Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52371.roa
File:                     AS52371.roa (raw, json)
Hash identifier:          p2ezJcBoRg1xLNUbItZs7sgd2yAt5Ce8aRFERMHD+KA=
Subject key identifier:   1A:24:1D:F1:1E:16:0F:8F:FC:F6:15:75:91:FE:77:61:79:50:01:D3
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       346C03EA41365F8E6885EF9C488EFC54B7F55A5D
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52371.roa
Signing time:             Wed 17 Sep 2025 13:55:01 +0000
ROA not before:           Wed 17 Sep 2025 13:50:01 +0000
ROA not after:            Wed 16 Sep 2026 13:55:01 +0000
asID:                     52371
IP address blocks:        190.226.32.0/24 maxlen: 24
                          190.226.33.0/24 maxlen: 24
                          201.252.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6c:03:ea:41:36:5f:8e:68:85:ef:9c:48:8e:fc:54:b7:f5:5a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Sep 17 13:50:01 2025 GMT
            Not After : Sep 16 13:55:01 2026 GMT
        Subject: CN=1A241DF11E160F8FFCF6157591FE7761795001D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:e7:a7:d7:64:58:ba:eb:a4:7a:ea:f0:2e:
                    a5:55:01:57:40:93:3a:fc:64:41:52:c6:d5:8d:d5:
                    46:fb:df:54:99:40:44:fd:bd:87:b9:21:58:f6:f4:
                    10:43:3b:96:1e:7c:ce:41:a8:59:2c:85:4c:21:07:
                    84:d4:da:97:42:37:2e:82:08:95:f1:eb:44:3a:c4:
                    ff:0f:54:46:91:f2:0d:80:65:af:bc:be:8a:d2:28:
                    c2:f8:71:9c:fe:81:20:ed:b1:27:d1:1e:c7:88:ae:
                    47:aa:b0:b5:39:26:c5:ca:63:79:b9:3f:77:f3:05:
                    0c:61:13:ef:ab:36:97:60:91:2f:b0:bf:db:6d:2d:
                    07:03:82:4b:ef:f8:85:bd:62:19:0f:4f:91:f5:d0:
                    c7:b8:a8:2f:66:f7:e3:1b:82:41:2d:81:ad:ec:94:
                    84:83:04:02:f8:8a:26:d4:64:96:e8:92:24:38:b2:
                    20:06:17:06:aa:4b:ce:29:4c:af:fc:2a:85:8a:55:
                    f3:dc:ef:b4:85:94:a8:f9:2e:92:92:88:54:13:49:
                    31:eb:9d:d5:59:36:62:ae:16:e2:0c:32:2c:3c:77:
                    52:c8:77:51:97:43:6f:52:f1:c6:7a:16:70:cd:bd:
                    b1:de:13:b8:50:e7:e3:b0:f9:d3:72:5c:6b:eb:b4:
                    a6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:24:1D:F1:1E:16:0F:8F:FC:F6:15:75:91:FE:77:61:79:50:01:D3
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52371.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.226.32.0/23
                  201.252.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:71:af:20:05:af:52:ad:94:1a:5b:6d:de:7c:2d:47:c9:da:
         1f:75:bf:f2:3b:4e:0f:ca:05:64:90:25:68:d2:d2:48:4f:90:
         93:98:e9:34:ae:24:a9:63:4d:a7:4f:d2:d3:3d:85:43:09:7c:
         f2:97:d2:db:d3:f2:6c:fa:6a:5d:73:c7:f7:8a:14:91:7a:f9:
         a4:4e:79:d9:ed:c2:b5:05:14:ea:00:86:67:4b:1b:08:69:d9:
         35:23:b5:74:11:15:f1:be:11:13:b1:79:11:55:7a:93:79:6a:
         05:28:2f:2d:5e:54:85:d7:5c:16:cc:46:87:7f:80:1f:28:73:
         09:af:97:54:3a:2d:24:46:b7:ca:02:7e:cf:a5:d3:68:2d:da:
         1e:69:be:22:76:d1:8e:39:6f:f7:d2:e4:9c:f7:f8:71:9c:b1:
         56:62:65:24:c6:d7:f6:a9:aa:97:be:79:ce:f2:60:cd:1c:80:
         c1:55:a1:f0:44:7a:50:f8:39:2a:fc:58:c1:1d:3c:a9:8a:10:
         dd:36:fd:8b:b4:b0:49:92:a9:2c:f7:fe:b2:4d:67:42:d5:7f:
         32:7a:04:11:63:17:7e:f2:86:ae:e0:28:ba:e2:39:8c:2e:4d:
         6b:a4:06:ca:d9:31:72:18:f5:98:08:59:1d:e3:fb:8f:05:ec:
         ad:cd:98:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:50:46 2025 by rpki-client