Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52271.roa
File:                     AS52271.roa (raw, json)
Hash identifier:          AMBZx9ZAar/tVjgpxgoFy4JwY5RcLbJO4S4IPYLSdOU=
Subject key identifier:   E2:98:F9:AF:60:1B:CC:F3:DA:55:2F:A4:8A:3B:C1:B2:66:DB:52:F0
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       07CA9BD154DC4BF8F73D93F3D9DDA63AA682C8EE
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52271.roa
Signing time:             Tue 04 Feb 2025 20:06:57 +0000
ROA not before:           Tue 04 Feb 2025 20:01:57 +0000
ROA not after:            Tue 03 Feb 2026 20:06:57 +0000
asID:                     52271
IP address blocks:        190.136.15.0/24 maxlen: 24
                          190.136.16.0/24 maxlen: 24
                          190.137.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ca:9b:d1:54:dc:4b:f8:f7:3d:93:f3:d9:dd:a6:3a:a6:82:c8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:01:57 2025 GMT
            Not After : Feb  3 20:06:57 2026 GMT
        Subject: CN=E298F9AF601BCCF3DA552FA48A3BC1B266DB52F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:99:14:00:80:5d:6f:b1:53:10:d4:43:93:
                    2e:42:95:3b:aa:d7:3b:ea:30:b5:59:a0:f6:1b:a0:
                    38:5d:52:9c:8c:fa:54:c8:82:3e:54:4b:18:d1:66:
                    c4:4c:aa:f5:35:cf:1a:27:3d:da:ea:a8:0f:f8:64:
                    ea:30:ec:9c:bd:30:a9:59:f0:20:13:6e:ea:45:77:
                    f8:f0:55:06:1d:f9:cc:e7:7a:cf:a2:bb:f3:42:1e:
                    cd:c8:a6:9d:35:fc:23:17:c3:4b:1a:89:3f:ea:9b:
                    b4:09:46:2a:d1:1c:61:0d:3c:51:b0:5a:e7:36:5b:
                    38:53:de:85:95:83:67:62:9f:cc:5c:32:20:e2:10:
                    a8:48:82:3a:6a:51:2f:a1:31:42:26:3d:e7:4b:4c:
                    e0:88:bc:b6:04:3b:3c:20:53:a4:b0:ab:0d:47:bd:
                    b9:d8:1a:c0:c2:84:94:d7:1e:ea:ad:cb:96:a0:4f:
                    39:49:f7:c9:e9:d4:92:4b:a1:73:91:0a:9e:43:84:
                    6c:58:39:e8:00:8b:7b:b1:b0:49:f7:30:28:b2:64:
                    51:c7:20:52:9f:03:b4:f6:94:e6:9f:74:45:14:a1:
                    f8:4f:15:59:1a:57:fb:d4:80:a0:e4:cc:ff:d7:3a:
                    2a:e2:ef:8b:d8:52:17:8b:18:b6:f6:c5:a8:64:8f:
                    72:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:98:F9:AF:60:1B:CC:F3:DA:55:2F:A4:8A:3B:C1:B2:66:DB:52:F0
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52271.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.136.15.0-190.136.16.255
                  190.137.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ac:f6:38:0f:5c:69:e1:f7:50:3d:4f:75:d8:97:16:f1:45:
         a6:f3:49:cf:2d:25:15:8e:bb:6b:7c:b4:12:d0:18:0a:53:8c:
         57:72:44:94:1c:61:48:8f:14:88:c5:6f:58:8e:7b:97:16:0b:
         80:16:23:cb:b1:45:30:ef:b4:bc:fa:4b:39:91:8d:1d:42:81:
         f7:ea:bf:37:77:26:9a:57:46:a0:b7:63:62:07:81:1f:9f:05:
         7f:c2:b1:98:93:e8:bd:61:3d:34:7e:62:f7:99:fa:ef:53:98:
         41:ea:21:22:88:2a:77:d6:81:1a:c6:2f:0e:a3:18:53:36:b0:
         69:19:83:9b:56:6c:07:6b:61:63:7f:e0:1d:c5:e3:6f:5b:63:
         60:50:76:47:c9:e6:ae:f9:e9:0d:6b:a5:0e:2a:d6:52:4c:97:
         b9:f3:22:58:16:d0:b6:46:5d:be:ea:92:df:9e:16:65:85:3f:
         a9:33:10:71:57:6f:2d:f2:aa:3b:9e:d1:76:f8:9a:2a:a1:7c:
         16:d1:0c:ec:3e:8c:25:b8:62:75:e3:0f:82:8b:d6:e0:66:81:
         17:21:dd:74:19:22:a7:18:d7:73:63:d7:96:79:06:8b:f5:99:
         ea:1c:3f:6a:01:78:d9:b6:a3:1f:73:b3:ad:48:03:9a:41:e4:
         a5:a6:e6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:10:36 2025 by rpki-client