Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS267815.roa
File:                     AS267815.roa (raw, json)
Hash identifier:          GWsiNhaUq/JAQCy8MD3rDvy8fjvEyGE7PwNPHT9kjws=
Subject key identifier:   53:F4:C0:6F:9E:BD:D9:BF:7F:53:1B:61:98:C1:9A:C0:D0:5A:C0:57
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       2D8455DDF51E2A709B2DE03B053B1E7FBFE4F479
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS267815.roa
Signing time:             Fri 27 Mar 2026 21:05:11 +0000
ROA not before:           Fri 27 Mar 2026 21:00:11 +0000
ROA not after:            Fri 26 Mar 2027 21:05:11 +0000
asID:                     267815
IP address blocks:        201.234.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:84:55:dd:f5:1e:2a:70:9b:2d:e0:3b:05:3b:1e:7f:bf:e4:f4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 27 21:00:11 2026 GMT
            Not After : Mar 26 21:05:11 2027 GMT
        Subject: CN=53F4C06F9EBDD9BF7F531B6198C19AC0D05AC057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:38:3a:43:da:1d:d6:31:dd:1b:c9:33:10:
                    6f:47:61:c8:9d:80:95:1c:de:95:fa:f1:f3:37:eb:
                    92:15:38:b9:b8:08:93:8f:c7:46:5a:8b:6f:d0:29:
                    a0:69:77:d8:64:b2:6e:63:25:1b:e5:6d:95:3f:2b:
                    be:f6:a1:1a:75:ef:0d:80:fb:18:ad:5b:49:51:21:
                    aa:77:db:30:b8:f9:e0:af:2c:aa:1c:19:71:6a:61:
                    92:62:5a:ea:a6:ba:9d:87:16:9a:50:59:5f:94:15:
                    86:8f:ed:74:3d:22:73:17:d4:11:6c:85:23:7a:bd:
                    29:fb:9d:63:ca:85:7d:8f:03:0b:96:8d:ed:0a:47:
                    3c:7e:ee:b8:4a:05:51:da:3e:73:eb:95:7a:5a:60:
                    fc:25:25:2b:93:67:a7:4e:14:a1:b0:92:9a:79:b9:
                    84:91:3b:62:c1:39:d7:b4:b2:ae:de:fc:42:bb:8d:
                    fc:ba:a7:81:8e:1c:cf:c6:fa:d8:1a:eb:90:d0:22:
                    46:dc:6b:cb:42:17:38:e8:c4:d7:00:93:93:12:a6:
                    90:c4:ea:81:dc:96:5d:ba:30:c5:df:70:b8:fa:45:
                    f7:20:0c:cc:12:58:da:4d:ef:5a:12:1d:6e:97:48:
                    44:1a:e9:17:10:7c:4c:e0:30:fe:99:a7:37:57:e3:
                    ee:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F4:C0:6F:9E:BD:D9:BF:7F:53:1B:61:98:C1:9A:C0:D0:5A:C0:57
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS267815.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:0a:87:1a:b8:7c:78:51:60:9a:de:32:17:35:b8:3e:1a:af:
         f8:8a:35:84:73:7a:9d:e0:39:88:13:c9:db:89:bd:95:68:0a:
         a7:c3:a7:72:5c:45:bc:51:dd:a2:1d:1b:d2:4a:11:8d:b5:a9:
         34:7e:45:b3:bc:29:45:a0:09:e4:52:b5:38:8b:2e:b1:9b:2c:
         6f:c9:e2:09:a8:c4:26:6d:6a:8b:6e:c0:f4:3b:0d:06:4d:0c:
         01:ad:20:4a:10:91:b8:24:60:51:16:76:b6:34:74:85:34:5b:
         61:ff:9e:16:d4:4d:ba:28:af:8a:ec:0d:a2:c1:67:28:c4:85:
         90:97:d6:85:99:01:24:ea:e0:f3:ea:89:07:a8:d8:88:e4:91:
         c2:cb:ae:41:e7:0b:4c:46:94:af:4e:d4:52:eb:2a:5e:e9:3b:
         dd:53:94:3a:4d:33:77:26:8c:c7:cf:59:af:16:a5:3e:30:f6:
         83:dc:18:fd:b9:49:02:08:26:99:00:db:5b:8b:35:4c:70:e7:
         d8:23:e3:3b:c0:67:69:5b:34:d2:40:a1:23:cf:e3:6c:bd:ec:
         13:2b:fb:18:0f:28:b6:64:57:f5:ce:77:5c:43:01:43:c5:23:
         f3:81:81:40:5d:6b:ae:2c:1c:e7:7e:aa:3f:07:ec:c6:17:a6:
         72:3f:da:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:23 2026 by rpki-client