Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS262243.roa
File:                     AS262243.roa (raw, json)
Hash identifier:          Ji7RBUBowdVD+OcCyzgjz0iDySKxqHj+I4Ye3Xw/PAY=
Subject key identifier:   29:37:33:32:2B:A0:34:88:EE:14:FB:37:74:84:92:55:03:6F:FD:25
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       69B860F2E1389685AC0B09231F2200EAB08BCC07
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS262243.roa
Signing time:             Fri 10 Apr 2026 13:55:00 +0000
ROA not before:           Fri 10 Apr 2026 13:50:00 +0000
ROA not after:            Fri 09 Apr 2027 13:55:00 +0000
asID:                     262243
IP address blocks:        181.78.62.0/23 maxlen: 24
                          181.78.102.0/24 maxlen: 24
                          181.119.234.0/23 maxlen: 24
                          186.33.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 10:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b8:60:f2:e1:38:96:85:ac:0b:09:23:1f:22:00:ea:b0:8b:cc:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Apr 10 13:50:00 2026 GMT
            Not After : Apr  9 13:55:00 2027 GMT
        Subject: CN=293733322BA03488EE14FB3774849255036FFD25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:ef:9c:0b:33:a1:25:15:2d:ee:4c:bb:08:
                    df:d5:b5:94:fc:8c:cd:00:21:9a:50:28:b5:8e:ea:
                    79:ee:6f:ce:0d:bc:e4:2c:bb:07:90:24:7e:2d:90:
                    15:13:13:dd:1f:12:c9:79:77:3f:3f:88:d4:1e:94:
                    3f:3b:25:57:fd:f7:de:8f:35:b4:ee:1c:19:b9:96:
                    75:3d:1c:ac:45:6a:9a:9b:e8:e2:43:35:73:a7:25:
                    17:68:fb:2d:fc:85:3f:89:85:28:d9:56:29:14:0f:
                    6a:1e:f2:7c:e5:b7:0f:d2:dc:dd:b5:a3:bf:a6:96:
                    62:64:bf:cb:fc:92:a9:6a:29:8c:37:c5:35:cc:95:
                    5b:e2:23:cd:71:e5:78:15:50:db:1e:cc:92:20:44:
                    28:5c:da:45:d5:e8:51:7f:1f:de:74:dc:19:56:14:
                    5b:6e:50:4e:a7:76:65:d1:0d:96:ab:47:c0:58:9e:
                    0e:2d:14:ad:ba:5c:ad:7a:c7:b7:b8:81:93:66:71:
                    03:ba:f6:47:97:e6:a1:4a:d9:1a:b7:bb:24:81:be:
                    65:ef:34:7e:d9:ca:eb:fe:dd:f8:58:a2:bb:fe:8f:
                    11:07:6d:22:8e:c8:cc:f8:90:57:ce:99:43:ca:1a:
                    e0:8f:d3:e2:51:ff:d4:f0:85:a4:fc:35:88:61:df:
                    9f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:37:33:32:2B:A0:34:88:EE:14:FB:37:74:84:92:55:03:6F:FD:25
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS262243.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.62.0/23
                  181.78.102.0/24
                  181.119.234.0/23
                  186.33.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:3b:01:79:07:3a:22:34:19:75:ef:3a:7d:ed:72:a3:f0:46:
         85:b3:b2:2a:64:36:40:94:58:48:85:3e:e3:63:3e:3b:2c:cf:
         8c:7c:8f:d2:0a:27:53:8a:08:e4:a8:ac:92:9c:0e:1d:08:87:
         64:b2:0a:60:90:e4:cd:67:33:5d:88:90:d6:6e:e0:85:dd:59:
         55:c3:27:22:12:c7:a2:3e:12:26:24:4a:45:ea:40:71:5c:e7:
         04:7f:c7:78:45:5f:2c:6e:7e:a1:66:6a:51:cb:90:e0:37:9d:
         e1:11:79:81:10:71:01:4e:e8:21:f4:3b:76:ee:d2:79:f3:fb:
         63:e9:80:64:4a:83:3e:89:a8:a8:ee:3e:53:6f:b7:e4:36:64:
         65:27:c3:6d:fb:86:57:47:88:36:43:de:2a:cc:4a:bf:dc:17:
         b8:99:a3:40:5a:9e:db:00:de:95:81:72:ab:16:9f:40:6e:d4:
         b5:54:8d:49:99:f9:0e:7c:f8:1a:88:e5:a7:fb:d5:d7:24:06:
         da:ad:33:c5:a5:3c:47:09:27:00:16:63:35:16:e6:00:48:33:
         50:1f:8e:60:b2:17:b3:ce:41:81:54:05:8c:24:d6:30:04:80:
         c1:99:c3:85:42:0b:d5:14:6f:b1:5b:2a:49:4b:87:d8:85:a0:
         57:d4:16:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:41 2026 by rpki-client