Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52312.roa
File:                     AS52312.roa (raw, json)
Hash identifier:          je7OoSK7bbqg3GSdMVCaU+3NIhCZ8qV0Lre0XCsDvPc=
Subject key identifier:   F8:97:21:29:4E:3F:51:93:4A:EB:3D:B6:C9:54:73:7F:A1:C4:2B:99
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       2786ADB4279B8F8027BC18C38B7EA5CCA2F0CE1E
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52312.roa
Signing time:             Tue 20 Oct 2026 19:30:00 +0000
ROA not before:           Tue 20 Oct 2026 19:25:00 +0000
ROA not after:            Tue 19 Oct 2027 19:30:00 +0000
asID:                     52312
IP address blocks:        181.104.92.0/24 maxlen: 24
                          190.228.136.0/24 maxlen: 24
                          200.43.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:86:ad:b4:27:9b:8f:80:27:bc:18:c3:8b:7e:a5:cc:a2:f0:ce:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Oct 20 19:25:00 2026 GMT
            Not After : Oct 19 19:30:00 2027 GMT
        Subject: CN=F89721294E3F51934AEB3DB6C954737FA1C42B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:05:5d:a6:fb:02:c1:fc:99:5c:9c:ae:3e:55:
                    c5:4b:c3:d8:2a:11:bf:87:a5:e4:b9:c4:d3:53:18:
                    07:a6:6b:76:56:2c:31:37:64:59:bf:8a:ff:60:02:
                    f1:c3:63:fe:af:e2:8b:f7:e0:69:8a:45:5f:4b:ba:
                    0d:c4:13:da:c2:a9:0e:19:d5:83:eb:e5:79:24:25:
                    ad:77:06:79:01:e2:7d:09:66:1c:6a:9b:25:45:0c:
                    c5:92:ba:26:09:64:1a:b8:c4:b1:3b:85:b6:11:11:
                    f7:14:65:66:17:87:ac:d3:9e:bc:21:b4:e2:c9:c0:
                    09:3e:6c:67:a9:98:0b:27:8c:10:a9:65:ee:d8:9f:
                    d6:36:7d:1f:95:47:1b:ce:0c:c0:f5:6a:9d:77:10:
                    35:4d:27:71:f3:e0:ae:5b:a3:d3:be:fe:bc:3b:d6:
                    7e:54:34:a9:9c:13:13:90:03:26:62:4a:46:23:8e:
                    60:c7:ad:f2:6a:33:d8:f7:63:f6:ae:f5:b9:da:fe:
                    bb:16:61:37:c4:cd:72:05:33:79:e6:65:54:f9:54:
                    37:53:99:8f:32:f1:31:ff:90:5d:dd:e9:98:ea:3e:
                    4d:b6:27:f0:99:b0:47:37:56:f0:56:87:b8:f5:22:
                    f5:07:f7:96:23:5d:2e:6e:17:7f:96:38:9f:ce:91:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:97:21:29:4E:3F:51:93:4A:EB:3D:B6:C9:54:73:7F:A1:C4:2B:99
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS52312.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.104.92.0/24
                  190.228.136.0/24
                  200.43.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:05:49:e5:bb:2c:b7:eb:74:3e:73:ee:1c:95:04:67:a2:a0:
         d5:e3:ad:a4:ab:eb:af:11:7b:ad:30:b4:78:49:2e:db:76:26:
         1e:9b:ab:cf:2c:c1:f1:3a:45:81:96:7d:55:4e:75:45:c6:0c:
         12:ad:d0:63:79:ba:1b:2a:01:88:89:6c:b1:85:63:74:aa:a3:
         f7:1e:2c:4a:58:be:c1:1d:27:c1:9a:4d:3e:11:a3:41:5b:d2:
         fd:3e:64:f5:17:22:99:0a:b1:7f:b7:54:23:8c:c7:50:a2:93:
         39:5e:69:1e:92:44:a9:7a:42:d7:dd:6f:20:1c:55:5e:d4:f8:
         c6:19:d2:5d:0b:0d:3c:ea:44:26:41:05:7f:6b:0e:45:f9:e1:
         42:40:27:3f:d4:40:10:da:10:5e:16:fa:06:7f:5b:12:95:9e:
         c9:18:97:e3:70:27:55:58:f7:41:39:4c:9c:56:ff:9d:99:f8:
         1f:8f:4a:57:50:b0:fe:de:13:da:8d:f4:7f:86:21:be:b4:b4:
         20:f2:52:c2:a1:4a:18:b1:e1:b7:0d:70:c0:ca:aa:8d:ac:11:
         4b:59:49:fe:7b:2f:e1:7e:fa:34:74:25:a7:f6:2c:32:5d:9b:
         3e:7e:f3:31:9d:aa:2f:04:c2:c6:a6:a0:7c:1f:f7:26:d3:0d:
         32:fc:65:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:04:11 2026 by rpki-client