Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa
File:                     AS52468.roa (raw, json)
Hash identifier:          A43qRkQlcRThKTRYREtap2WuhsLdfNTL/8ejxZD1Sic=
Subject key identifier:   7D:A0:D5:C6:68:A6:3A:49:27:A5:54:DD:0A:95:38:D5:82:4A:E2:D3
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       29D8DB523223F77E13651069803ACC4B01530AA7
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa
Signing time:             Mon 14 Apr 2025 17:05:00 +0000
ROA not before:           Mon 14 Apr 2025 17:00:00 +0000
ROA not after:            Mon 13 Apr 2026 17:05:00 +0000
asID:                     52468
IP address blocks:        181.78.0.0/19 maxlen: 24
                          181.78.40.0/23 maxlen: 24
                          181.78.42.0/23 maxlen: 24
                          181.78.44.0/23 maxlen: 24
                          181.78.48.0/21 maxlen: 24
                          181.78.56.0/22 maxlen: 24
                          181.78.60.0/23 maxlen: 24
                          181.78.62.0/23 maxlen: 24
                          181.78.64.0/19 maxlen: 24
                          181.78.64.0/20 maxlen: 24
                          181.78.75.160/29 maxlen: 29
                          181.78.75.240/28 maxlen: 28
                          181.78.80.0/21 maxlen: 24
                          181.78.88.0/22 maxlen: 24
                          181.78.92.0/22 maxlen: 24
                          181.78.96.0/23 maxlen: 24
                          181.78.98.0/23 maxlen: 24
                          181.78.100.0/22 maxlen: 24
                          181.78.104.0/21 maxlen: 24
                          181.78.112.0/21 maxlen: 24
                          181.78.120.0/21 maxlen: 24
                          181.78.120.0/24 maxlen: 24
                          181.78.121.0/24 maxlen: 24
                          181.78.122.0/24 maxlen: 24
                          181.78.123.0/24 maxlen: 24
                          181.78.124.0/24 maxlen: 24
                          181.78.125.0/24 maxlen: 24
                          181.78.126.0/24 maxlen: 24
                          181.78.127.0/24 maxlen: 24
                          181.78.192.0/20 maxlen: 24
                          181.78.195.192/26 maxlen: 26
                          181.78.208.0/21 maxlen: 24
                          181.78.216.0/23 maxlen: 24
                          181.78.218.0/24 maxlen: 24
                          181.78.219.0/24 maxlen: 24
                          181.78.224.0/24 maxlen: 24
                          181.78.226.0/23 maxlen: 24
                          181.79.80.0/20 maxlen: 24
                          181.79.96.0/22 maxlen: 24
                          181.79.192.0/24 maxlen: 24
                          181.79.193.0/24 maxlen: 24
                          181.79.194.0/24 maxlen: 24
                          181.79.195.0/24 maxlen: 24
                          181.79.196.0/24 maxlen: 24
                          181.79.197.0/24 maxlen: 24
                          181.79.198.0/24 maxlen: 24
