Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52444.roa
File:                     AS52444.roa (raw, json)
Hash identifier:          J12XwoGG65IalWm5UGz+XUCB0IYI6dPsJYXTY8l/fJQ=
Subject key identifier:   C6:33:08:8A:42:94:8D:06:14:51:D2:30:CA:DE:28:AF:1C:52:97:88
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       3D0E08674CADFB823600BC6063AE4383FADC2CDF
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52444.roa
Signing time:             Tue 04 Feb 2025 20:06:58 +0000
ROA not before:           Tue 04 Feb 2025 20:01:58 +0000
ROA not after:            Tue 03 Feb 2026 20:06:58 +0000
asID:                     52444
IP address blocks:        181.10.140.0/23 maxlen: 24
                          181.10.142.0/24 maxlen: 24
                          181.15.97.0/24 maxlen: 24
                          181.15.98.0/23 maxlen: 24
                          181.15.100.0/24 maxlen: 24
                          181.15.195.0/24 maxlen: 24
                          186.125.62.0/23 maxlen: 24
                          186.125.161.0/24 maxlen: 24
                          186.153.126.0/23 maxlen: 24
                          190.136.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Feb 2025 09:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0e:08:67:4c:ad:fb:82:36:00:bc:60:63:ae:43:83:fa:dc:2c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:01:58 2025 GMT
            Not After : Feb  3 20:06:58 2026 GMT
        Subject: CN=C633088A42948D061451D230CADE28AF1C529788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:58:97:f4:4f:ea:c1:dd:68:0f:15:82:1f:da:
                    1e:43:10:bd:25:c4:93:2f:5c:82:b3:39:02:96:46:
                    6c:15:9a:28:8c:7f:dd:c1:44:8a:7d:14:9d:95:92:
                    8e:6e:07:2a:1c:15:da:41:42:8f:28:7c:6b:be:13:
                    63:de:d6:f0:00:d2:07:1c:8d:7b:4c:1c:f2:29:af:
                    c6:36:c5:0b:31:2b:01:93:d7:10:0a:95:14:9c:3c:
                    86:7a:76:1a:9d:a7:46:09:3e:b0:be:c4:b8:ec:d1:
                    fe:28:1d:28:a0:40:8c:f5:36:44:d4:58:4c:bb:87:
                    5a:c1:c6:a9:55:3a:03:99:59:c8:2e:05:aa:f5:31:
                    9a:6d:37:8f:62:f1:6e:97:ef:a5:b4:e0:b6:72:18:
                    a9:04:81:91:37:b8:53:9b:9b:e5:7e:09:b6:d9:52:
                    7d:1a:96:fa:dd:93:b4:7d:a6:c0:f9:78:7c:93:f6:
                    ca:ed:a2:eb:f9:ba:7a:3a:21:7d:5e:d8:ed:42:be:
                    d3:39:da:31:fd:df:26:10:b6:f0:f2:80:4d:99:ca:
                    16:3a:15:93:b2:65:f3:d8:d1:e1:3e:ab:4c:8a:1a:
                    d3:77:e6:37:24:c1:7e:31:a2:ee:d9:3e:cf:2a:dd:
                    6c:e6:09:e9:af:fb:62:f2:dc:11:62:2f:3f:91:a1:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:33:08:8A:42:94:8D:06:14:51:D2:30:CA:DE:28:AF:1C:52:97:88
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52444.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.10.140.0-181.10.142.255
                  181.15.97.0-181.15.100.255
                  181.15.195.0/24
                  186.125.62.0/23
                  186.125.161.0/24
                  186.153.126.0/23
                  190.136.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:a9:87:80:8e:e1:2a:de:33:21:b1:78:15:4c:66:a8:f9:17:
         46:56:b4:52:66:d0:8a:b1:cc:08:02:a1:bf:e1:7a:29:6d:a2:
         27:09:85:ea:e6:07:6c:2a:d9:da:c7:8e:4d:f1:b9:6b:0f:31:
         f3:98:4c:92:d2:cb:ae:92:03:c9:5f:69:91:b1:e9:ef:13:f6:
         95:9a:cf:ed:56:56:9c:b3:a6:7f:0e:09:7c:cd:b8:18:fc:6d:
         82:89:76:cd:ae:10:ab:8a:34:6c:98:de:f1:21:ca:a7:fa:74:
         a4:27:ec:a8:da:23:a4:95:1a:52:bd:9a:5b:c0:ac:8e:2e:6e:
         30:be:2c:1a:42:88:ec:4a:f0:fa:1b:cd:d2:44:c9:59:55:22:
         30:67:91:a4:8c:b1:87:d1:aa:92:ab:f5:59:d0:34:d7:4e:83:
         d7:7e:12:7d:d1:9d:44:b6:64:95:b8:8f:2c:09:af:0c:00:de:
         2b:df:4c:e8:ee:ba:22:4d:a9:be:b9:c5:d6:d0:a9:11:8e:46:
         bf:d0:2a:b3:ab:6f:3d:b4:25:70:3d:8e:b5:53:cb:80:45:ed:
         e7:cd:45:1b:0e:6c:29:f6:e7:88:90:0b:03:86:29:7c:1d:75:
         4b:97:f7:72:7f:54:ae:c0:a4:b4:38:96:44:ec:f9:45:4e:b3:
         41:04:45:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 9 14:52:51 2025 by rpki-client