Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS52263.roa
File:                     AS52263.roa (raw, json)
Hash identifier:          Myk/C0DDXfmOUh/ptbfdS0IlkGoxKh5802l+kecnsLo=
Subject key identifier:   A4:A9:F0:A1:C1:46:49:3A:5C:7B:55:E2:A9:05:8A:96:67:B9:EB:34
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       0F3DA0A2DE66B052FF091D9F639F5D4E05ADAEE4
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS52263.roa
Signing time:             Fri 27 Mar 2026 21:05:06 +0000
ROA not before:           Fri 27 Mar 2026 21:00:06 +0000
ROA not after:            Fri 26 Mar 2027 21:05:06 +0000
asID:                     52263
IP address blocks:        190.217.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3d:a0:a2:de:66:b0:52:ff:09:1d:9f:63:9f:5d:4e:05:ad:ae:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 27 21:00:06 2026 GMT
            Not After : Mar 26 21:05:06 2027 GMT
        Subject: CN=A4A9F0A1C146493A5C7B55E2A9058A9667B9EB34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:48:a3:27:a4:6a:cd:7e:f4:ee:e6:4a:a4:
                    84:0b:62:88:4f:fe:e9:8a:4f:52:52:13:55:ad:04:
                    c7:6f:10:46:70:96:2f:b5:57:ed:6a:35:5e:79:59:
                    06:0b:0b:13:f6:fa:29:fa:56:9e:91:24:4d:e6:e9:
                    9d:b0:17:51:6c:7b:fc:e8:d0:9a:5d:95:dd:a4:89:
                    51:01:95:16:17:6b:12:3b:2f:c1:b3:e3:ef:da:bf:
                    fb:19:fa:0b:b1:f9:b0:7e:94:9e:c2:70:5e:d8:86:
                    c4:8d:be:85:53:60:ec:6c:7f:01:81:c7:06:a2:50:
                    d6:cb:77:0a:95:37:63:08:5c:ae:15:99:c8:80:bd:
                    e6:9f:c7:83:0c:51:02:16:53:a1:cd:50:b9:b9:b2:
                    74:e7:7c:f4:c0:37:7d:db:96:0e:5a:b9:b2:0d:cc:
                    77:63:18:18:8c:6d:26:2e:16:66:0e:87:85:98:46:
                    51:93:a8:89:12:68:8c:8a:df:52:b0:41:86:e8:5d:
                    3a:c3:ec:7a:3f:d1:72:53:d7:82:38:08:fe:07:87:
                    66:b0:81:52:30:a0:0f:fb:31:ad:d3:a1:f3:5d:ba:
                    e7:71:8c:de:2a:88:0e:ec:a9:e7:d1:7f:29:fb:f2:
                    3d:95:8e:27:06:b8:3b:ba:1b:b1:94:88:9e:b6:bc:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A9:F0:A1:C1:46:49:3A:5C:7B:55:E2:A9:05:8A:96:67:B9:EB:34
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS52263.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:c1:33:54:17:74:a5:f1:fb:b2:41:6e:64:6e:44:a3:32:4c:
         41:6d:bf:14:ec:3e:00:c8:80:a1:1f:61:87:17:47:e3:5a:dc:
         3a:ab:fa:ab:d0:25:af:7a:4d:3e:0b:3f:90:0b:f8:f8:98:fa:
         40:f9:13:8d:50:c6:55:2e:f0:36:6d:b9:16:d7:bf:ee:f1:33:
         3b:12:7f:7d:ea:fb:c1:be:76:79:75:63:78:13:92:21:44:d5:
         f2:ee:02:01:9d:ed:73:95:c7:f5:36:7a:b2:3a:db:4c:84:16:
         95:fd:49:80:76:fb:d2:ee:3a:bf:99:8f:3e:1d:42:4c:c8:9d:
         a6:de:5d:5e:07:cf:62:6a:40:78:37:ba:43:f6:62:30:a3:2d:
         f7:5d:b3:d3:e0:d1:4e:e3:21:9a:ae:8c:08:ef:90:48:b5:47:
         80:12:a0:2f:a1:24:06:07:22:2e:7b:6a:76:5d:17:21:2d:db:
         a4:d6:8b:44:12:27:8f:f1:b5:8a:a9:3d:49:d5:78:99:93:c1:
         a6:ff:cd:2f:c9:71:ef:23:81:52:3c:1f:fd:61:dd:76:1c:b1:
         7f:95:4b:9d:9f:9e:cb:c8:7b:c2:f9:9a:45:26:88:8b:ee:59:
         73:b7:15:34:9f:61:d6:b1:8d:9e:30:88:5f:6f:87:47:f3:ed:
         6a:24:af:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 09:00:14 2026 by rpki-client