Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52312.roa
File:                     AS52312.roa (raw, json)
Hash identifier:          nKowvSCYM22y57nSWYEQRNuAUt3YE/qv6I3eg2x0Dfs=
Subject key identifier:   C4:75:99:BC:BC:A5:0D:92:C6:8E:33:42:31:C6:DC:4F:7B:D9:CC:0D
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       504D67C65F373734DF785CAD33A23764E4A10101
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52312.roa
Signing time:             Wed 09 Sep 2026 16:34:47 +0000
ROA not before:           Wed 09 Sep 2026 16:29:47 +0000
ROA not after:            Wed 08 Sep 2027 16:34:47 +0000
asID:                     52312
IP address blocks:        181.104.92.0/24 maxlen: 24
                          200.43.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 Oct 2026 21:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4d:67:c6:5f:37:37:34:df:78:5c:ad:33:a2:37:64:e4:a1:01:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Sep  9 16:29:47 2026 GMT
            Not After : Sep  8 16:34:47 2027 GMT
        Subject: CN=C47599BCBCA50D92C68E334231C6DC4F7BD9CC0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:ff:ec:27:d3:82:ee:3f:f6:7f:82:ac:38:
                    f2:bb:c3:c5:e7:e6:a7:a5:46:32:50:37:3b:ff:90:
                    e9:b3:01:c5:34:78:ff:ad:da:43:46:e7:d3:17:e6:
                    31:6f:3f:71:30:92:d4:0c:4a:03:cd:7b:21:a8:17:
                    b8:6c:43:12:b4:3f:05:4d:76:fc:e8:b6:ae:ba:d9:
                    ce:af:8c:fd:8c:3f:9e:d0:41:9e:d4:85:16:e5:26:
                    d1:ca:a2:38:8a:0e:c6:62:86:a4:a2:a6:b0:20:13:
                    a3:15:5a:9e:bc:39:99:6d:9a:f5:3f:a5:af:05:76:
                    7a:34:a1:43:e7:63:fd:97:38:e8:5b:5c:e2:ac:32:
                    55:15:22:7d:3e:ad:96:c0:1e:65:94:6b:b5:54:4b:
                    7d:a3:e3:31:30:7b:66:ae:28:37:95:3e:26:bd:d6:
                    3d:3f:fb:c1:02:a2:12:7a:52:a3:ed:71:b4:c9:e5:
                    7f:9d:3e:45:2d:f7:c1:35:eb:5f:81:28:59:a9:e7:
                    3a:e6:8b:fd:3c:74:d8:d4:2a:9d:dc:61:3b:8f:9e:
                    fb:dd:f6:f5:9e:45:04:a0:31:29:46:9b:ca:d6:f6:
                    71:55:6f:02:0e:ba:69:fd:c5:c1:c6:3d:ef:b7:08:
                    5b:04:c6:e2:4e:e6:7b:50:f8:1c:6e:83:2d:8d:ab:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:75:99:BC:BC:A5:0D:92:C6:8E:33:42:31:C6:DC:4F:7B:D9:CC:0D
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52312.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.104.92.0/24
                  200.43.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:6b:df:3e:26:ef:f0:5f:23:30:13:3e:95:e7:da:13:15:42:
         fd:6b:a5:d1:51:39:05:fe:0f:5e:99:70:dd:55:65:69:d0:22:
         70:74:9e:90:36:87:1b:96:d2:a0:4e:00:a7:9d:99:cd:70:00:
         70:5c:79:3e:52:60:04:02:c1:e6:1c:ca:13:f8:3f:59:14:b7:
         95:af:7d:10:73:52:18:4e:9a:eb:4e:6a:21:c3:ff:08:2d:bd:
         e9:b6:32:4e:18:db:aa:01:d6:20:0d:c2:2a:42:66:ee:a8:e6:
         03:3e:6d:ca:94:a2:7a:38:4d:fe:b7:5b:23:fe:cf:1f:ae:fb:
         25:37:c1:29:cf:fe:bb:1d:86:d5:cf:fc:f9:45:f4:47:9f:4e:
         4c:b4:52:95:fd:56:ba:c9:5a:5f:7a:4a:f6:83:06:99:3c:66:
         e8:33:08:1c:ea:f5:11:d2:9a:61:d6:7e:f6:f2:fb:d4:6f:58:
         45:c1:d9:0f:29:d8:c9:4b:49:87:56:6b:2a:10:f8:97:f4:50:
         49:65:cb:2f:13:f3:fa:3e:62:80:6b:97:3e:a7:fc:86:0c:c4:
         6b:c8:12:57:d2:11:ea:14:03:ec:e7:90:ff:be:a3:6d:e6:aa:
         04:cb:75:5e:ec:24:c5:d4:cb:a0:0b:82:94:a2:1b:c1:17:29:
         75:00:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:38:44 2026 by rpki-client