Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/3138352e3131342e35322e302f32322d3234203d3e20323733303534.roa
File:                     3138352e3131342e35322e302f32322d3234203d3e20323733303534.roa (raw, json)
Hash identifier:          SKWScvlPL1oht/qw4+XIk95Xhp/nvrWl2Bhr6cTW9QQ=
Subject key identifier:   8D:BF:06:30:09:CB:ED:0A:4E:F7:51:8E:B0:7C:91:E1:5D:5F:A1:51
Certificate issuer:       /CN=E3D48E982179932A4BA72297BCB253B7BBA0BCA3
Certificate serial:       0BC27605111A2B1756E9B93F855ADBD2DFF7E157
Authority key identifier: E3:D4:8E:98:21:79:93:2A:4B:A7:22:97:BC:B2:53:B7:BB:A0:BC:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/3138352e3131342e35322e302f32322d3234203d3e20323733303534.roa
Signing time:             Tue 05 Mar 2024 17:58:26 +0000
ROA not before:           Tue 05 Mar 2024 17:53:26 +0000
ROA not after:            Tue 04 Mar 2025 17:58:26 +0000
asID:                     273054
IP address blocks:        185.114.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c2:76:05:11:1a:2b:17:56:e9:b9:3f:85:5a:db:d2:df:f7:e1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3D48E982179932A4BA72297BCB253B7BBA0BCA3
        Validity
            Not Before: Mar  5 17:53:26 2024 GMT
            Not After : Mar  4 17:58:26 2025 GMT
        Subject: CN=8DBF063009CBED0A4EF7518EB07C91E15D5FA151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:95:68:8c:46:be:7c:ba:26:b3:bc:2b:5f:2a:
                    c0:9d:37:96:c4:3d:2d:6f:73:a6:89:ff:b5:fa:00:
                    05:25:cf:7e:df:b9:2d:bd:7b:a1:87:02:9d:b0:66:
                    89:58:f1:78:80:e4:9d:e3:45:85:dd:11:a6:4b:7f:
                    9b:28:4a:92:1d:9b:74:dc:05:92:a0:5b:2c:c7:08:
                    8e:cb:1c:aa:0a:80:4e:ef:16:99:c4:a4:69:d4:f6:
                    e9:12:e2:34:ab:da:b0:20:f3:27:46:a5:64:6a:fe:
                    ad:ab:97:c0:3d:c3:e4:24:bf:90:96:3c:74:54:99:
                    d2:86:d1:5e:a2:4b:fe:5a:a4:b3:80:37:76:8b:12:
                    75:39:8e:43:52:41:fd:6d:a4:df:54:d1:70:f3:2f:
                    fc:7b:ba:fe:72:ba:90:dd:d5:5d:bd:e8:b8:d0:9d:
                    30:28:41:38:e2:bc:64:94:b3:07:58:1c:b4:0f:ba:
                    14:07:f3:d4:d3:39:02:2f:fe:26:7c:07:7f:57:14:
                    24:e9:fa:96:71:5f:45:09:1f:2d:81:fe:38:66:4d:
                    87:e3:3c:8d:f7:fd:b8:97:a1:d5:58:da:38:5e:44:
                    b4:99:ae:c8:5c:29:89:ab:4f:8c:b1:37:df:21:ad:
                    9b:a8:c5:a3:ea:88:d2:9e:05:87:05:e7:0d:09:74:
                    2d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BF:06:30:09:CB:ED:0A:4E:F7:51:8E:B0:7C:91:E1:5D:5F:A1:51
            X509v3 Authority Key Identifier:
                keyid:E3:D4:8E:98:21:79:93:2A:4B:A7:22:97:BC:B2:53:B7:BB:A0:BC:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/3138352e3131342e35322e302f32322d3234203d3e20323733303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.114.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:0b:76:81:28:18:8a:0f:64:be:2f:d0:d6:d1:f6:2c:e1:4c:
         75:b7:73:da:ae:90:db:a2:d2:4c:00:bc:13:df:b2:77:13:92:
         76:7b:3b:05:08:31:8e:02:59:1b:98:e9:47:01:87:c1:0d:70:
         16:78:c2:2d:0e:90:a3:9a:33:f9:3c:fb:0e:a0:59:bc:45:12:
         97:e0:96:6e:8e:79:59:bb:c8:ff:35:b4:c6:55:92:8b:50:a6:
         df:9c:9e:6e:2a:3c:2a:9e:b3:e4:bf:f7:39:87:b6:3e:41:e7:
         02:6e:3d:7e:90:3b:c4:3d:d1:01:ca:fb:2c:a7:db:14:7e:bb:
         ca:b9:34:77:df:c2:e5:5b:15:07:95:a9:5e:8c:a7:e5:53:b8:
         5b:c6:4b:cb:5c:90:eb:24:44:b9:82:ff:84:24:f2:42:c7:75:
         f1:5c:ea:4f:7f:71:62:32:d6:87:f6:37:80:d0:fc:f3:31:c4:
         d8:3e:65:c3:8a:86:9a:42:16:06:70:c9:d0:13:15:0b:f4:d9:
         de:de:05:3a:61:86:da:61:67:d5:8e:90:06:fa:28:bc:b2:b7:
         bc:db:61:c8:0e:2f:3e:92:8d:28:bf:53:33:46:ae:24:8e:69:
         c0:2f:11:bf:16:a5:a0:2f:8e:0a:7e:7b:31:ee:ee:f4:26:9c:
         ce:4d:9e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org