Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa
File:                     AS52468.roa (raw, json)
Hash identifier:          YPLUFOIYuwlllKkX98oBB6mtQI8z51+qrfnw0M4rWq8=
Subject key identifier:   68:99:0C:1D:9C:A3:2B:6D:41:04:17:A5:04:31:5D:46:D3:D0:24:97
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       30D10E52E4A632AEA3235F22E300692FF17734F4
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa
Signing time:             Fri 08 May 2026 04:25:00 +0000
ROA not before:           Fri 08 May 2026 04:20:00 +0000
ROA not after:            Fri 07 May 2027 04:25:00 +0000
asID:                     52468
IP address blocks:        181.78.0.0/19 maxlen: 24
                          181.78.40.0/23 maxlen: 24
                          181.78.42.0/23 maxlen: 24
                          181.78.44.0/23 maxlen: 24
                          181.78.48.0/21 maxlen: 24
                          181.78.56.0/22 maxlen: 24
                          181.78.60.0/23 maxlen: 24
                          181.78.62.0/23 maxlen: 24
                          181.78.64.0/19 maxlen: 24
                          181.78.64.0/20 maxlen: 24
                          181.78.75.160/29 maxlen: 29
                          181.78.75.240/28 maxlen: 28
                          181.78.80.0/21 maxlen: 24
                          181.78.88.0/22 maxlen: 24
                          181.78.92.0/22 maxlen: 24
                          181.78.96.0/23 maxlen: 24
                          181.78.98.0/23 maxlen: 24
                          181.78.100.0/22 maxlen: 24
                          181.78.104.0/21 maxlen: 24
                          181.78.112.0/21 maxlen: 24
                          181.78.120.0/21 maxlen: 24
                          181.78.120.0/24 maxlen: 24
                          181.78.121.0/24 maxlen: 24
                          181.78.122.0/24 maxlen: 24
                          181.78.123.0/24 maxlen: 24
                          181.78.124.0/24 maxlen: 24
                          181.78.125.0/24 maxlen: 24
                          181.78.126.0/24 maxlen: 24
                          181.78.127.0/24 maxlen: 24
                          181.78.168.0/21 maxlen: 24
                          181.78.176.0/22 maxlen: 24
                          181.78.180.0/22 maxlen: 24
                          181.78.184.0/21 maxlen: 24
                          181.78.192.0/20 maxlen: 24
                          181.78.195.192/26 maxlen: 26
                          181.78.208.0/21 maxlen: 24
                          181.78.216.0/23 maxlen: 24
                          181.78.218.0/24 maxlen: 24
                          181.78.219.0/24 maxlen: 24
                          181.78.224.0/24 maxlen: 24
                          181.78.226.0/23 maxlen: 24
                          181.78.232.0/21 maxlen: 24
                          181.78.240.0/21 maxlen: 24
                          181.79.80.0/20 maxlen: 24
                          181.79.96.0/22 maxlen: 24
                          181.79.192.0/24 maxlen: 24
                          181.79.193.0/24 maxlen: 24
                          181.79.194.0/24 maxlen: 24
                          181.79.195.0/24 maxlen: 24
                          181.79.196.0/24 maxlen: 24
                          181.79.197.0/24 maxlen: 24
                          181.79.198.0/24 maxlen: 24
                          181.79.199.0/24 maxlen: 24
                          181.79.200.0/24 maxlen: 24
                          181.79.201.0/24 maxlen: 24
                          181.79.202.0/23 maxlen: 24
                          181.79.204.0/23 maxlen: 24
                          181.79.206.0/23 maxlen: 24
                          181.79.208.0/22 maxlen: 24
                          181.79.217.0/24 maxlen: 24
                          181.79.220.0/24 maxlen: 24
                          181.79.221.0/24 maxlen: 24
                          181.119.64.0/24 maxlen: 24
                          181.119.66.0/23 maxlen: 24
                          181.119.68.0/23 maxlen: 24
                          181.119.70.0/24 maxlen: 24
                          181.119.82.0/23 maxlen: 24
                          181.119.84.0/22 maxlen: 24
                          181.119.88.0/21 maxlen: 24
                          181.119.96.0/20 maxlen: 24
                          181.119.113.0/24 maxlen: 24
                          181.119.114.0/23 maxlen: 24
                          181.119.122.0/24 maxlen: 24
                          181.119.124.0/23 maxlen: 24
                          181.119.126.0/24 maxlen: 24
                          181.119.176.0/22 maxlen: 24
                          181.119.180.0/22 maxlen: 22
                          181.119.180.0/22 maxlen: 24
                          181.119.184.0/22 maxlen: 24
