Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa
File:                     AS52468.roa (raw, json)
Hash identifier:          eKzN2EDde9P0Q9wkBSTSPOGTR1Hs0U+FSsIdZKzdu1k=
Subject key identifier:   A1:CF:D0:AA:E2:CD:44:45:AC:61:C2:D6:6D:D2:1C:4C:B0:C1:06:2B
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       7D5CFF62FF34DC18DCB66EF575EB6872D3ABF1EE
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa
Signing time:             Thu 11 Sep 2025 19:40:00 +0000
ROA not before:           Thu 11 Sep 2025 19:35:00 +0000
ROA not after:            Thu 10 Sep 2026 19:40:00 +0000
asID:                     52468
IP address blocks:        181.78.0.0/19 maxlen: 24
                          181.78.40.0/23 maxlen: 24
                          181.78.42.0/23 maxlen: 24
                          181.78.44.0/23 maxlen: 24
                          181.78.48.0/21 maxlen: 24
                          181.78.56.0/22 maxlen: 24
                          181.78.60.0/23 maxlen: 24
                          181.78.62.0/23 maxlen: 24
                          181.78.64.0/19 maxlen: 24
                          181.78.64.0/20 maxlen: 24
                          181.78.75.160/29 maxlen: 29
                          181.78.75.240/28 maxlen: 28
                          181.78.80.0/21 maxlen: 24
                          181.78.88.0/22 maxlen: 24
                          181.78.92.0/22 maxlen: 24
                          181.78.96.0/23 maxlen: 24
                          181.78.98.0/23 maxlen: 24
                          181.78.100.0/22 maxlen: 24
                          181.78.104.0/21 maxlen: 24
                          181.78.112.0/21 maxlen: 24
                          181.78.120.0/21 maxlen: 24
                          181.78.120.0/24 maxlen: 24
                          181.78.121.0/24 maxlen: 24
                          181.78.122.0/24 maxlen: 24
                          181.78.123.0/24 maxlen: 24
                          181.78.124.0/24 maxlen: 24
                          181.78.125.0/24 maxlen: 24
                          181.78.126.0/24 maxlen: 24
                          181.78.127.0/24 maxlen: 24
                          181.78.192.0/20 maxlen: 24
                          181.78.195.192/26 maxlen: 26
                          181.78.208.0/21 maxlen: 24
                          181.78.216.0/23 maxlen: 24
                          181.78.218.0/24 maxlen: 24
                          181.78.219.0/24 maxlen: 24
                          181.78.224.0/24 maxlen: 24
                          181.78.226.0/23 maxlen: 24
                          181.79.80.0/20 maxlen: 24
                          181.79.96.0/22 maxlen: 24
                          181.79.192.0/24 maxlen: 24
                          181.79.193.0/24 maxlen: 24
                          181.79.194.0/24 maxlen: 24
                          181.79.195.0/24 maxlen: 24
                          181.79.196.0/24 maxlen: 24
                          181.79.197.0/24 maxlen: 24
                          181.79.198.0/24 maxlen: 24
                          181.79.199.0/24 maxlen: 24
                          181.79.200.0/24 maxlen: 24
                          181.79.201.0/24 maxlen: 24
                          181.79.202.0/23 maxlen: 24
                          181.79.204.0/23 maxlen: 24
                          181.79.206.0/23 maxlen: 24
                          181.79.208.0/22 maxlen: 24
                          181.79.217.0/24 maxlen: 24
                          181.79.220.0/24 maxlen: 24
                          181.79.221.0/24 maxlen: 24
                          181.119.64.0/24 maxlen: 24
                          181.119.66.0/23 maxlen: 24
                          181.119.68.0/23 maxlen: 24
                          181.119.70.0/24 maxlen: 24
                          181.119.82.0/23 maxlen: 24
                          181.119.84.0/22 maxlen: 24
                          181.119.88.0/21 maxlen: 24
                          181.119.96.0/20 maxlen: 24
                          181.119.113.0/24 maxlen: 24
                          181.119.114.0/23 maxlen: 24
                          181.119.122.0/24 maxlen: 24
                          181.119.124.0/23 maxlen: 24
