Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3133322e3235352e3131322e302f32322d3234203d3e203532343336.roa
File:                     3133322e3235352e3131322e302f32322d3234203d3e203532343336.roa (raw, json)
Hash identifier:          vuwyn2QsTQPVaCSsX8OIeRpxqj0rEsTOKLmdfTEZTHY=
Subject key identifier:   AA:6F:0A:51:64:FD:BE:2B:C6:78:87:50:F2:BB:15:46:BC:1D:8D:D1
Certificate issuer:       /CN=0DD8C886E7D641E553703DC5E196957F1368902C
Certificate serial:       3583A645D0C5197E5367C296B14029BADB917827
Authority key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3133322e3235352e3131322e302f32322d3234203d3e203532343336.roa
Signing time:             Tue 05 Mar 2024 18:00:12 +0000
ROA not before:           Tue 05 Mar 2024 17:55:12 +0000
ROA not after:            Tue 04 Mar 2025 18:00:12 +0000
asID:                     52436
IP address blocks:        132.255.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:83:a6:45:d0:c5:19:7e:53:67:c2:96:b1:40:29:ba:db:91:78:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD8C886E7D641E553703DC5E196957F1368902C
        Validity
            Not Before: Mar  5 17:55:12 2024 GMT
            Not After : Mar  4 18:00:12 2025 GMT
        Subject: CN=AA6F0A5164FDBE2BC6788750F2BB1546BC1D8DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:3a:18:a3:09:c1:3d:2d:96:03:9a:d8:8d:
                    d7:49:d6:90:8b:3d:cc:74:05:40:48:de:2a:2a:0b:
                    a0:17:2c:71:d9:aa:d5:0f:44:5f:84:e6:cd:1d:5b:
                    ff:94:fb:04:68:8e:05:28:bd:92:67:a6:9e:73:79:
                    1c:35:f5:c6:04:d0:50:9e:37:b1:8e:17:71:39:62:
                    4a:91:5d:a0:9a:08:13:a6:5a:0b:9d:9a:a4:3a:fe:
                    4b:68:04:29:4f:69:4a:d9:be:d2:f2:83:7d:ee:04:
                    6c:a3:91:eb:68:32:23:fe:59:64:95:30:a9:0b:d9:
                    a6:6d:83:60:2f:d2:70:58:d6:64:0e:a8:6a:9c:2e:
                    c1:83:99:05:9b:4a:d8:3d:26:86:62:00:fa:b8:ef:
                    3f:18:80:59:aa:8f:74:80:a7:90:37:df:ca:3d:67:
                    75:39:d3:b6:0e:52:c0:b6:57:9a:b9:e3:a3:9a:39:
                    d0:76:54:6e:64:21:c1:12:af:fa:cd:75:2e:37:32:
                    34:b6:d7:9d:d0:6a:43:fc:27:13:56:2e:3a:0f:0f:
                    fb:86:fa:f9:cd:83:82:4e:55:e3:86:b7:f0:58:6b:
                    34:08:31:43:44:4e:03:e6:ce:db:4e:31:28:ae:a2:
                    3d:9e:53:14:67:ae:51:38:02:21:3f:04:2c:59:24:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6F:0A:51:64:FD:BE:2B:C6:78:87:50:F2:BB:15:46:BC:1D:8D:D1
            X509v3 Authority Key Identifier:
                keyid:0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3133322e3235352e3131322e302f32322d3234203d3e203532343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:0f:51:ca:be:6c:ae:bd:72:23:6b:7b:7b:73:f4:b2:b8:f5:
         bd:b2:fc:3f:a6:5f:9a:ff:46:fb:35:cd:ce:e4:2a:46:63:09:
         5d:67:ad:8d:74:4c:1c:1d:90:17:58:0d:d1:fd:b2:dc:2d:e5:
         37:db:7a:59:69:e6:60:50:07:23:8a:e1:05:a5:ce:76:a9:bd:
         96:cb:fc:f5:4e:a8:35:12:40:48:e4:46:69:c9:17:51:50:1b:
         7f:23:c0:b5:70:44:9b:82:86:a9:10:e0:a6:2b:54:10:87:d8:
         ec:09:0f:41:72:fc:e1:0a:c6:15:b5:d0:b5:05:27:94:c7:42:
         03:44:a3:b2:50:39:4e:67:a9:84:2b:21:52:34:6d:f4:1d:3c:
         a4:07:3c:72:5b:c9:73:98:8c:bd:5b:d8:4c:ae:62:a1:76:1c:
         77:ac:27:22:54:12:13:7d:32:70:b5:a6:b9:69:d9:58:2a:1c:
         4b:d7:70:fb:8d:f8:75:91:5b:49:d1:ef:23:ce:9e:eb:95:83:
         eb:e0:eb:ce:da:ae:37:df:9d:f0:a6:1f:97:91:95:a1:6a:d2:
         45:3a:cf:e6:8e:43:65:da:4e:26:5c:00:c3:4b:ac:97:cf:5a:
         c0:1d:96:45:48:03:ca:62:33:27:bd:32:d4:a0:6c:f0:84:01:
         92:6e:ae:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 05:59:15 2024 by rpki-client on console-fra.rpki-client.org