Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/3136382e3139342e35322e302f32322d3234203d3e20323633363939.roa
File:                     3136382e3139342e35322e302f32322d3234203d3e20323633363939.roa (raw, json)
Hash identifier:          0Q5olB2qweDdX5pephFgs4+/zV+pk+uPdbeZS4DMwd8=
Subject key identifier:   A6:53:C7:62:BB:C0:97:F1:A4:A1:95:B7:BF:54:20:84:D0:93:92:01
Certificate issuer:       /CN=5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F
Certificate serial:       7FB290668CAFD1A7690681571931ACC912242A0D
Authority key identifier: 5E:40:F5:09:D8:EC:34:62:F8:B8:D1:E2:2D:50:FF:EE:08:48:A4:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/3136382e3139342e35322e302f32322d3234203d3e20323633363939.roa
Signing time:             Tue 04 Feb 2025 18:06:13 +0000
ROA not before:           Tue 04 Feb 2025 18:01:13 +0000
ROA not after:            Tue 03 Feb 2026 18:06:13 +0000
asID:                     263699
IP address blocks:        168.194.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b2:90:66:8c:af:d1:a7:69:06:81:57:19:31:ac:c9:12:24:2a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F
        Validity
            Not Before: Feb  4 18:01:13 2025 GMT
            Not After : Feb  3 18:06:13 2026 GMT
        Subject: CN=A653C762BBC097F1A4A195B7BF542084D0939201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:b0:b5:98:bb:57:fe:15:3a:e6:f2:a7:8b:
                    f4:43:f0:83:52:40:44:1f:ad:d3:5d:09:38:f7:65:
                    26:26:fb:1e:6a:c2:95:5d:c3:33:e2:69:45:b0:7b:
                    4a:f7:ff:79:33:c7:71:1f:26:cf:76:d5:99:17:0c:
                    be:ae:d1:d6:9e:0f:8e:6f:b0:d7:ae:af:8c:c8:06:
                    84:e4:59:ce:6a:d0:28:b5:62:66:d0:0f:13:e5:3c:
                    90:31:9b:a4:3b:63:05:59:67:2c:bd:02:b1:40:a2:
                    b9:43:24:08:78:a4:c8:48:18:aa:3e:42:9a:87:e9:
                    ae:58:e5:9f:47:1b:e6:a6:f7:c8:1c:d6:7d:5e:59:
                    f6:94:e1:bd:28:dc:e9:f7:16:55:a9:54:7a:ce:87:
                    55:f0:3f:b3:30:45:0a:4d:aa:7b:80:5f:99:08:a8:
                    f7:ed:a9:2a:fe:b5:14:1a:8e:4a:b0:24:33:95:10:
                    52:fb:a0:af:8a:d7:16:eb:23:73:ce:66:50:d0:24:
                    b3:07:25:2e:2b:b7:f4:ff:2e:3a:f6:53:74:18:a8:
                    84:81:8a:a3:e7:7f:89:01:79:c7:36:7b:18:db:ca:
                    2b:86:72:5c:c3:93:a6:aa:a6:bc:45:c3:94:52:83:
                    ee:e7:25:c0:35:1a:b8:f5:22:1a:aa:3f:47:d1:91:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:53:C7:62:BB:C0:97:F1:A4:A1:95:B7:BF:54:20:84:D0:93:92:01
            X509v3 Authority Key Identifier:
                keyid:5E:40:F5:09:D8:EC:34:62:F8:B8:D1:E2:2D:50:FF:EE:08:48:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/3136382e3139342e35322e302f32322d3234203d3e20323633363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         f0:c5:46:96:6d:a9:01:07:9d:22:59:96:10:be:17:7f:4e:4d:
