Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS52434.roa
File:                     AS52434.roa (raw, json)
Hash identifier:          XgfBKHgX4JveUeo1miJlqJxyzwx7Xoyh6YLJ2peSOvE=
Subject key identifier:   C4:45:8E:E9:F1:6A:9F:E5:64:BB:57:F4:98:39:12:27:A8:B5:79:99
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       11E04B65AB1B1EF1CF9D1E344704805694DCCE6A
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS52434.roa
Signing time:             Tue 02 Jun 2026 17:45:39 +0000
ROA not before:           Tue 02 Jun 2026 17:40:39 +0000
ROA not after:            Tue 01 Jun 2027 17:45:39 +0000
asID:                     52434
IP address blocks:        190.242.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 12:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e0:4b:65:ab:1b:1e:f1:cf:9d:1e:34:47:04:80:56:94:dc:ce:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jun  2 17:40:39 2026 GMT
            Not After : Jun  1 17:45:39 2027 GMT
        Subject: CN=C4458EE9F16A9FE564BB57F498391227A8B57999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:63:11:03:51:ad:c0:9d:31:f8:00:c2:c4:
                    6f:9f:29:73:61:59:1f:25:13:fa:5a:6d:83:b8:66:
                    b4:c2:0c:31:0e:87:8c:2b:49:8e:88:58:da:cb:d0:
                    6a:e2:c6:6f:f0:50:23:10:50:74:c8:54:2e:17:e7:
                    9d:6a:df:ae:dd:b6:89:52:46:c1:17:b0:f9:62:e3:
                    d3:18:ad:fd:b2:77:08:a4:0e:03:8b:18:06:81:84:
                    12:2f:ae:a4:ce:1c:46:20:4d:81:a4:df:1c:46:04:
                    8c:cc:6f:a9:8e:25:4a:de:c7:e2:75:04:6d:ea:48:
                    71:42:27:e6:92:21:54:16:9a:27:77:51:25:d2:59:
                    95:af:61:bb:6e:ee:b2:d8:5a:14:06:49:e8:62:77:
                    05:a6:7d:9e:a3:cd:a2:b3:55:f3:67:64:db:6b:b0:
                    f4:38:48:5b:f6:d9:58:5f:a9:e7:05:6b:da:69:6c:
                    28:87:1d:e3:9c:1f:07:5a:20:ee:94:a1:df:9d:18:
                    41:80:05:90:96:3f:96:05:7d:18:97:6c:46:73:99:
                    d7:aa:e5:df:27:20:d8:30:40:96:69:c3:97:11:34:
                    1b:e7:fe:17:62:78:79:c9:58:0b:4d:43:76:bb:60:
                    87:16:39:5e:62:6d:64:77:8d:5d:a1:41:f5:df:45:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:45:8E:E9:F1:6A:9F:E5:64:BB:57:F4:98:39:12:27:A8:B5:79:99
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS52434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:1e:e0:69:26:13:ab:18:96:c9:85:90:71:33:39:0b:02:ca:
         72:87:d4:4b:3f:c9:b5:fa:79:bc:fe:b2:65:e3:e2:07:96:e0:
         0e:86:08:81:2d:06:b5:eb:51:08:4b:44:95:06:ad:a2:4f:c3:
         dc:14:05:2c:05:ea:de:fe:78:7e:eb:30:50:71:2c:b5:85:8a:
         eb:52:f0:b3:0c:c4:b8:ef:56:2b:66:c2:f3:8a:89:5e:d4:3c:
         48:e9:ce:29:0f:a9:a3:17:88:4b:2d:0e:a4:10:a9:1d:3b:df:
         3e:1b:7c:74:ab:2f:96:f3:55:ff:b9:ba:8f:af:dc:1a:13:87:
         50:0b:e7:88:1d:58:08:a6:1f:9e:3f:f3:2d:04:6d:38:24:94:
         2c:7f:d1:f9:f9:69:37:07:76:c9:c4:93:12:6b:79:3f:b8:cb:
         b7:96:3a:29:2e:03:07:b1:69:76:27:ba:62:0a:c7:19:c4:88:
         da:79:3f:c9:d6:8d:17:23:e5:73:54:16:b4:e0:9c:3a:a6:9f:
         30:a8:e1:95:5a:e9:33:d3:14:f4:87:5e:a9:ce:34:bb:0c:ac:
         ff:d4:20:ed:9f:02:d0:db:ca:ef:29:0c:fa:15:85:8f:9e:a9:
         4c:17:fd:ba:a4:11:80:e2:bd:67:37:52:ed:22:c7:1a:13:b5:
         f5:5e:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:40:39 2026 by rpki-client