Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52323.roa
File:                     AS52323.roa (raw, json)
Hash identifier:          Hu67XIZtFfUYzX4mY0LP1NaK4GZV8TdLZAPoIHwKc4I=
Subject key identifier:   11:29:87:DF:09:55:07:18:DE:0A:74:DE:4C:7E:E4:A6:11:55:34:F6
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       562474B11A3DECE284F4A91393BD033FE7F4CBEE
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52323.roa
Signing time:             Tue 05 Mar 2024 18:12:29 +0000
ROA not before:           Tue 05 Mar 2024 18:07:29 +0000
ROA not after:            Tue 04 Mar 2025 18:12:29 +0000
asID:                     52323
IP address blocks:        190.225.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:24:74:b1:1a:3d:ec:e2:84:f4:a9:13:93:bd:03:3f:e7:f4:cb:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Mar  5 18:07:29 2024 GMT
            Not After : Mar  4 18:12:29 2025 GMT
        Subject: CN=112987DF09550718DE0A74DE4C7EE4A6115534F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:b6:54:f5:3c:9d:27:d3:0f:4c:49:ff:3c:
                    09:c5:ec:a2:28:b4:97:cc:15:9d:ae:24:12:2b:d8:
                    7b:79:54:a4:6a:82:e4:9d:b8:f1:6f:94:f0:d8:92:
                    92:a9:41:2c:b1:a9:6f:96:1a:83:68:db:02:08:ad:
                    ec:b6:a0:a5:87:3d:28:94:6c:7b:fa:dc:8c:ce:ab:
                    83:fe:4e:ee:aa:97:b8:d9:15:5b:b7:28:3c:f6:93:
                    51:0c:b1:f3:21:23:ca:62:3d:47:d2:33:42:9c:e3:
                    ff:27:d1:02:54:2b:0f:23:1b:69:c0:05:17:9c:aa:
                    13:b6:27:76:77:a5:62:b5:5f:0e:78:80:69:6c:c7:
                    85:36:60:9d:99:9a:31:6d:22:77:50:87:27:4e:08:
                    36:26:5b:e5:89:9c:34:06:21:07:4f:24:af:df:99:
                    01:c0:6b:c4:05:ad:26:32:d0:9f:13:76:56:f6:3c:
                    3b:11:23:09:d4:e6:2c:7f:83:13:19:5e:ba:2a:f1:
                    01:9d:ce:3e:d1:e1:75:b9:e0:a5:1c:93:14:de:48:
                    aa:ce:8f:7c:1d:c2:52:29:0e:dd:91:68:47:82:29:
                    cb:b5:06:d9:62:7f:8e:9d:54:b8:41:a8:a5:65:68:
                    00:6a:c5:60:48:53:16:75:78:6e:ac:2f:b3:1a:75:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:29:87:DF:09:55:07:18:DE:0A:74:DE:4C:7E:E4:A6:11:55:34:F6
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52323.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.225.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:3a:0c:93:38:94:45:f3:bd:a5:fd:0f:c2:c2:60:a6:e7:49:
         f6:6c:99:df:c0:3f:22:21:22:d0:ed:d7:ec:d7:d2:f1:b3:83:
         c3:83:ce:f9:2f:e9:3f:e5:2d:ac:51:da:48:70:d6:f5:21:75:
         e7:0b:db:9c:1d:5b:15:30:be:ae:b7:ba:05:87:f6:94:02:4c:
         e3:a9:a6:f8:89:6f:fc:15:4d:cf:25:b9:2a:f6:83:cb:ea:55:
         d0:9f:09:ed:1a:98:ae:27:25:26:41:34:26:1b:a3:d9:44:46:
         f9:6a:9d:18:56:91:2b:0a:b2:5e:36:2d:44:34:1b:0b:82:29:
         23:cd:8f:00:df:45:30:06:dd:aa:78:42:c9:4c:2c:be:87:b0:
         65:56:18:ad:83:6b:19:2d:ae:de:83:e9:b6:25:fb:04:a4:dc:
         2b:cc:f4:52:13:61:cd:6c:30:d2:c5:24:1b:f6:d5:02:61:c7:
         a2:6e:75:51:ed:68:82:f5:ca:0f:e6:4e:3d:77:91:bb:1b:29:
         3e:2d:3e:bf:42:c0:93:74:3f:47:da:96:6e:fe:31:5f:38:f0:
         8f:81:f0:8c:91:ea:9c:00:bb:98:bc:51:b5:f7:e5:96:92:16:
         cf:2f:dc:f6:12:1a:73:d9:d6:27:a8:0c:84:23:17:08:61:96:
         69:43:51:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:52:21 2024 by rpki-client on console-ams.rpki-client.org