Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52444.roa
File:                     AS52444.roa (raw, json)
Hash identifier:          6vsVyasplkWmPpKRLJnpjCf4wmZfFyZfscOuYiiaNwc=
Subject key identifier:   B5:A5:02:51:10:60:4B:1B:93:AE:9C:17:E9:D5:50:5A:69:02:74:3E
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       4DE0344B1D4ABDC9B4FA58CAFAB927D173F4E669
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52444.roa
Signing time:             Tue 05 Mar 2024 18:12:28 +0000
ROA not before:           Tue 05 Mar 2024 18:07:28 +0000
ROA not after:            Tue 04 Mar 2025 18:12:28 +0000
asID:                     52444
IP address blocks:        181.10.140.0/23 maxlen: 24
                          181.10.142.0/24 maxlen: 24
                          181.15.97.0/24 maxlen: 24
                          181.15.98.0/23 maxlen: 24
                          181.15.100.0/24 maxlen: 24
                          181.15.195.0/24 maxlen: 24
                          186.125.62.0/23 maxlen: 24
                          186.125.161.0/24 maxlen: 24
                          186.153.126.0/23 maxlen: 24
                          190.136.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e0:34:4b:1d:4a:bd:c9:b4:fa:58:ca:fa:b9:27:d1:73:f4:e6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Mar  5 18:07:28 2024 GMT
            Not After : Mar  4 18:12:28 2025 GMT
        Subject: CN=B5A5025110604B1B93AE9C17E9D5505A6902743E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:70:0b:09:3d:3a:72:00:75:c0:1c:66:5b:
                    e8:0d:eb:6d:87:c2:2d:94:f6:5b:fd:99:0c:98:c4:
                    ec:45:dc:51:2d:12:b4:5b:21:c8:5b:a4:c2:c8:59:
                    b1:5a:19:3c:c3:bc:d5:7a:f0:71:f0:9f:ef:be:95:
                    fb:02:51:d6:23:b4:5c:4a:3c:ee:e9:63:8b:6a:e6:
                    e1:fb:c6:11:88:0a:ad:4b:c4:48:d5:ce:53:a1:4f:
                    32:5d:3d:7a:65:b6:6b:09:8d:51:32:09:41:04:0d:
                    d8:69:9a:7d:92:b8:65:3a:6e:aa:cb:25:60:8b:a3:
                    13:f9:7b:cc:f5:98:b5:c7:28:2b:ec:4c:c1:c8:2b:
                    b7:21:16:49:80:ce:1f:90:f7:fc:77:0e:6c:d1:0d:
                    09:04:0c:f8:30:6d:be:43:fb:3b:1c:cb:d0:e5:5a:
                    9b:c5:05:2e:dc:81:f7:5c:b1:07:35:20:2e:4b:fa:
                    54:02:0a:3b:ef:34:50:e3:12:00:68:a6:20:9b:97:
                    7a:41:60:89:cc:9c:18:aa:c3:bf:84:c2:5b:dd:67:
                    08:23:73:9e:81:68:a7:34:31:07:fb:a0:09:cb:a8:
                    b2:72:dc:1c:32:a0:af:e3:a8:c6:23:2f:11:a9:fc:
                    3b:a2:f8:98:cd:b8:d1:1b:dd:ad:45:50:96:33:54:
                    6b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A5:02:51:10:60:4B:1B:93:AE:9C:17:E9:D5:50:5A:69:02:74:3E
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52444.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.10.140.0-181.10.142.255
                  181.15.97.0-181.15.100.255
                  181.15.195.0/24
                  186.125.62.0/23
                  186.125.161.0/24
                  186.153.126.0/23
                  190.136.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:94:bd:47:23:e6:8c:5f:1d:cb:30:71:09:b3:75:df:3d:8f:
         ca:fb:39:2a:00:c0:a7:a6:d1:e4:c3:bc:1b:42:d0:f7:e4:ad:
         6c:50:33:c3:79:30:65:08:70:da:7d:54:1b:51:8d:2b:c0:23:
         e1:22:27:f1:e1:67:7b:d1:3a:56:35:0b:a3:18:c7:e1:f8:d2:
         92:8e:13:c6:5f:8a:cf:95:af:49:3f:68:49:d1:48:67:21:75:
         8e:76:ff:16:21:85:e8:46:a6:4d:9d:22:aa:34:f9:6d:83:f4:
         91:85:6d:8e:d3:09:90:c3:99:37:b7:0e:15:d6:5d:6e:b0:9f:
         27:ca:dc:0b:13:8e:5e:ad:97:8c:b4:b0:a8:32:2c:82:62:19:
         d5:33:0d:36:88:a9:41:58:f4:dc:2d:37:9b:bf:0c:a8:f4:ae:
         b4:3c:4a:e8:90:0b:99:44:70:be:f8:44:e9:68:5b:fd:29:b7:
         43:77:81:92:ff:0e:ba:a9:73:b4:97:fb:a1:b7:d6:d6:8c:bf:
         01:1e:99:82:94:1b:bb:ff:75:61:13:68:0e:12:73:d1:d5:ae:
         5b:a4:e8:c8:54:80:4e:fe:01:af:15:0d:4c:c3:5a:bd:12:d1:
         03:9e:fe:e1:80:8f:ca:1c:1f:13:31:91:f0:c4:ec:ea:d6:83:
         52:bf:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org