                          181.119.126.0/24 maxlen: 24
                          181.119.176.0/22 maxlen: 24
                          181.119.180.0/22 maxlen: 22
                          181.119.180.0/22 maxlen: 24
                          181.119.188.0/23 maxlen: 24
                          181.119.190.0/23 maxlen: 23
                          181.119.190.0/23 maxlen: 24
                          181.119.192.0/22 maxlen: 24
                          186.33.0.0/19 maxlen: 24
                          186.33.7.0/24 maxlen: 24
                          186.33.32.0/20 maxlen: 24
                          186.33.35.0/24 maxlen: 24
                          186.33.48.0/21 maxlen: 24
                          186.33.56.0/22 maxlen: 24
                          186.33.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 14:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5c:ff:62:ff:34:dc:18:dc:b6:6e:f5:75:eb:68:72:d3:ab:f1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Sep 11 19:35:00 2025 GMT
            Not After : Sep 10 19:40:00 2026 GMT
        Subject: CN=A1CFD0AAE2CD4445AC61C2D66DD21C4CB0C1062B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:ff:e6:f7:a5:99:a6:8f:31:9c:c6:9a:0e:
                    01:cf:8e:84:b2:4d:e3:70:02:7e:3e:0d:8b:18:34:
                    25:21:05:ea:4c:52:3f:e1:dc:52:81:f9:b4:a6:b9:
                    cc:be:9c:eb:71:95:d8:69:4a:86:42:82:7d:60:c4:
                    22:e2:ca:96:37:35:77:3b:37:0d:70:a6:51:66:bf:
                    16:3f:33:c6:a7:45:57:fa:f8:6f:a0:ad:7c:38:c4:
                    a6:d7:3f:c6:6b:84:7b:53:e6:f7:db:07:0b:61:79:
                    87:52:b3:dd:83:73:32:98:19:f8:41:fd:35:d3:39:
                    df:28:78:46:4a:25:fc:1d:3c:f7:11:be:4a:f6:ca:
                    9d:17:23:5d:15:fa:d5:5e:1c:5f:ca:c5:20:08:33:
                    e5:f0:48:63:b3:8a:90:23:1a:89:d8:b8:2d:02:16:
                    92:9d:b7:dc:d2:2f:a8:77:91:43:ba:b7:56:67:54:
                    4f:f1:7f:5c:b9:80:c2:2e:a3:ac:aa:ed:c4:73:14:
                    5a:2c:47:6d:8c:fb:c5:88:7e:0d:11:4d:ca:17:72:
                    b0:33:9e:46:09:84:c1:f5:98:79:d4:33:a8:8e:55:
                    9b:c0:5f:dc:54:59:1f:96:e5:6a:6d:63:8b:49:fc:
                    26:91:1a:9e:52:62:e2:fb:66:8f:3e:17:5c:76:5b:
                    64:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CF:D0:AA:E2:CD:44:45:AC:61:C2:D6:6D:D2:1C:4C:B0:C1:06:2B
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.0.0/19
                  181.78.40.0-181.78.45.255
                  181.78.48.0-181.78.127.255
                  181.78.192.0-181.78.219.255
                  181.78.224.0/24
                  181.78.226.0/23
                  181.79.80.0-181.79.99.255
                  181.79.192.0-181.79.211.255
                  181.79.217.0/24
                  181.79.220.0/23
                  181.119.64.0/24
                  181.119.66.0-181.119.70.255
                  181.119.82.0-181.119.111.255
                  181.119.113.0-181.119.115.255
                  181.119.122.0/24
                  181.119.124.0-181.119.126.255
                  181.119.176.0/21
                  181.119.188.0-181.119.195.255
                  186.33.0.0-186.33.61.255

    Signature Algorithm: sha256WithRSAEncryption
         a2:1f:ec:59:62:cc:70:b9:17:28:3f:83:81:eb:da:43:fe:9e:
         2a:1a:87:05:96:78:2e:e4:c2:cb:76:10:8c:ef:f1:73:99:73:
         eb:41:32:ab:5f:0a:8e:a3:ec:8e:7e:a9:05:b5:68:44:73:a3:
         04:43:48:8d:bf:ed:4a:52:9b:dc:05:dc:19:07:f1:a1:0a:eb:
         10:bc:b6:b1:d1:ca:01:9a:1e:9c:eb:73:bc:db:df:7b:f4:5b:
         fc:85:68:64:eb:18:dc:c5:dc:e7:7a:85:2b:55:63:3e:6f:89:
         c5:cd:b2:89:2d:27:33:a0:f4:36:04:99:c6:ac:8f:27:17:19:
         b4:9a:c1:94:bd:82:e2:73:a7:d0:ca:41:cf:0a:31:e0:fd:45:
         43:77:76:90:ce:cf:6c:db:16:8f:a6:bc:6c:e4:20:ec:90:bd:
         67:e8:d7:9a:4f:8d:1b:47:5b:1b:8b:75:0a:e1:0b:80:5b:76:
         68:1f:46:58:de:c2:a5:a1:57:64:0d:a6:ca:5a:8e:c9:66:63:
         24:ab:8c:bb:52:e9:a0:5e:18:69:f8:b2:1e:d3:a8:f6:74:6e:
         1f:12:17:7a:21:ec:e1:62:d2:a0:33:94:7d:b3:4b:b3:c7:6a:
         72:6d:24:2b:4a:56:7f:d9:41:03:3d:bb:5b:93:95:cf:fa:0f:
         37:7c:25:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 12:40:34 2025 by rpki-client