Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS52446.roa
File:                     AS52446.roa (raw, json)
Hash identifier:          0lZdnfQm66hRJevTRrYBFG7AtOSIHKq7+ZRyLGAycD0=
Subject key identifier:   04:B8:81:44:A3:FF:C0:29:C3:6A:BD:F0:54:F8:D3:16:49:76:31:79
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       4527C576E89AB9F7FD6775497533329FD2E1A530
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS52446.roa
Signing time:             Tue 05 Mar 2024 17:54:53 +0000
ROA not before:           Tue 05 Mar 2024 17:49:53 +0000
ROA not after:            Tue 04 Mar 2025 17:54:53 +0000
asID:                     52446
IP address blocks:        200.90.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:27:c5:76:e8:9a:b9:f7:fd:67:75:49:75:33:32:9f:d2:e1:a5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Mar  5 17:49:53 2024 GMT
            Not After : Mar  4 17:54:53 2025 GMT
        Subject: CN=04B88144A3FFC029C36ABDF054F8D31649763179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:05:b9:06:77:42:08:b7:d6:40:a6:cf:05:88:
                    cd:f5:97:ec:34:3f:39:a1:33:ff:d1:d8:22:ea:5d:
                    0b:5c:6e:28:2b:2d:f2:41:55:7b:c3:58:a1:89:81:
                    db:61:2b:67:e5:80:b4:c3:a4:27:85:87:45:00:17:
                    9e:26:c7:e4:ca:08:24:e1:1f:51:2e:5f:a6:55:fc:
                    c0:60:cf:5d:0f:59:14:0c:66:b0:3a:53:ca:44:bc:
                    29:e0:52:68:fd:9b:02:b1:21:56:6e:b3:0a:be:f3:
                    01:52:1f:0f:db:26:1f:6f:ea:01:29:58:f3:53:60:
                    b6:1b:46:1c:67:91:8f:b6:07:62:87:95:eb:9b:d4:
                    ae:c1:cc:2d:95:63:89:6c:7b:55:51:ff:af:7e:0a:
                    b0:ff:a6:c6:26:0d:0d:3f:07:d0:54:e3:23:37:5c:
                    0a:3e:f8:40:4b:ab:b4:b2:23:6b:26:c0:3c:f3:69:
                    81:df:4c:e4:01:17:24:0d:50:85:06:d0:da:78:bf:
                    17:c9:61:01:9b:74:4b:75:56:1f:62:bf:b7:ec:82:
                    a7:99:6d:d3:0f:e7:d7:2d:21:4c:c9:8d:37:29:28:
                    fa:c2:33:70:75:02:81:a2:68:bb:51:6e:54:4a:02:
                    28:af:1a:62:18:a3:1b:5b:d0:ad:31:9e:76:31:c9:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B8:81:44:A3:FF:C0:29:C3:6A:BD:F0:54:F8:D3:16:49:76:31:79
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS52446.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:17:d3:7f:b7:86:fa:97:bd:33:00:98:ab:76:65:54:9c:0a:
         fa:0f:0c:a2:9a:f3:62:81:a2:b4:9d:f9:9e:1c:e0:9f:be:9c:
         a0:2b:e1:e4:5f:61:c3:1b:ac:62:04:3d:a9:d7:8b:a0:32:6d:
         c6:dd:e1:22:1f:35:39:b2:70:2d:d9:8f:d2:31:2a:07:5b:d2:
         cf:02:b5:1c:4c:c2:44:0c:d4:d7:75:13:9e:ca:3d:ff:d0:e3:
         d0:3d:c8:44:03:04:84:e2:c0:b3:f0:fb:d9:7c:53:06:7e:fd:
         f0:0c:87:4b:6c:f9:99:fa:a8:cf:15:d8:f2:c5:ef:96:65:b0:
         50:57:1f:43:bc:4e:84:95:7c:65:03:f1:73:54:ae:95:00:01:
         64:c3:db:14:0f:81:6e:11:45:a8:75:32:df:ef:95:e8:37:a8:
         4d:33:fc:87:59:c5:fe:27:45:9e:57:ce:a0:55:5c:11:9c:f5:
         eb:2c:09:dc:fb:5e:06:ca:fa:fa:a2:0b:fd:af:93:f3:2f:34:
         b1:35:c7:87:45:8e:fd:e9:c8:dd:bd:99:ee:83:c1:49:05:4d:
         09:89:a1:8a:c0:66:5a:99:f1:89:2b:5b:15:24:0b:d2:65:82:
         6a:36:46:13:ad:e7:8c:ee:a7:84:06:02:b7:4a:20:d5:c9:ee:
         cd:75:1a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org