Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3230312e3135382e35322e302f32322d3232203d3e203332303334.roa
File:                     3230312e3135382e35322e302f32322d3232203d3e203332303334.roa (raw, json)
Hash identifier:          kQ52GjcAaKmmiq31kByRWlp9qjVc7T6bGJszZ5f4zt4=
Subject key identifier:   25:11:87:98:57:47:03:4A:CB:12:80:EE:7B:57:D1:E6:85:42:CA:93
Certificate issuer:       /CN=DC553BD05B33548C342568566291E719B4FA73B9
Certificate serial:       3982593537822234D69F01BAB56FF6B9CA7797C4
Authority key identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3230312e3135382e35322e302f32322d3232203d3e203332303334.roa
Signing time:             Tue 05 Mar 2024 18:06:27 +0000
ROA not before:           Tue 05 Mar 2024 18:01:27 +0000
ROA not after:            Tue 04 Mar 2025 18:06:27 +0000
asID:                     32034
IP address blocks:        201.158.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:82:59:35:37:82:22:34:d6:9f:01:ba:b5:6f:f6:b9:ca:77:97:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC553BD05B33548C342568566291E719B4FA73B9
        Validity
            Not Before: Mar  5 18:01:27 2024 GMT
            Not After : Mar  4 18:06:27 2025 GMT
        Subject: CN=251187985747034ACB1280EE7B57D1E68542CA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:a4:6d:99:8d:68:06:90:1c:a6:24:ee:84:
                    7f:df:de:6d:78:6b:c9:17:f3:c4:f3:6f:ae:bc:dc:
                    7d:14:fc:6d:6e:82:63:8f:65:1b:db:93:1b:3e:07:
                    f3:38:dd:0f:13:9f:d4:a6:60:26:d6:2e:e6:bf:41:
                    5d:e0:f2:c5:08:2f:63:d1:8f:1b:5a:fe:12:4c:2e:
                    29:e7:b2:5c:53:f3:59:6c:f6:60:76:7c:51:32:cb:
                    ed:a4:2d:04:65:48:8f:ca:1b:83:61:af:dd:71:09:
                    de:b2:2b:45:eb:97:86:d9:ab:21:08:9e:95:3f:28:
                    55:fb:42:25:b7:25:f8:3d:c9:9c:96:a0:c4:2f:02:
                    b5:a8:37:60:7e:f8:57:42:8f:43:d7:7e:c1:a6:aa:
                    cb:a6:f5:bc:6e:cb:a1:1d:1a:37:a3:02:f1:af:37:
                    04:c5:32:54:bf:0c:80:cf:bd:f3:72:fa:ee:e2:94:
                    b5:8e:a7:22:7c:3c:7e:91:a0:46:fe:d5:68:54:94:
                    01:53:1e:38:91:9a:07:93:e0:a3:ad:75:8d:43:49:
                    82:27:ad:65:9d:97:26:67:8d:16:a5:12:e9:c4:b3:
                    24:7f:5f:c1:fb:25:a5:53:70:2c:2c:79:88:1e:ef:
                    01:18:93:17:bf:63:a0:2b:73:14:61:6b:51:08:06:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:11:87:98:57:47:03:4A:CB:12:80:EE:7B:57:D1:E6:85:42:CA:93
            X509v3 Authority Key Identifier:
                keyid:DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3230312e3135382e35322e302f32322d3232203d3e203332303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:30:45:57:34:a2:6a:93:37:f2:07:20:e1:2a:e9:31:a0:73:
         d5:29:0c:e5:c7:b0:04:31:8b:a0:94:c6:2f:ab:7e:53:da:da:
         2a:93:b2:5c:4d:60:9d:b3:26:81:df:93:1a:1c:71:5a:64:14:
         c0:fd:03:fe:4d:e0:d8:12:ba:b7:ea:c8:23:91:79:81:af:9f:
         35:d4:67:aa:61:3e:97:1b:10:50:95:06:1e:82:3e:e6:2f:c1:
         bf:25:df:79:64:34:19:e4:a1:09:31:64:72:d5:4d:c1:40:42:
         8f:f6:bc:95:c4:12:d7:c8:a0:4e:61:2e:d4:54:f9:f0:e2:e3:
         be:2f:ea:09:7d:b6:66:d4:5b:ad:68:d3:5e:30:b0:07:6e:ea:
         c9:8a:b8:b6:67:bf:3e:aa:92:8c:e2:25:bb:92:d3:60:62:f5:
         37:75:e5:96:24:9f:5b:cd:e1:d6:59:6e:70:ae:0b:a0:8b:d9:
         fe:4a:98:93:08:c9:d1:2f:f3:55:2e:f0:48:44:6e:52:8f:a2:
         c3:7e:f7:bc:cb:a1:78:c3:cd:7e:db:c7:56:9c:07:43:d8:83:
         fc:99:b2:8f:1f:25:11:b3:bd:e2:4d:a1:2a:8e:48:aa:fa:9e:
         9c:06:0c:aa:21:48:c5:d0:ea:6e:b8:1f:09:6a:fe:40:2d:e3:
         15:99:2e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org