Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52371.roa
File:                     AS52371.roa (raw, json)
Hash identifier:          W5hVE/cdDe4YKbqBJWkCIAsoxc0THJvILSyAP4yY3ak=
Subject key identifier:   7E:21:31:A8:6E:03:5B:0F:0C:84:D6:8C:D7:76:79:71:6B:A1:13:8E
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       196ED486CE4BFE9A0D60646B4583A9C49EC500E1
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52371.roa
Signing time:             Wed 19 Aug 2026 14:26:01 +0000
ROA not before:           Wed 19 Aug 2026 14:21:01 +0000
ROA not after:            Wed 18 Aug 2027 14:26:01 +0000
asID:                     52371
IP address blocks:        190.226.32.0/24 maxlen: 24
                          190.226.33.0/24 maxlen: 24
                          201.252.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Sep 2026 05:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6e:d4:86:ce:4b:fe:9a:0d:60:64:6b:45:83:a9:c4:9e:c5:00:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Aug 19 14:21:01 2026 GMT
            Not After : Aug 18 14:26:01 2027 GMT
        Subject: CN=7E2131A86E035B0F0C84D68CD77679716BA1138E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7c:20:c1:fb:b2:5f:c8:97:c9:aa:08:85:f9:
                    f6:28:78:1d:fb:2e:98:44:c6:d6:92:17:9d:4e:29:
                    6b:77:56:10:d1:78:b3:dc:65:be:1e:86:bb:53:a8:
                    fb:14:c6:1e:ce:b6:12:62:7b:43:0c:ec:91:46:26:
                    94:85:8e:8f:7e:b3:39:51:8a:b9:fe:68:7a:93:f0:
                    57:50:c2:84:e5:09:17:0c:ef:26:32:f4:a6:ce:8b:
                    12:1c:3e:ca:0d:a3:93:8e:cb:76:15:e0:ec:ef:89:
                    99:62:39:77:b6:a3:65:24:ce:3d:b0:aa:10:f5:0f:
                    93:48:59:d4:22:e3:52:f3:84:96:24:98:9b:ac:b6:
                    77:8c:a3:a5:58:68:2e:38:9b:89:c2:92:0f:74:0d:
                    82:12:5b:84:80:ee:8d:0c:2d:65:30:f0:ad:33:92:
                    b2:dd:5a:51:28:93:76:2b:24:44:6c:08:eb:ea:94:
                    a9:a1:29:97:7d:b3:81:a1:2f:94:3e:11:64:9b:ef:
                    a5:7c:1b:40:50:37:db:d4:ce:4a:d4:e8:b6:72:3a:
                    a5:4f:75:fc:2a:d3:6f:19:c3:6e:c6:08:19:ec:28:
                    3c:8a:86:46:9d:65:4c:b6:e0:7a:c6:fd:a8:7e:b6:
                    ae:be:82:6f:e7:22:c8:4d:91:8f:24:cf:09:d0:cb:
                    4c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:21:31:A8:6E:03:5B:0F:0C:84:D6:8C:D7:76:79:71:6B:A1:13:8E
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52371.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.226.32.0/23
                  201.252.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2b:16:8f:84:9f:71:4d:07:5b:22:80:04:f1:5a:e4:1f:8e:
         66:a3:b1:10:c4:d1:b3:9c:cb:6d:61:00:e2:e6:13:d7:ba:e7:
         e3:a2:62:9e:42:fb:d3:66:4a:0e:2e:4b:8c:01:e2:5d:61:f0:
         a6:e0:55:57:34:fa:f8:2b:32:1b:d2:90:9f:2d:90:da:98:83:
         b9:6b:c6:98:e1:3f:27:93:fa:06:14:2a:5a:c3:64:47:e2:52:
         84:f2:7b:69:1a:46:b3:e0:d8:80:f5:ea:33:76:26:d8:d4:f7:
         7e:ba:86:c0:a6:87:c9:93:42:90:39:12:7a:2c:89:5f:22:47:
         cc:ea:30:37:22:b4:7e:01:91:eb:f3:27:a0:45:88:42:c4:3c:
         89:95:51:1f:42:38:7f:be:da:55:2c:78:fa:65:ef:4c:d8:12:
         8d:ea:78:25:2e:e9:94:c9:3f:8d:4b:63:a2:96:f6:3b:a9:c1:
         a4:0a:cd:b8:85:29:aa:aa:24:57:a1:60:ab:c2:c7:f9:07:98:
         ec:2c:ba:ba:cd:a7:b3:42:2c:90:60:19:3d:bc:0d:c3:64:23:
         fd:c7:93:50:7d:7f:35:77:c5:22:08:d8:73:35:21:9d:26:d7:
         c6:92:5f:d3:17:2f:98:e2:7e:02:79:92:0b:f0:85:7f:e2:e4:
         01:88:2a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:58:30 2026 by rpki-client