Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS263798.roa
File:                     AS263798.roa (raw, json)
Hash identifier:          EJlgSvSMpIxQ+uEC4wfhGQXIPw0rpYrZdT+pr/XHPbY=
Subject key identifier:   3A:D6:83:D8:59:5D:B7:F6:7D:DC:69:6F:59:49:92:C6:07:DA:16:AA
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       11F6819399261F3F0EA9F8A5E26FAD66A9D9F357
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS263798.roa
Signing time:             Mon 06 Apr 2026 17:45:00 +0000
ROA not before:           Mon 06 Apr 2026 17:40:00 +0000
ROA not after:            Mon 05 Apr 2027 17:45:00 +0000
asID:                     263798
IP address blocks:        181.78.238.0/24 maxlen: 24
                          186.33.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 10:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f6:81:93:99:26:1f:3f:0e:a9:f8:a5:e2:6f:ad:66:a9:d9:f3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Apr  6 17:40:00 2026 GMT
            Not After : Apr  5 17:45:00 2027 GMT
        Subject: CN=3AD683D8595DB7F67DDC696F594992C607DA16AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:88:76:10:02:55:76:45:ac:8b:df:91:b8:
                    ec:1d:ff:ff:d5:53:b2:1e:b5:76:d8:af:04:1a:5e:
                    48:13:ea:30:4a:9a:3d:76:cd:96:32:d8:de:8b:f6:
                    5d:11:76:7f:3d:03:68:96:d7:d2:d4:cc:ac:fe:17:
                    58:57:6c:6b:fb:77:92:48:5a:3a:2a:f7:49:64:5f:
                    d4:dc:ad:86:a1:e2:34:2a:9e:2d:b8:40:ea:d1:cb:
                    c0:5c:eb:7b:0a:bd:b4:d4:32:63:91:39:d2:59:34:
                    4d:16:76:85:d3:f3:4f:1e:e5:04:b9:71:4e:67:62:
                    9c:c9:ec:18:5a:e5:c4:7e:dd:21:7e:8a:c6:40:ff:
                    ed:fd:16:97:98:9b:16:68:af:05:f1:c2:4a:7c:a8:
                    e2:cb:7b:61:6f:f6:ee:20:93:5f:a8:34:03:51:4f:
                    4c:d4:a5:04:c3:0e:4a:37:06:d3:bc:93:ad:04:ed:
                    76:77:b9:9c:32:5d:a0:9e:96:46:a2:74:f5:6b:2f:
                    a6:0d:51:da:dc:e9:6d:56:7c:0a:25:65:c3:c0:81:
                    a0:9c:19:77:d1:ff:03:04:35:e0:94:b9:e8:05:1f:
                    ac:3e:b8:4c:bb:b7:7d:11:c8:9a:af:42:ac:e3:ea:
                    81:a6:90:01:f9:59:86:c9:32:4c:8b:e2:18:b6:b8:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D6:83:D8:59:5D:B7:F6:7D:DC:69:6F:59:49:92:C6:07:DA:16:AA
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS263798.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.238.0/24
                  186.33.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:7e:7b:56:fe:53:cd:e5:56:7e:34:da:4b:2c:7b:33:d7:03:
         18:5a:42:e9:9c:2c:44:5b:04:81:da:2f:21:0d:0a:66:6d:11:
         8d:3b:12:2e:18:62:f3:d2:31:a8:73:38:55:3d:63:f9:be:80:
         c8:4c:bb:ed:d1:26:66:bf:63:ed:c4:5b:e6:a0:8c:bc:93:14:
         bf:c3:d9:a4:db:39:cc:36:04:e4:72:7c:d6:70:27:27:bf:d6:
         18:c2:26:79:4c:cb:20:73:fa:09:7b:f2:04:09:41:af:d6:1c:
         e6:b2:c2:33:0f:81:a3:4d:d3:08:58:f8:6e:10:1e:76:9c:13:
         47:7f:78:31:59:5a:40:2a:90:2f:73:96:06:8b:c4:58:e2:ef:
         72:0c:67:36:19:a5:6e:e1:df:e0:00:88:3c:2f:fa:b3:d9:21:
         73:fb:f0:04:00:ea:98:6e:df:2d:20:5b:71:6e:eb:22:eb:02:
         c2:dc:96:f7:fa:8e:17:d3:e3:2a:b2:90:58:80:b0:5b:4b:ab:
         78:b8:e0:f8:53:44:dd:11:ef:6e:ed:47:37:47:69:ed:c0:31:
         29:af:e5:af:ee:23:8c:b3:51:78:78:ce:d9:11:d5:ac:8a:b9:
         5c:03:79:85:29:c3:29:0e:b1:dd:60:54:be:29:7f:10:61:ef:
         2d:46:c5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:38 2026 by rpki-client