                          181.119.188.0/23 maxlen: 24
                          181.119.190.0/23 maxlen: 23
                          181.119.190.0/23 maxlen: 24
                          181.119.192.0/22 maxlen: 24
                          181.119.200.0/21 maxlen: 24
                          181.119.208.0/22 maxlen: 24
                          181.119.212.0/22 maxlen: 24
                          181.119.216.0/23 maxlen: 24
                          181.119.218.0/23 maxlen: 24
                          181.119.220.0/22 maxlen: 24
                          181.119.224.0/22 maxlen: 24
                          181.119.228.0/23 maxlen: 24
                          181.119.230.0/23 maxlen: 24
                          181.119.232.0/23 maxlen: 24
                          181.119.234.0/23 maxlen: 24
                          181.119.236.0/23 maxlen: 24
                          181.119.238.0/24 maxlen: 24
                          181.119.239.0/24 maxlen: 24
                          186.33.0.0/19 maxlen: 24
                          186.33.7.0/24 maxlen: 24
                          186.33.32.0/20 maxlen: 24
                          186.33.35.0/24 maxlen: 24
                          186.33.48.0/21 maxlen: 24
                          186.33.56.0/22 maxlen: 24
                          186.33.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 11:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d1:0e:52:e4:a6:32:ae:a3:23:5f:22:e3:00:69:2f:f1:77:34:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: May  8 04:20:00 2026 GMT
            Not After : May  7 04:25:00 2027 GMT
        Subject: CN=68990C1D9CA32B6D410417A504315D46D3D02497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fe:83:78:f1:74:61:86:d9:78:8a:0c:70:1d:
                    19:e8:ee:d1:ab:4d:b8:a0:cd:78:29:73:0d:1d:9d:
                    3e:af:26:a7:ff:52:bd:85:d6:57:d9:9c:37:b5:d1:
                    fb:27:82:f7:cb:8d:1f:fd:1e:f4:2b:16:7e:eb:5c:
                    cd:98:aa:9c:69:8c:4b:2e:17:70:87:92:c2:db:d3:
                    6a:1b:c4:7f:16:4d:33:24:d1:4d:cf:5e:08:28:4c:
                    80:a4:0b:9f:5e:8a:8a:3a:65:0d:77:05:fd:0a:a2:
                    fe:21:d2:37:b5:c1:40:a3:83:d4:c8:6a:2e:2c:31:
                    84:54:35:12:1d:06:c2:07:7e:1b:ef:7d:37:99:51:
                    3e:e3:ca:22:ce:b4:fc:b5:97:6a:36:cb:8b:00:53:
                    d3:af:eb:c3:a1:9e:16:bb:bc:7d:4f:cb:0b:01:42:
                    4b:cc:e9:af:60:c0:16:36:a3:2f:17:66:a8:18:78:
                    8c:b4:d5:20:a5:24:66:81:70:94:45:58:fb:65:22:
                    98:8c:9f:cb:b2:0c:5c:78:c8:c5:44:13:96:2a:d7:
                    e3:2f:a7:c2:c1:87:89:4f:66:7e:41:b8:31:20:ab:
                    ac:d2:41:4b:44:5e:ac:13:1a:a1:ba:bb:cc:5d:e3:
                    7a:1c:cd:53:a7:d9:73:d1:fa:b8:4c:c7:91:cd:9b:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:99:0C:1D:9C:A3:2B:6D:41:04:17:A5:04:31:5D:46:D3:D0:24:97
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.0.0/19
                  181.78.40.0-181.78.45.255
                  181.78.48.0-181.78.127.255
                  181.78.168.0-181.78.219.255
                  181.78.224.0/24
                  181.78.226.0/23
                  181.78.232.0-181.78.247.255
                  181.79.80.0-181.79.99.255
                  181.79.192.0-181.79.211.255
                  181.79.217.0/24
                  181.79.220.0/23
                  181.119.64.0/24
                  181.119.66.0-181.119.70.255
                  181.119.82.0-181.119.111.255
                  181.119.113.0-181.119.115.255
                  181.119.122.0/24
                  181.119.124.0-181.119.126.255
                  181.119.176.0-181.119.195.255
                  181.119.200.0-181.119.239.255
                  186.33.0.0-186.33.61.255

    Signature Algorithm: sha256WithRSAEncryption
         a3:08:57:fd:bb:9d:8a:f9:cc:7b:ee:b8:08:dd:d9:19:24:1d:
         c1:b2:b0:50:1e:c9:7b:5f:f5:b7:6f:c1:9f:a9:21:5d:06:3e:
         36:4a:65:c8:46:55:db:42:f4:5c:6e:f8:8f:5a:96:b5:c9:5a:
         a5:a7:6b:d3:09:a8:ad:16:29:32:ae:6d:26:d9:26:da:ba:4c:
         9f:04:7c:c3:9d:81:d1:68:87:34:6a:b7:9a:fb:28:63:af:64:
         f6:a5:96:14:05:2c:08:c5:68:1c:df:c1:a1:2c:6c:41:4b:06:
         37:33:ff:8b:c4:31:3b:c9:ee:2e:8f:6a:47:af:94:e6:df:4c:
         f5:ed:f7:85:8a:da:8b:3e:8b:ec:3a:ec:00:5c:4d:cf:cf:77:
         db:e1:e4:ad:13:84:2c:98:d5:78:44:e5:c9:3e:4a:1b:23:4f:
         40:4b:0a:31:91:f1:3a:54:dc:b1:67:6f:52:e2:ac:57:0f:0f:
         53:af:dd:66:35:6a:7e:dd:f4:93:36:f3:f1:b6:3b:96:3d:58:
         1c:b2:5c:ec:15:2c:c3:6e:23:3e:2e:89:b9:de:e2:01:cf:58:
         a2:60:2e:3d:5e:4d:dc:7a:27:6b:15:93:65:10:98:9e:1a:e0:
         43:e8:8d:ad:7b:a0:9a:47:20:67:20:3f:a1:d1:6a:26:78:18:
         ff:83:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:41 2026 by rpki-client