Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS52490.roa
File:                     AS52490.roa (raw, json)
Hash identifier:          VpA+nYXyKjcu9EI87rI+DA4z4ft6WmUAzK/WJYeCQGA=
Subject key identifier:   54:73:E5:F0:B2:8D:57:1C:8C:CC:98:7C:3E:62:0D:70:0D:33:95:99
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       7E8BD51EF02DD602C78B92D0A56DFB123E1C00ED
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS52490.roa
Signing time:             Wed 29 Oct 2025 17:05:00 +0000
ROA not before:           Wed 29 Oct 2025 17:00:00 +0000
ROA not after:            Wed 28 Oct 2026 17:05:00 +0000
asID:                     52490
IP address blocks:        201.251.5.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 08:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8b:d5:1e:f0:2d:d6:02:c7:8b:92:d0:a5:6d:fb:12:3e:1c:00:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Oct 29 17:00:00 2025 GMT
            Not After : Oct 28 17:05:00 2026 GMT
        Subject: CN=5473E5F0B28D571C8CCC987C3E620D700D339599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1c:b6:d8:27:00:00:16:4e:f1:03:07:85:94:
                    68:57:7f:e4:b9:b8:5d:8b:73:3d:f9:6d:99:b8:f0:
                    78:f9:64:af:e2:55:08:0c:08:36:c2:1e:d1:dc:35:
                    84:bd:a1:3b:f0:b9:0a:56:4a:4d:82:cc:91:71:1b:
                    1e:3e:69:b5:18:3f:71:96:3a:19:ad:02:af:96:6f:
                    0c:e4:97:65:86:6b:ed:4d:cb:57:72:22:24:68:5f:
                    68:17:65:38:7e:80:39:21:7b:36:94:c8:ac:1f:dd:
                    1d:20:90:ef:d8:13:92:cf:dc:b1:ab:80:e1:db:1a:
                    96:ad:dd:57:0b:7e:c9:6f:a8:6f:97:4e:e9:11:0f:
                    f9:8b:38:1e:4d:69:c6:eb:9b:94:6b:11:ad:7b:29:
                    e7:60:e1:b1:cd:cb:d2:4f:4d:bf:88:82:77:2b:10:
                    c3:0a:9f:54:9e:28:95:24:ba:16:ae:9a:b3:8d:0f:
                    56:b3:6b:51:0b:ec:e0:4a:7d:3d:fc:00:6f:8e:0a:
                    c7:86:ec:45:7f:e6:31:71:89:93:d4:69:01:07:60:
                    5e:a5:c0:53:0f:10:b7:89:c4:58:5c:4e:e4:be:3b:
                    d2:ee:e2:cc:e9:9d:80:69:56:32:b6:1f:e7:85:88:
                    5c:b3:ca:08:a8:21:10:e4:c8:fe:88:4e:d5:e6:e9:
                    b5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:73:E5:F0:B2:8D:57:1C:8C:CC:98:7C:3E:62:0D:70:0D:33:95:99
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS52490.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.251.5.64/26

    Signature Algorithm: sha256WithRSAEncryption
         a6:ca:79:6f:e3:59:97:bd:2d:9a:10:40:53:6a:28:9d:e0:8d:
         4d:af:a2:ad:b5:b2:f3:b7:5d:4b:9d:61:15:7a:a2:b1:3a:45:
         61:b8:82:6c:8d:29:98:8e:ad:d3:6e:bf:1d:e7:a6:82:cb:14:
         0d:f2:1d:5c:5c:63:9c:65:2a:57:61:5f:60:04:ff:c5:13:b5:
         91:87:fd:84:ec:ee:72:b1:eb:58:9b:aa:d9:bf:c3:5f:4a:12:
         1c:a4:93:07:0a:c2:14:b7:19:38:a4:92:51:93:c5:8d:b7:cd:
         ac:ea:23:a8:6c:b0:b5:52:30:1c:25:6c:e7:8d:b6:8f:00:f0:
         e1:c5:cd:07:6c:e3:16:bd:a8:73:ec:ab:db:ef:59:c0:22:8c:
         9e:4f:33:bf:1b:34:59:27:f7:8c:c7:ab:df:96:da:0c:8b:69:
         44:b5:39:33:53:31:0b:c6:4f:bf:7a:14:5a:d3:64:09:fb:c9:
         a4:9a:42:cb:8d:e5:1f:2c:86:c7:09:ed:6c:53:92:4f:57:8d:
         52:ac:06:77:29:39:81:1b:6e:08:a1:6a:58:d6:56:aa:d4:f4:
         f2:da:39:a3:0b:5d:0e:c3:d1:df:09:f2:e1:93:f7:c6:ed:b9:
         20:6c:41:e6:72:63:79:ef:32:83:b5:47:a4:82:5b:09:08:dc:
         f3:1f:c2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:24:36 2025 by rpki-client