Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52279.roa
File:                     AS52279.roa (raw, json)
Hash identifier:          MxYxK4q6/ys0erbCSoMDie2bsYE5Bm5JDXwnYpTG/fA=
Subject key identifier:   C6:5D:26:F7:3E:7D:80:94:64:AB:58:B4:8E:D4:31:E1:63:C2:C3:12
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       2289742B261B0AF1C24A1DE691D7F5AD183C4221
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52279.roa
Signing time:             Tue 05 Mar 2024 18:12:25 +0000
ROA not before:           Tue 05 Mar 2024 18:07:25 +0000
ROA not after:            Tue 04 Mar 2025 18:12:25 +0000
asID:                     52279
IP address blocks:        200.43.105.0/24 maxlen: 24
                          200.43.106.0/23 maxlen: 24
                          200.45.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:89:74:2b:26:1b:0a:f1:c2:4a:1d:e6:91:d7:f5:ad:18:3c:42:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Mar  5 18:07:25 2024 GMT
            Not After : Mar  4 18:12:25 2025 GMT
        Subject: CN=C65D26F73E7D809464AB58B48ED431E163C2C312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:ee:c2:3b:b2:36:85:41:26:d0:3e:09:4b:
                    0b:43:9a:f5:6f:ee:ff:04:a2:2c:44:0a:b6:be:83:
                    85:90:2e:a3:7e:a7:11:db:78:81:47:3b:ae:9f:92:
                    01:6b:39:02:d4:ec:7d:bd:80:05:79:80:ac:1b:b5:
                    60:60:41:29:34:3f:59:b0:a6:99:42:d8:ae:32:75:
                    b7:ce:ce:6c:ff:33:5f:72:c3:a9:7e:59:9b:8b:a8:
                    db:93:ba:67:87:51:eb:b8:d3:90:a9:a1:aa:37:0c:
                    39:12:e0:fd:ac:e6:f9:9b:10:24:6d:b3:f2:bf:b3:
                    29:02:9e:4a:0d:48:0f:b8:c8:d4:6f:ff:35:94:c3:
                    db:b1:b1:6c:f9:0d:ae:8f:c4:4f:1f:47:2a:a3:e2:
                    d2:86:11:01:5c:3b:0c:f8:45:8b:5b:a8:ff:4f:14:
                    d1:24:3e:17:12:2e:24:de:bf:7b:5f:ba:a2:2b:86:
                    e2:d1:56:1a:05:59:5c:fc:bc:be:2e:0c:f1:d2:52:
                    ca:82:09:11:2a:19:9a:68:c3:f5:40:db:71:95:5b:
                    db:48:49:e2:20:d1:ee:64:27:9f:2d:e3:36:df:cd:
                    cd:43:51:22:12:be:83:d7:95:c7:ad:55:e7:e5:01:
                    a2:14:e4:3a:a8:39:c6:63:52:d0:1f:c0:e9:ed:a6:
                    0f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5D:26:F7:3E:7D:80:94:64:AB:58:B4:8E:D4:31:E1:63:C2:C3:12
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52279.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.43.105.0-200.43.107.255
                  200.45.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:3e:c0:88:eb:f1:88:e7:2e:cc:14:69:22:da:fe:dc:c6:d8:
         29:c8:4d:d6:d0:10:de:4f:35:cc:ed:7d:8c:cb:21:97:36:6f:
         71:7c:80:d4:e7:21:1b:57:89:26:1b:0f:e9:ed:b6:21:5f:90:
         93:4e:aa:93:05:a4:98:c8:84:23:02:25:9b:ea:ef:a4:bd:1f:
         97:6e:5d:57:0b:32:85:6d:35:e9:f5:0c:fe:12:9d:7d:7e:d3:
         10:c5:b8:f5:36:68:9a:e1:2f:71:4b:d9:d0:c5:91:45:8c:35:
         dc:db:ea:38:19:a9:f6:3e:db:32:82:98:64:ee:1a:5f:28:70:
         64:34:18:82:68:92:c8:19:49:3e:3b:02:aa:40:1b:63:32:15:
         58:33:7f:bc:57:1b:c7:07:3b:88:5f:05:28:97:b6:b3:cf:d0:
         9f:26:13:07:9c:b0:b2:06:e5:02:4e:ef:8d:ef:48:45:e4:d2:
         98:93:ba:cb:d4:83:18:65:62:24:4c:5a:ec:89:5f:8b:4d:71:
         bb:b4:dd:eb:4f:d4:5e:06:f8:96:d0:a3:f9:9c:3c:ed:25:8c:
         a0:8d:ec:37:be:f5:6a:df:f6:6d:b5:de:4b:58:2c:9a:b3:76:
         16:c3:02:85:c5:5e:53:65:d0:6a:d3:e1:2b:2e:6e:ec:36:cf:
         d1:3a:ac:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:47 2024 by rpki-client on console-fra.rpki-client.org