Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS272954.roa
File:                     AS272954.roa (raw, json)
Hash identifier:          eIxwpLAz2j/nLfDPlzfSked2BsL+gHPOPbOFnQjdjCA=
Subject key identifier:   66:9E:73:69:6A:A4:C6:14:59:32:22:C0:F6:53:4D:BE:50:B0:DF:65
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       1BC90DBA2AF05F25FFA3BA4067AC24AC48BE9554
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS272954.roa
Signing time:             Tue 28 Jul 2026 22:55:24 +0000
ROA not before:           Tue 28 Jul 2026 22:50:24 +0000
ROA not after:            Tue 27 Jul 2027 22:55:24 +0000
asID:                     272954
IP address blocks:        181.78.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Aug 2026 06:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c9:0d:ba:2a:f0:5f:25:ff:a3:ba:40:67:ac:24:ac:48:be:95:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Jul 28 22:50:24 2026 GMT
            Not After : Jul 27 22:55:24 2027 GMT
        Subject: CN=669E73696AA4C614593222C0F6534DBE50B0DF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:aa:53:ca:b7:18:88:7d:d1:90:11:f1:60:
                    46:05:89:4e:8e:68:5a:fd:4a:c0:80:f7:d8:14:60:
                    07:0f:fc:56:5b:45:d7:6c:c3:e7:59:f7:4b:29:a9:
                    1b:14:e5:56:9e:4a:cc:c7:cf:22:8f:57:5a:6b:b0:
                    c0:75:9f:28:6a:93:c7:2f:92:fa:15:ee:5e:e3:6c:
                    fb:70:f3:55:23:6a:80:b9:65:4c:eb:91:28:34:be:
                    19:24:83:11:0d:f8:de:97:3f:fb:5d:4e:66:b7:25:
                    00:6a:1a:ab:89:43:0e:29:4d:7b:1a:f6:12:2f:04:
                    34:2b:3a:f3:9c:b2:1e:9c:88:be:6b:8b:e1:16:33:
                    49:74:dc:1a:54:1f:e1:f9:05:0d:0f:2f:ce:a7:15:
                    50:c9:f3:f7:fa:06:b1:b3:14:cd:39:d2:df:a7:24:
                    be:cc:4b:21:4f:86:d9:69:83:4d:b7:87:3c:05:d8:
                    7b:ce:10:d6:40:34:a9:23:dd:c6:d6:d2:f1:bf:2e:
                    c5:7d:5c:66:95:fa:b0:48:a3:5c:9d:67:c4:5f:0e:
                    6d:76:fc:fa:a7:ed:ea:63:82:4e:bc:ea:70:99:3a:
                    76:b5:e8:27:d2:11:63:f1:87:c8:9e:7c:e0:9b:b0:
                    b7:5c:b9:1e:a1:7d:2e:ec:b9:82:76:27:25:ad:b6:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9E:73:69:6A:A4:C6:14:59:32:22:C0:F6:53:4D:BE:50:B0:DF:65
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS272954.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:37:30:e0:26:0f:f1:65:d2:b2:4f:db:e9:d9:74:51:1b:11:
         df:a8:d9:0c:fe:da:52:f8:75:1a:c0:3d:7e:d8:64:3f:eb:85:
         80:8c:d0:d7:6e:54:e3:99:58:0a:4d:09:b2:9a:d2:cb:8e:cb:
         3d:a7:a4:16:47:27:9a:8c:6a:7b:a6:45:71:e9:48:e6:d9:4d:
         3b:75:50:c7:ea:17:0b:f1:72:77:da:01:9b:2d:5b:cd:39:80:
         e5:d4:c1:c7:89:ff:17:46:a1:46:04:4e:e2:07:d5:64:e0:8b:
         4f:e7:a6:1f:fb:0e:2b:e8:fa:82:42:85:7a:3b:07:38:29:38:
         4c:2f:b3:ba:97:4a:de:83:88:2c:b1:03:f7:7c:8c:c8:c1:67:
         c7:9c:55:f5:16:00:fa:9a:83:15:32:dd:ef:86:66:30:04:11:
         22:4d:45:2c:fb:f7:e2:1d:7b:8c:e8:9d:84:14:67:fa:6b:5a:
         92:90:1b:d9:15:e9:c6:68:dc:23:3e:20:f8:8e:c7:b7:6d:2f:
         a0:fb:03:79:56:6b:d8:85:8d:9a:f3:b7:51:93:6f:0e:5a:5c:
         ad:de:49:49:ae:bb:bf:ab:8c:93:72:80:7b:1c:14:f8:1d:9f:
         94:e8:6c:72:0e:98:df:fc:23:e3:f8:83:2c:2b:e1:6f:7a:51:
         9b:de:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:03 2026 by rpki-client