e1:7e:8b:ec:e7:78:df:d9:2d:f6:b5:65:05:df:98:
                    c9:f5:de:88:6b:85:3b:73:7b:f2:01:45:d8:75:ce:
                    6a:1e:0d:9e:06:50:d1:f3:3c:d2:6e:58:38:84:27:
                    2b:75:95:60:58:3b:7f:af:87:02:25:03:53:5a:03:
                    95:c2:89:b0:b3:d0:14:d5:32:75:75:c3:a1:9a:0d:
                    f3:45:f1:96:4e:47:a2:64:5c:8c:f2:5c:c8:a6:9d:
                    48:90:0c:bd:11:80:c0:f5:61:f8:a6:5c:23:04:8d:
                    09:9d:da:91:72:bc:1e:32:4b:d5:9a:a9:5c:d6:b1:
                    85:73:ef:48:27:42:22:72:a2:53:09:d0:87:de:5c:
                    00:c7:36:58:7a:2d:ad:13:8e:7f:e8:e9:9a:94:a1:
                    8b:88:e5:76:2a:42:18:e6:b8:16:31:53:ab:ec:19:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:98:86:5D:57:5D:20:7C:6B:37:05:93:83:4C:7E:E8:8D:56:95:DF
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS52256.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.255.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:8c:e6:06:88:ce:c1:47:c9:0c:9f:2a:e3:ea:c7:86:81:8b:
         fb:f3:92:30:db:9b:c0:20:3f:9d:62:05:e6:d4:f5:42:4a:dd:
         62:17:04:96:df:13:c2:e8:ad:84:02:e6:ec:22:56:78:50:76:
         76:34:9d:41:35:37:72:8b:c8:43:7c:c3:28:aa:5c:ad:73:3e:
         29:d6:ec:a0:c5:8b:07:e8:9a:4d:dc:4b:82:07:91:8d:2c:71:
         30:2e:3c:23:56:7b:51:a8:4a:da:87:79:e8:f8:cc:12:28:e3:
         01:81:ec:5f:21:0c:50:e5:87:86:94:05:82:53:35:c8:a0:98:
         f6:de:4a:a8:81:d8:dc:b4:7f:47:91:ba:63:fd:06:05:cd:ef:
         9a:e1:1b:ad:46:66:27:8b:e2:e3:e2:44:6c:53:b6:a8:ce:05:
         0f:dd:36:e9:c2:a6:ff:ec:0c:eb:bd:e5:64:a8:2e:0c:bf:08:
         ad:bb:8d:ae:55:0d:fd:72:65:2e:65:f3:1a:2d:6b:3d:f8:fc:
         b1:73:ce:60:0b:c9:5a:a9:60:a2:e4:c9:f3:80:7f:9b:99:46:
         36:26:34:15:73:f4:bc:d4:ef:8b:27:b1:8f:2b:5e:1f:1e:5e:
         1a:5f:b2:25:e3:4f:2e:70:95:e4:d5:83:44:ff:f8:1f:c2:10:
         cd:6e:85:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 16:04:08 2024 by rpki-client on console-fra.rpki-client.org