Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS52434.roa
File:                     AS52434.roa (raw, json)
Hash identifier:          x0iBFUxBAoo1BDR8AsqG4Qot8Aiz+1EcdJbiHBRB2yU=
Subject key identifier:   2F:B5:D2:DC:A8:B1:F6:33:E7:CA:52:DF:9B:A9:B0:A4:6D:98:73:C7
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       031F5C98382BDC02789773790491E43E0846CD43
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS52434.roa
Signing time:             Tue 01 Jul 2025 17:24:20 +0000
ROA not before:           Tue 01 Jul 2025 17:19:20 +0000
ROA not after:            Tue 30 Jun 2026 17:24:20 +0000
asID:                     52434
IP address blocks:        190.242.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1f:5c:98:38:2b:dc:02:78:97:73:79:04:91:e4:3e:08:46:cd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jul  1 17:19:20 2025 GMT
            Not After : Jun 30 17:24:20 2026 GMT
        Subject: CN=2FB5D2DCA8B1F633E7CA52DF9BA9B0A46D9873C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:bb:fc:f8:7a:11:00:a3:2a:dd:ea:3f:b1:
                    ae:6f:46:c8:1b:f8:00:3c:f5:51:48:2e:31:3e:f3:
                    4d:35:5d:4e:8e:f2:35:21:ff:25:df:57:34:f2:d1:
                    b6:91:86:90:89:51:7a:05:b7:89:04:75:fe:56:f8:
                    2c:fa:99:cf:8d:b5:6f:72:0e:ad:88:c4:27:bf:c5:
                    6b:a2:bf:33:b7:ec:4e:85:23:3b:15:09:a5:b9:2e:
                    f4:05:78:fc:67:83:97:14:8a:26:0d:58:77:f8:c1:
                    76:18:1d:7b:26:30:e2:5d:09:28:53:41:42:8b:41:
                    b8:62:18:1e:19:95:00:8d:df:2d:a2:36:11:1b:85:
                    9e:06:fb:1e:5d:0b:14:62:b9:9b:e2:20:e2:97:0e:
                    e8:04:7d:41:ee:ab:86:1c:c7:cc:90:59:53:df:92:
                    99:89:e4:22:f7:e5:c1:01:53:56:ff:e0:1d:31:87:
                    b1:d9:0a:e3:a7:19:c0:8d:d5:7c:45:c1:67:ff:8b:
                    b3:1b:72:d1:18:2e:8c:35:fa:d1:ee:5f:9d:4a:3f:
                    8a:e5:bf:aa:fa:5a:ab:7f:a9:13:3b:0b:7b:85:91:
                    1b:d4:22:4b:67:5b:0e:0f:e6:4e:7b:17:5f:8b:35:
                    98:2c:c7:ff:06:0b:e7:32:4f:0f:50:13:19:4e:a5:
                    98:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B5:D2:DC:A8:B1:F6:33:E7:CA:52:DF:9B:A9:B0:A4:6D:98:73:C7
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS52434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:99:f4:38:63:0a:cf:2d:4e:f1:38:e1:62:06:61:d0:f0:dd:
         4a:14:bc:23:0c:c3:92:e1:8e:d4:57:fb:a3:bc:39:47:75:a1:
         30:a9:b2:a1:41:30:3b:d2:cf:e0:0d:fa:a3:98:0f:78:7d:b9:
         7c:d8:ef:da:e6:a2:a1:8e:f6:ba:1d:76:fe:63:dc:1d:39:e0:
         b0:cd:df:91:d2:1e:46:a7:0e:16:b6:c6:9f:b4:00:a0:ca:97:
         95:74:8a:4f:ad:41:ee:0d:6e:7f:91:35:42:94:af:9f:de:c0:
         b1:20:fe:27:23:ad:dc:42:d8:13:d8:43:0b:5c:60:74:38:4f:
         02:46:55:bd:a9:49:fc:b8:44:f8:99:e3:75:c3:e5:69:a6:f8:
         83:d8:d6:47:9c:22:b2:9d:f2:c1:9b:af:aa:1e:23:b6:3e:bb:
         08:6d:9f:75:d1:d5:c0:4c:b4:b6:be:8c:37:14:bc:83:91:2a:
         e5:35:e2:e4:b3:f0:d2:03:fc:6f:f2:b8:33:62:f8:d9:05:a5:
         59:e0:04:bd:cb:48:59:9a:8a:ac:8b:44:79:38:93:3a:25:66:
         9a:55:f4:8f:c0:5f:4a:81:58:c6:79:ee:38:7b:b6:a1:07:cf:
         95:a1:f0:d8:b9:5b:8c:de:e5:80:12:a5:53:44:72:ab:9c:ac:
         6a:ec:d3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:52:19 2025 by rpki-client