Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS52286.roa
File:                     AS52286.roa (raw, json)
Hash identifier:          8fJRAqfG5lJPzdotiMBld2cO9OeliICrbyDxON2DgSk=
Subject key identifier:   04:D1:72:3F:AD:85:EB:B9:F6:DB:3F:BA:A8:AA:E0:58:74:F1:9C:36
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       3B142E9310B4B016D0E04D02B302CAE74B72510A
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS52286.roa
Signing time:             Tue 01 Jul 2025 17:24:19 +0000
ROA not before:           Tue 01 Jul 2025 17:19:19 +0000
ROA not after:            Tue 30 Jun 2026 17:24:19 +0000
asID:                     52286
IP address blocks:        190.242.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:14:2e:93:10:b4:b0:16:d0:e0:4d:02:b3:02:ca:e7:4b:72:51:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jul  1 17:19:19 2025 GMT
            Not After : Jun 30 17:24:19 2026 GMT
        Subject: CN=04D1723FAD85EBB9F6DB3FBAA8AAE05874F19C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:07:56:54:76:c6:f9:c4:cb:55:af:ca:3b:6e:
                    a4:b7:13:17:ee:8c:44:d8:a9:26:47:94:b5:26:f0:
                    d4:83:10:37:e7:00:fc:0e:b4:ff:6c:68:d1:03:f0:
                    6f:82:13:02:ce:71:50:49:4a:10:d7:ee:83:7e:7c:
                    41:1c:0a:49:62:3e:ac:e7:b1:50:cd:54:66:b7:b7:
                    64:7d:fc:a1:3f:24:a3:94:49:bd:37:21:81:6d:56:
                    14:13:f1:74:ff:84:a2:d2:72:d7:8c:a9:97:59:68:
                    e6:cb:9a:6c:55:60:36:ed:15:54:22:39:9e:c4:8a:
                    be:44:82:57:18:71:69:d6:39:5b:9e:3b:f2:28:61:
                    f7:53:b2:d6:7d:71:9f:3a:aa:cb:72:96:e7:96:d9:
                    fa:21:ca:5e:a5:13:d3:e3:bb:6a:f6:75:39:0b:79:
                    3b:25:43:19:d9:26:38:2b:fe:58:5c:8c:a6:11:b2:
                    ec:bb:66:e4:cb:d8:06:c8:41:b4:23:57:e9:6a:b8:
                    ac:e2:97:92:4e:39:19:82:06:44:5e:9e:d1:9b:04:
                    4f:bc:88:93:7e:9c:16:ce:a6:15:c3:c5:15:93:f6:
                    f9:41:0e:2a:55:db:9f:e2:a1:86:e3:95:47:a6:76:
                    04:13:7e:ef:ce:4b:3e:b5:6c:76:5d:3b:b4:e3:f0:
                    b0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D1:72:3F:AD:85:EB:B9:F6:DB:3F:BA:A8:AA:E0:58:74:F1:9C:36
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS52286.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:fc:48:ad:ec:bb:6e:15:d0:ca:12:9a:f2:4b:22:52:40:b4:
         a8:6c:9c:0e:07:f9:bf:1f:c9:de:e7:b7:9e:1c:5f:94:41:41:
         21:60:be:a6:6f:7f:6a:46:70:86:10:d4:57:c7:4b:23:c0:7e:
         6e:b5:74:4d:a4:b5:76:b2:f5:8e:27:fa:07:9e:56:ec:4d:da:
         8c:b5:c0:f8:ac:cb:a6:e2:54:12:48:df:be:00:1d:cc:d2:b5:
         94:9e:77:86:91:6a:48:50:b8:af:40:29:65:fc:a6:7a:a0:cc:
         b9:b7:0e:e1:db:9c:50:e3:a2:64:64:99:90:dc:db:eb:2d:d2:
         1d:05:1a:ff:47:f3:39:3d:2d:f3:3b:49:68:36:11:ae:5a:9c:
         7f:36:ea:a5:51:c2:d6:e3:49:a2:76:9d:fc:80:aa:1a:3e:9d:
         9e:a9:46:b1:15:49:67:82:79:a4:43:52:66:db:76:fd:10:3e:
         23:0c:78:5f:cb:50:61:da:ae:24:c8:8d:3d:b4:ff:de:a8:3d:
         1e:58:db:63:24:c4:4b:5e:6f:12:a8:32:03:16:af:16:97:87:
         65:21:a4:96:c9:4f:03:37:21:be:c4:16:b6:82:31:1a:b2:06:
         c8:cc:db:39:55:bf:83:0f:cb:07:dd:d7:f8:90:82:bf:38:57:
         8e:21:ba:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:05:41 2025 by rpki-client