Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa
File:                     AS52468.roa (raw, json)
Hash identifier:          pggoALKz4kmE00HZZPrMY4ESdhVJUhlOEmlul1Z+CUs=
Subject key identifier:   86:32:7D:49:73:93:94:69:F8:FC:30:7F:35:46:2D:FD:EC:41:F0:F8
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       60B05F5E26B6860CB92D4A14CE4A366B3B2CF903
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa
Signing time:             Thu 15 May 2025 22:50:00 +0000
ROA not before:           Thu 15 May 2025 22:45:00 +0000
ROA not after:            Thu 14 May 2026 22:50:00 +0000
asID:                     52468
IP address blocks:        181.78.0.0/19 maxlen: 24
                          181.78.40.0/23 maxlen: 24
                          181.78.42.0/23 maxlen: 24
                          181.78.44.0/23 maxlen: 24
                          181.78.48.0/21 maxlen: 24
                          181.78.56.0/22 maxlen: 24
                          181.78.60.0/23 maxlen: 24
                          181.78.62.0/23 maxlen: 24
                          181.78.64.0/19 maxlen: 24
                          181.78.64.0/20 maxlen: 24
                          181.78.75.160/29 maxlen: 29
                          181.78.75.240/28 maxlen: 28
                          181.78.80.0/21 maxlen: 24
                          181.78.88.0/22 maxlen: 24
                          181.78.92.0/22 maxlen: 24
                          181.78.96.0/23 maxlen: 24
                          181.78.98.0/23 maxlen: 24
                          181.78.100.0/22 maxlen: 24
                          181.78.104.0/21 maxlen: 24
                          181.78.112.0/21 maxlen: 24
                          181.78.120.0/21 maxlen: 24
                          181.78.120.0/24 maxlen: 24
                          181.78.121.0/24 maxlen: 24
                          181.78.122.0/24 maxlen: 24
                          181.78.123.0/24 maxlen: 24
                          181.78.124.0/24 maxlen: 24
                          181.78.125.0/24 maxlen: 24
                          181.78.126.0/24 maxlen: 24
                          181.78.127.0/24 maxlen: 24
                          181.78.192.0/20 maxlen: 24
                          181.78.195.192/26 maxlen: 26
                          181.78.208.0/21 maxlen: 24
                          181.78.216.0/23 maxlen: 24
                          181.78.218.0/24 maxlen: 24
                          181.78.219.0/24 maxlen: 24
                          181.78.224.0/24 maxlen: 24
                          181.78.226.0/23 maxlen: 24
                          181.79.80.0/20 maxlen: 24
                          181.79.96.0/22 maxlen: 24
                          181.79.192.0/24 maxlen: 24
                          181.79.193.0/24 maxlen: 24
                          181.79.194.0/24 maxlen: 24
                          181.79.195.0/24 maxlen: 24
                          181.79.196.0/24 maxlen: 24
                          181.79.197.0/24 maxlen: 24
                          181.79.198.0/24 maxlen: 24
                          181.79.199.0/24 maxlen: 24
                          181.79.200.0/24 maxlen: 24
                          181.79.201.0/24 maxlen: 24
                          181.79.202.0/23 maxlen: 24
                          181.79.204.0/23 maxlen: 24
                          181.79.206.0/23 maxlen: 24
                          181.79.208.0/22 maxlen: 24
                          181.79.217.0/24 maxlen: 24
                          181.79.220.0/24 maxlen: 24
                          181.79.221.0/24 maxlen: 24
                          181.119.64.0/24 maxlen: 24
                          181.119.66.0/23 maxlen: 24
                          181.119.68.0/23 maxlen: 24
                          181.119.70.0/24 maxlen: 24
                          181.119.82.0/23 maxlen: 24
                          181.119.84.0/22 maxlen: 24
                          181.119.88.0/21 maxlen: 24
