Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52279.roa
File:                     AS52279.roa (raw, json)
Hash identifier:          T/r416JCGkUmrBvtTL0KKRy1pmuX1AhXTTG8xfoWl4k=
Subject key identifier:   66:20:F6:06:4F:E5:3E:83:15:AB:A3:53:C4:CC:E2:FF:CD:CE:84:E8
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       61102FEE6BD67C76492487788D0ADDBF821EEACD
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52279.roa
Signing time:             Wed 17 Sep 2025 13:40:00 +0000
ROA not before:           Wed 17 Sep 2025 13:35:00 +0000
ROA not after:            Wed 16 Sep 2026 13:40:00 +0000
asID:                     52279
IP address blocks:        200.43.105.0/24 maxlen: 24
                          200.43.106.0/23 maxlen: 24
                          200.45.120.0/24 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:10:2f:ee:6b:d6:7c:76:49:24:87:78:8d:0a:dd:bf:82:1e:ea:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Sep 17 13:35:00 2025 GMT
            Not After : Sep 16 13:40:00 2026 GMT
        Subject: CN=6620F6064FE53E8315ABA353C4CCE2FFCDCE84E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ae:cc:bc:87:e4:5c:db:2b:53:22:5c:09:05:
                    22:50:69:66:e5:ee:88:22:29:16:7c:49:cb:fd:27:
                    d9:42:57:79:bd:2e:ce:de:8c:da:9f:27:77:4c:d7:
                    ad:17:a2:55:29:90:16:d2:ad:a9:00:8c:a2:07:e0:
                    9b:c2:cc:bd:e4:dd:77:6b:b2:20:98:58:54:77:c0:
                    cc:69:9b:1a:d1:af:e4:e6:89:15:7c:71:6c:03:b8:
                    a7:0c:db:41:31:77:2e:c8:ea:b9:6f:6f:9a:55:14:
                    76:02:c3:8d:b7:a8:81:58:61:5a:cf:1b:7b:3d:f4:
                    40:0c:85:93:3d:fd:d5:c5:07:12:dc:aa:4d:f5:09:
                    18:7f:34:b7:e6:e6:1d:e6:91:3b:d2:df:a8:4f:b6:
                    fd:ba:b2:4e:a2:02:63:60:55:aa:ad:ea:f3:a6:c6:
                    2c:09:56:cf:2a:c8:84:80:3f:a2:a8:4a:02:f8:72:
                    f4:b2:36:90:f1:bf:93:f9:8f:46:19:df:cf:06:60:
                    e3:e9:d7:6c:eb:81:04:78:de:dd:b0:6e:9d:39:4c:
                    11:66:4f:0c:b8:14:f1:c2:8f:af:0a:fd:2d:fb:96:
                    8a:12:36:4c:3f:d5:ad:84:ab:fe:80:e7:24:3e:87:
                    bc:4e:67:d2:66:c2:3b:ee:9b:a1:5f:11:c2:69:35:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:20:F6:06:4F:E5:3E:83:15:AB:A3:53:C4:CC:E2:FF:CD:CE:84:E8
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52279.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.43.105.0-200.43.107.255
                  200.45.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:87:1c:f9:d2:c4:31:e0:e3:c5:33:07:b0:2c:1f:31:6e:
         74:cb:7a:78:29:92:1e:a4:42:cf:d9:32:ec:f8:4e:86:73:2f:
         16:36:60:54:82:06:d9:48:73:cf:5b:17:dd:dd:a6:c0:a0:bf:
         87:03:2d:f9:17:84:01:59:4e:5e:f9:ea:67:78:c5:83:67:be:
         35:74:eb:b5:51:74:bc:61:42:05:ab:8b:9d:79:0e:8e:d6:2b:
         fc:6b:e6:02:03:44:23:6d:05:b7:f3:f3:93:06:72:8d:58:f8:
         6c:74:a7:e1:73:d6:ec:b0:b3:f2:78:45:cc:12:34:4b:8c:79:
         24:e5:a8:2e:a5:52:d7:0d:71:45:f6:56:58:ac:18:7a:bf:67:
         75:25:85:28:96:30:38:7a:1f:2b:84:98:1f:0a:59:68:f1:02:
         e2:f0:5b:4c:a8:57:fd:b7:1b:c6:df:92:60:14:e8:4b:44:50:
         58:28:cd:f5:ab:1f:61:e4:fa:60:54:9a:24:49:9a:be:9c:c5:
         0b:da:8e:4a:fe:25:a0:d1:2c:29:34:1f:ee:24:e1:3e:9f:28:
         9e:17:72:9e:af:45:cb:80:0d:d2:bf:e8:00:a4:45:a3:82:98:
         ec:9b:f4:27:37:61:8f:82:06:de:32:1e:a7:47:a8:ff:b7:cd:
         a7:52:f3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:16 2025 by rpki-client