Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3139302e35322e34382e302f32312d3234203d3e203237383339.roa
File:                     3139302e35322e34382e302f32312d3234203d3e203237383339.roa (raw, json)
Hash identifier:          z7kc/4/jFro8MsFFzufgbRT1A5Hn0OlPx2jyUGLRfg4=
Subject key identifier:   31:B1:D6:41:30:E1:7F:29:CE:52:B1:5F:1A:D3:63:C3:36:FD:F7:96
Certificate issuer:       /CN=52A0CD9886DF104498561B789483DB0D9F8E804F
Certificate serial:       7E36AF4EBCA6A988B8CF5CB947DDBE6E60AA35CA
Authority key identifier: 52:A0:CD:98:86:DF:10:44:98:56:1B:78:94:83:DB:0D:9F:8E:80:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52A0CD9886DF104498561B789483DB0D9F8E804F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3139302e35322e34382e302f32312d3234203d3e203237383339.roa
Signing time:             Tue 05 Mar 2024 18:14:27 +0000
ROA not before:           Tue 05 Mar 2024 18:09:27 +0000
ROA not after:            Tue 04 Mar 2025 18:14:27 +0000
asID:                     27839
IP address blocks:        190.52.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/52A0CD9886DF104498561B789483DB0D9F8E804F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/52A0CD9886DF104498561B789483DB0D9F8E804F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52A0CD9886DF104498561B789483DB0D9F8E804F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:36:af:4e:bc:a6:a9:88:b8:cf:5c:b9:47:dd:be:6e:60:aa:35:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A0CD9886DF104498561B789483DB0D9F8E804F
        Validity
            Not Before: Mar  5 18:09:27 2024 GMT
            Not After : Mar  4 18:14:27 2025 GMT
        Subject: CN=31B1D64130E17F29CE52B15F1AD363C336FDF796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:48:c9:ec:41:b5:4d:eb:7a:45:ed:98:4b:ae:
                    70:90:93:aa:2f:22:98:a2:2f:7b:a9:0d:14:40:58:
                    cd:67:88:32:93:3c:25:51:b9:f9:a7:4e:a2:21:f2:
                    bf:87:e4:1d:ec:75:51:93:94:86:93:d6:72:eb:4f:
                    76:ae:9b:16:c0:58:cf:b9:2d:b2:88:e9:f5:64:c1:
                    d8:3a:ce:08:71:9d:53:0b:f1:6b:05:6e:a4:2c:55:
                    6c:47:24:2c:41:e1:80:e1:ba:81:5c:6e:29:d6:24:
                    1e:97:0a:82:2e:60:de:0c:96:74:b8:b9:b7:d4:d1:
                    d3:6a:ab:26:01:e6:d6:59:55:f3:67:3b:74:1a:51:
                    52:c5:48:2b:01:b0:9c:af:76:32:9a:0d:34:93:de:
                    67:9d:a3:70:8a:e0:20:35:c8:8c:f5:08:80:a0:8d:
                    82:64:ef:16:fb:a0:b7:94:9b:f5:44:75:23:aa:4a:
                    ce:85:7f:d3:b7:cf:58:d0:0e:ae:23:dd:cc:29:e7:
                    81:f0:e5:60:97:1e:60:ed:9c:6e:d6:2b:ce:50:5e:
                    ee:03:24:4e:d3:41:4b:a9:d5:a5:d6:b2:c5:7e:61:
                    b0:77:a1:52:d3:b9:d2:14:e7:e2:54:fe:77:e8:a3:
                    37:5e:62:22:ca:54:68:4a:9e:2f:fa:d6:eb:12:47:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B1:D6:41:30:E1:7F:29:CE:52:B1:5F:1A:D3:63:C3:36:FD:F7:96
            X509v3 Authority Key Identifier:
                keyid:52:A0:CD:98:86:DF:10:44:98:56:1B:78:94:83:DB:0D:9F:8E:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/52A0CD9886DF104498561B789483DB0D9F8E804F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52A0CD9886DF104498561B789483DB0D9F8E804F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3139302e35322e34382e302f32312d3234203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:d9:74:eb:80:68:b6:b7:d5:99:80:c8:0a:fd:9f:dd:67:c2:
         45:40:c2:32:0c:6b:90:22:e5:25:ba:b3:2c:29:a6:10:7a:75:
         2b:6f:47:57:ef:be:19:25:0d:57:a0:5c:22:09:e7:04:6a:bf:
         45:7a:d6:e4:a6:50:4f:02:1b:01:6c:ad:09:57:ee:58:e4:a1:
         82:9e:8e:d9:8b:08:40:a4:20:69:e6:3c:cb:9b:45:30:d6:7e:
         88:33:95:39:9a:c0:ef:54:1c:50:c9:1d:6e:2d:c8:53:05:d7:
         79:88:df:45:4b:d6:14:5e:2c:cd:67:46:6e:52:61:e1:e7:21:
         41:4f:67:1a:c8:84:83:c0:3a:2c:b7:a6:84:f6:8e:40:dd:cc:
         13:ac:5b:b0:4b:0b:1d:45:7d:0c:2a:d0:e8:7d:c9:a0:1a:b3:
         2e:b2:eb:68:d6:25:86:38:63:b1:70:cb:86:42:dc:59:5c:c9:
         e3:2b:f5:e3:ef:0f:9c:69:35:a3:0e:13:ee:ba:13:00:60:db:
         e6:17:14:be:49:94:6d:c9:47:ea:8e:0a:63:a9:6f:31:b4:b7:
         ae:74:a8:0f:53:17:cd:04:d9:b3:cb:95:72:90:53:d5:f2:46:
         e8:4e:e5:d9:c5:62:a6:98:3f:e7:59:07:d7:92:77:1a:30:02:
         2f:9d:57:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 12:11:47 2024 by rpki-client on console-fra.rpki-client.org