         6d:5e:19:32:0c:92:13:5a:8f:95:fa:3b:c8:6f:a1:e0:73:73:
         0b:c2:2c:c1:7e:0a:83:69:9c:e4:6e:fc:cd:d0:5c:7c:08:83:
         4f:12:8d:54:6d:30:05:1c:c7:87:10:2d:1f:2d:37:ed:7c:9c:
         5b:05:59:6e:11:93:8f:20:65:c6:c4:be:93:60:8a:75:41:09:
         b2:42:f6:d1:3b:12:62:dd:27:22:12:a7:62:c5:2d:25:ee:c0:
         4e:b1:1f:29:42:8e:6f:38:e3:2f:d3:d5:67:41:88:d6:37:f9:
         fc:a6:db:db:cd:a8:05:aa:f0:28:82:46:76:ce:57:53:5d:04:
         b4:7c:f4:89:2c:73:8e:ad:bd:d8:63:68:3e:49:72:05:7e:75:
         34:f9:77:6b:04:d0:f3:0f:d9:e8:26:d5:9d:e7:a2:7c:a6:33:
         53:63:06:2c:6b:2c:b3:52:be:46:48:c4:1b:2d:56:8b:1c:51:
         26:6c:50:5a:54:05:75:07:fd:92:70:37:f7:e6:27:5d:19:2d:
         33:dd:3b:d3:00:c6:1e:f2:05:4c:a4:e8:05:18:9b:c7:70:cc:
         f7:d8:e5:c7:41:70:97:a4:ec:dd:2b:af:f8:22:79:1b:1f:b9:
         c3:69:32:93
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUf7KQZoyv0adpBoFXGTGsyRIkKg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU0MEY1MDlEOEVDMzQ2MkY4QjhEMUUyMkQ1MEZGRUUw
ODQ4QTQxRjAeFw0yNTAyMDQxODAxMTNaFw0yNjAyMDMxODA2MTNaMDMxMTAvBgNV
BAMTKEE2NTNDNzYyQkJDMDk3RjFBNEExOTVCN0JGNTQyMDg0RDA5MzkyMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJbC1mLtX/hU65vKni/RD8INS
QEQfrdNdCTj3ZSYm+x5qwpVdwzPiaUWwe0r3/3kzx3EfJs921ZkXDL6u0daeD45v
sNeur4zIBoTkWc5q0Ci1YmbQDxPlPJAxm6Q7YwVZZyy9ArFAorlDJAh4pMhIGKo+
QpqH6a5Y5Z9HG+am98gc1n1eWfaU4b0o3On3FlWpVHrOh1XwP7MwRQpNqnuAX5kI
qPftqSr+tRQajkqwJDOVEFL7oK+K1xbrI3POZlDQJLMHJS4rt/T/Ljr2U3QYqISB
iqPnf4kBecc2exjbyiuGclzDk6aqprxFw5RSg+7nJcA1Grj1IhqqP0fRkZItAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUplPHYrvAl/GkoZW3v1QghNCTkgEwHwYDVR0j
BBgwFoAUXkD1CdjsNGL4uNHiLVD/7ghIpB8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQURGNkYyNjM1NzgyQzk1RUE2NkY4REQ1REIwRTgyRTFB
RkEwMjFGN0JGRDVGOTNBNDlCOTkwMjc4RjM1MEE1LzAvNUU0MEY1MDlEOEVDMzQ2
MkY4QjhEMUUyMkQ1MEZGRUUwODQ4QTQxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTQwRjUwOUQ4RUMzNDYyRjhC
OEQxRTIyRDUwRkZFRTA4NDhBNDFGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREFERjZGMjYzNTc4MkM5NUVBNjZGOERENURCMEU4MkUxQUZBMDIxRjdC
RkQ1RjkzQTQ5Qjk5MDI3OEYzNTBBNS8wLzMxMzYzODJlMzEzOTM0MmUzNTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzYzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqMI0
MA0GCSqGSIb3DQEBCwUAA4IBAQDwxUaWbakBB50iWZYQvhd/Tk1tXhkyDJITWo+V
+jvIb6Hgc3MLwizBfgqDaZzkbvzN0Fx8CINPEo1UbTAFHMeHEC0fLTftfJxbBVlu
EZOPIGXGxL6TYIp1QQmyQvbROxJi3SciEqdixS0l7sBOsR8pQo5vOOMv09VnQYjW
N/n8ptvbzagFqvAogkZ2zldTXQS0fPSJLHOOrb3YY2g+SXIFfnU0+XdrBNDzD9no
JtWd56J8pjNTYwYsayyzUr5GSMQbLVaLHFEmbFBaVAV1B/2ScDf35iddGS0z3TvT
AMYe8gVMpOgFGJvHcMz32OXHQXCXpOzdK6/4InkbH7nDaTKT
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:56 2025 by rpki-client