                          181.79.199.0/24 maxlen: 24
                          181.79.200.0/24 maxlen: 24
                          181.79.201.0/24 maxlen: 24
                          181.79.202.0/23 maxlen: 24
                          181.79.204.0/23 maxlen: 24
                          181.79.206.0/23 maxlen: 24
                          181.79.208.0/22 maxlen: 24
                          181.79.217.0/24 maxlen: 24
                          181.79.220.0/24 maxlen: 24
                          181.79.221.0/24 maxlen: 24
                          181.119.64.0/24 maxlen: 24
                          181.119.66.0/23 maxlen: 24
                          181.119.68.0/23 maxlen: 24
                          181.119.70.0/24 maxlen: 24
                          181.119.82.0/23 maxlen: 24
                          181.119.84.0/22 maxlen: 24
                          181.119.88.0/21 maxlen: 24
                          181.119.96.0/20 maxlen: 24
                          181.119.113.0/24 maxlen: 24
                          181.119.114.0/23 maxlen: 24
                          181.119.122.0/24 maxlen: 24
                          181.119.124.0/23 maxlen: 24
                          181.119.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d8:db:52:32:23:f7:7e:13:65:10:69:80:3a:cc:4b:01:53:0a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Apr 14 17:00:00 2025 GMT
            Not After : Apr 13 17:05:00 2026 GMT
        Subject: CN=7DA0D5C668A63A4927A554DD0A9538D5824AE2D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:b9:5c:7f:e3:4a:5b:98:54:8d:48:19:bd:
                    dc:0d:c8:9d:5c:d9:72:cc:c5:02:04:6e:da:65:de:
                    94:ee:aa:75:3e:cf:24:75:9a:f4:f1:b7:21:d6:a7:
                    41:fc:5c:15:9a:20:e0:b4:ef:9c:35:82:04:b8:3d:
                    08:34:19:ec:2e:e1:c6:8e:cd:93:e4:19:cc:cc:76:
                    e6:61:4f:01:ba:c9:e1:de:5f:8d:74:bc:bf:ac:eb:
                    b1:20:a6:80:eb:f2:c6:01:89:7d:8e:70:08:fd:2c:
                    e9:b3:ce:6d:a2:b0:0d:72:00:53:d7:71:06:79:fb:
                    b3:d3:dd:b9:d3:af:c8:bb:83:7c:22:b9:58:42:a7:
                    e3:16:b3:6c:99:4d:8f:0d:58:5a:51:d3:a3:84:44:
                    78:b2:b0:95:a2:bf:27:7e:a9:83:6e:01:b2:6d:36:
                    b7:ec:38:f5:30:21:3b:f3:5d:95:f8:5e:24:1e:95:
                    b7:5d:cd:f0:c8:7a:78:d3:f2:b1:a6:cd:26:60:44:
                    28:81:40:4e:69:f5:49:ec:63:00:e6:86:65:a2:7b:
                    e1:a4:03:55:4f:28:dc:8f:35:e2:ed:be:79:2f:5b:
                    fe:c4:5d:06:d1:ef:bf:e8:a0:2c:06:93:37:ae:a7:
                    9b:c3:7c:12:f1:a7:0f:ef:87:67:e4:7c:41:3e:c9:
                    c9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A0:D5:C6:68:A6:3A:49:27:A5:54:DD:0A:95:38:D5:82:4A:E2:D3
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.0.0/19
                  181.78.40.0-181.78.45.255
                  181.78.48.0-181.78.127.255
                  181.78.192.0-181.78.219.255
                  181.78.224.0/24
