Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52436.roa
File:                     AS52436.roa (raw, json)
Hash identifier:          ZWXXYNRAKBRUB80/i9qvhYsiZOM95FtiWhHPlFwpmDk=
Subject key identifier:   57:DC:A1:FE:7C:A8:11:4E:12:8F:FB:4B:9A:78:9C:E1:31:99:B0:7B
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       69815086EA5EC4A21008EBC8011C1B200B4FD018
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52436.roa
Signing time:             Tue 05 Mar 2024 18:12:24 +0000
ROA not before:           Tue 05 Mar 2024 18:07:24 +0000
ROA not after:            Tue 04 Mar 2025 18:12:24 +0000
asID:                     52436
IP address blocks:        181.10.236.0/23 maxlen: 24
                          181.13.56.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:81:50:86:ea:5e:c4:a2:10:08:eb:c8:01:1c:1b:20:0b:4f:d0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Mar  5 18:07:24 2024 GMT
            Not After : Mar  4 18:12:24 2025 GMT
        Subject: CN=57DCA1FE7CA8114E128FFB4B9A789CE13199B07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:b0:2f:32:03:21:e0:c2:d6:18:e0:50:85:
                    bd:54:90:0e:6b:a3:fb:cd:ef:bd:30:d7:83:6f:7c:
                    f4:b7:c7:cb:16:38:6b:73:98:b3:9b:87:1e:28:4d:
                    fb:3f:d5:fd:f7:26:fb:7e:fd:39:ec:03:59:ad:a6:
                    e0:e0:65:3d:f7:f3:c1:5a:85:69:88:f2:6c:f4:e0:
                    56:ee:5e:06:ee:d4:69:92:23:55:41:14:5e:dc:82:
                    19:c3:dc:32:fd:fa:eb:51:76:1d:82:36:f7:56:43:
                    cb:49:23:a0:50:c4:9c:28:cb:aa:b4:9b:e8:57:16:
                    22:4f:22:8d:a3:bd:17:89:bd:cc:46:5e:d3:ba:91:
                    e0:f3:75:68:88:33:1d:23:a5:c4:8b:33:18:5e:4a:
                    bd:8c:7c:24:cd:e7:b8:1d:25:f7:19:a8:9d:41:2d:
                    28:8b:17:a8:68:8e:88:28:5b:3d:90:c4:1c:7c:df:
                    d0:71:74:28:7d:95:8b:29:2f:6e:7d:8a:a3:b5:88:
                    33:2f:8d:99:e8:dd:08:37:a8:28:5b:eb:26:46:5f:
                    3d:92:fc:71:23:ea:93:0a:ce:0d:14:64:39:73:8a:
                    ef:ae:9b:0b:e5:e4:6c:c4:ae:4e:6c:17:cb:d6:0f:
                    3d:75:f0:03:a4:a7:0a:53:59:62:c7:7d:bc:86:c8:
                    84:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DC:A1:FE:7C:A8:11:4E:12:8F:FB:4B:9A:78:9C:E1:31:99:B0:7B
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.10.236.0/23
                  181.13.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:ef:e0:92:c4:60:46:d1:cb:88:37:54:ae:87:69:d8:6f:88:
         bc:63:9f:14:5c:db:32:75:94:67:3b:50:82:b4:c0:ae:97:83:
         84:a8:fd:1b:08:79:9b:3d:6f:54:19:59:88:cc:8f:3b:35:f4:
         bc:64:e3:52:9f:58:77:e0:ea:e8:6f:a6:a0:08:24:2b:78:a4:
         fd:3d:87:6e:83:15:dc:6e:26:d6:ad:88:f5:3d:6a:f2:d5:e3:
         a0:9e:e6:c8:98:44:83:e3:71:a3:3b:8f:53:5a:bc:ce:2a:c9:
         f0:e6:ce:0a:32:ef:42:c8:4a:a0:56:e1:68:89:fc:8e:0c:69:
         af:78:79:35:11:0f:ab:a6:f4:fd:e4:45:d6:5c:f5:a3:9c:6f:
         af:0b:b7:d4:12:9b:07:b9:fe:0b:a7:7b:7d:8a:d3:8b:39:8b:
         2e:9f:fa:75:07:0f:1b:17:e2:34:48:c8:ec:23:a7:72:6c:4d:
         e1:eb:ac:1e:3e:39:c7:06:d1:d7:b2:a4:4a:af:d6:e8:64:42:
         9c:73:9a:19:a9:17:6f:12:5c:79:c6:09:ca:f6:28:ae:f2:11:
         a0:b8:f2:e7:a3:92:b1:9b:a3:f4:5d:c4:f2:09:7a:aa:3c:19:
         83:3e:88:6e:bd:39:7c:41:de:23:3d:49:4c:4e:cb:7f:79:0f:
         2d:2e:cf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org