                          181.119.96.0/20 maxlen: 24
                          181.119.113.0/24 maxlen: 24
                          181.119.114.0/23 maxlen: 24
                          181.119.122.0/24 maxlen: 24
                          181.119.124.0/23 maxlen: 24
                          181.119.126.0/24 maxlen: 24
                          186.33.0.0/19 maxlen: 24
                          186.33.7.0/24 maxlen: 24
                          186.33.32.0/20 maxlen: 24
                          186.33.35.0/24 maxlen: 24
                          186.33.48.0/21 maxlen: 24
                          186.33.56.0/22 maxlen: 24
                          186.33.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b0:5f:5e:26:b6:86:0c:b9:2d:4a:14:ce:4a:36:6b:3b:2c:f9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: May 15 22:45:00 2025 GMT
            Not After : May 14 22:50:00 2026 GMT
        Subject: CN=86327D4973939469F8FC307F35462DFDEC41F0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:42:65:f6:50:33:cd:ef:d1:e0:e6:7f:53:
                    1c:d3:d9:59:01:6b:7f:65:5e:8a:cb:c6:3a:a8:e4:
                    62:ea:d2:54:01:4a:fc:a8:21:70:e4:4b:74:e4:27:
                    3b:fa:fa:4d:9c:ff:bf:4e:31:b3:54:08:a4:af:7c:
                    b5:73:fb:20:b8:70:90:da:13:17:a4:de:e2:8c:fd:
                    c8:60:e1:1e:e1:1b:c9:17:0e:63:f1:3f:3d:8a:8d:
                    b6:91:9b:f9:f0:30:3a:5e:c0:18:a5:79:3c:70:9d:
                    a4:4c:bf:ee:cf:ad:f0:66:da:70:25:d8:ca:db:39:
                    2f:0f:30:c6:b1:92:f2:4a:52:40:3f:42:06:d6:a3:
                    d1:ea:59:1b:73:84:6d:ed:d1:51:f3:63:65:5b:26:
                    d3:96:ac:40:ff:c6:57:dd:88:6d:12:32:4d:d7:fb:
                    2e:7d:0f:ab:ad:6a:c2:2a:e8:d7:86:95:45:3d:8e:
                    00:a2:50:b2:91:6c:b9:2e:9b:69:d1:2e:e7:e3:8d:
                    e8:43:71:0c:f4:c2:4a:12:b7:58:f9:3d:18:1b:c7:
                    25:de:44:99:40:23:d7:68:b3:db:26:5f:6a:76:20:
                    b2:ad:ce:6b:61:1f:42:4f:2b:ca:57:35:5a:5a:de:
                    3a:64:b7:76:7d:c0:8e:00:45:cb:4e:06:c3:42:f0:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:32:7D:49:73:93:94:69:F8:FC:30:7F:35:46:2D:FD:EC:41:F0:F8
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.0.0/19
                  181.78.40.0-181.78.45.255
                  181.78.48.0-181.78.127.255
                  181.78.192.0-181.78.219.255
                  181.78.224.0/24
                  181.78.226.0/23
                  181.79.80.0-181.79.99.255
                  181.79.192.0-181.79.211.255
                  181.79.217.0/24
                  181.79.220.0/23
                  181.119.64.0/24
                  181.119.66.0-181.119.70.255
                  181.119.82.0-181.119.111.255
                  181.119.113.0-181.119.115.255
                  181.119.122.0/24
                  181.119.124.0-181.119.126.255
                  186.33.0.0-186.33.61.255

    Signature Algorithm: sha256WithRSAEncryption
         22:15:f8:90:e7:86:46:47:c0:09:4f:a9:4e:73:36:08:28:07:
         3a:03:7c:53:dd:76:0c:4b:5d:d2:4a:2c:2e:5a:fa:8d:ba:46:
         cf:89:0e:15:de:9b:08:9d:19:f1:47:a8:5c:2c:8f:f4:f8:84:
         99:b5:bf:e8:d2:e7:cb:ad:53:9b:7d:e0:c0:fa:c3:8b:12:db:
         61:51:f9:49:4c:8f:48:ef:28:1d:81:12:7a:01:f0:01:c0:9f:
         60:74:03:1b:a3:7c:6f:4a:66:ce:ca:a0:b0:4e:3e:be:10:93:
         5e:cf:04:c7:a2:14:15:62:d0:13:c5:8e:5a:de:ea:3f:90:fc:
         81:1d:2d:ed:47:26:da:6c:ac:7f:ad:b3:89:4a:81:89:ea:b3:
         8b:6f:70:af:70:02:4b:cd:ad:fe:71:17:7d:ae:f1:de:c7:5e:
         6e:7c:7f:48:aa:59:3e:07:d4:12:3f:84:f5:c1:77:4c:ab:10:
         ea:20:4c:4c:23:d0:84:5d:c0:14:38:ae:eb:2a:c5:3d:41:7c:
         f3:56:ba:29:8a:5c:6d:7d:91:c2:5b:b0:34:a1:04:31:45:24:
         c0:d7:7b:95:36:84:ca:3b:5d:03:7d:02:1a:f8:30:e2:26:2a:
         6f:05:b5:ae:22:11:c5:b0:f4:5a:51:e6:9c:3f:21:8e:53:42:
         b6:e3:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:11:08 2025 by rpki-client