                  181.78.226.0/23
                  181.79.80.0-181.79.99.255
                  181.79.192.0-181.79.211.255
                  181.79.217.0/24
                  181.79.220.0/23
                  181.119.64.0/24
                  181.119.66.0-181.119.70.255
                  181.119.82.0-181.119.111.255
                  181.119.113.0-181.119.115.255
                  181.119.122.0/24
                  181.119.124.0-181.119.126.255

    Signature Algorithm: sha256WithRSAEncryption
         95:b4:5e:6c:2f:7d:b6:42:41:f7:2e:a9:b4:4e:88:2f:66:dd:
         5e:71:10:19:d7:03:1d:e3:f7:61:aa:c6:d7:b7:43:83:b6:78:
         52:03:74:7e:2f:06:97:a5:a1:cc:3a:2a:66:44:73:5c:83:c7:
         db:5e:06:98:00:32:d4:b1:92:8f:bc:55:10:b8:c1:27:cb:53:
         b4:d9:15:26:d4:50:0a:64:b8:8e:e5:58:23:f2:9b:ff:db:35:
         66:d8:05:54:18:04:e9:4c:8c:8c:b1:b0:3e:c2:9a:9e:d6:42:
         4d:c7:d4:2f:d3:44:8b:89:03:30:25:17:75:62:3e:79:1f:62:
         54:a0:f1:ea:cb:b5:af:fe:f7:d5:ba:d8:40:12:e3:ce:80:98:
         77:fb:40:80:cc:38:e5:99:2a:a6:c2:69:75:cb:5a:b0:e6:17:
         97:c9:88:5b:90:01:49:f9:7b:81:15:1d:ef:6e:4d:0f:23:05:
         37:31:37:1a:ac:18:55:83:15:78:43:7d:35:af:62:b5:01:43:
         19:e5:f4:69:fe:ff:07:9e:41:85:9b:8f:35:14:12:16:ed:67:
         b0:2c:4f:fa:ca:1a:14:df:0d:9b:72:ae:72:0f:90:3d:72:bc:
         1d:28:f4:17:e3:c3:78:a6:98:af:3e:60:6c:59:6a:c3:34:0b:
         a8:99:85:79
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIUKdjbUjIj934TZRBpgDrMSwFTCqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNTA0MTQxNzAwMDBaFw0yNjA0MTMxNzA1MDBaMDMxMTAvBgNV
BAMTKDdEQTBENUM2NjhBNjNBNDkyN0E1NTRERDBBOTUzOEQ1ODI0QUUyRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Nblcf+NKW5hUjUgZvdwNyJ1c
2XLMxQIEbtpl3pTuqnU+zyR1mvTxtyHWp0H8XBWaIOC075w1ggS4PQg0Gewu4caO
zZPkGczMduZhTwG6yeHeX410vL+s67EgpoDr8sYBiX2OcAj9LOmzzm2isA1yAFPX
cQZ5+7PT3bnTr8i7g3wiuVhCp+MWs2yZTY8NWFpR06OERHiysJWivyd+qYNuAbJt
NrfsOPUwITvzXZX4XiQelbddzfDIenjT8rGmzSZgRCiBQE5p9UnsYwDmhmWie+Gk
A1VPKNyPNeLtvnkvW/7EXQbR77/ooCwGkzeup5vDfBLxpw/vh2fkfEE+ycnRAgMB
AAGjggM/MIIDOzAdBgNVHQ4EFgQUfaDVxmimOkknpVTdCpU41YJK4tMwHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4MUMwRjlFNjJD
NkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvQVM1MjQ2OC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBxQYIKwYBBQUHAQcBAf8EgbUwgbIwga8EAgABMIGoAwQF
tU4AMAwDBAO1TigDBAG1TiwwDAMEBLVOMAMEB7VOADAMAwQGtU7AAwQCtU7YAwQA
tU7gAwQBtU7iMAwDBAS1T1ADBAK1T2AwDAMEBrVPwAMEArVP0AMEALVP2QMEAbVP
3AMEALV3QDAMAwQBtXdCAwQAtXdGMAwDBAG1d1IDBAS1d2AwDAMEALV3cQMEArV3
cAMEALV3ejAMAwQCtXd8AwQAtXd+MA0GCSqGSIb3DQEBCwUAA4IBAQCVtF5sL322
QkH3Lqm0TogvZt1ecRAZ1wMd4/dhqsbXt0ODtnhSA3R+LwaXpaHMOipmRHNcg8fb
XgaYADLUsZKPvFUQuMEny1O02RUm1FAKZLiO5Vgj8pv/2zVm2AVUGATpTIyMsbA+
wpqe1kJNx9Qv00SLiQMwJRd1Yj55H2JUoPHqy7Wv/vfVuthAEuPOgJh3+0CAzDjl
mSqmwml1y1qw5heXyYhbkAFJ+XuBFR3vbk0PIwU3MTcarBhVgxV4Q301r2K1AUMZ
5fRp/v8HnkGFm481FBIW7WewLE/6yhoU3w2bcq5yD5A9crwdKPQX48N4ppivPmBs
WWrDNAuomYV5
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:14 2025 by rpki-client on console.sobornost.net