Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS274311.roa
File:                     AS274311.roa (raw, json)
Hash identifier:          QJUd73zGa3j1jW1DKICottc4UMXTBzuPlDrFozciJD4=
Subject key identifier:   19:0F:C3:98:95:51:EF:34:59:E4:4C:FD:58:F9:57:56:F7:CE:8B:B8
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       5126697A2937720EDC400AFA77AF7E2981EDB211
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS274311.roa
Signing time:             Wed 08 Apr 2026 01:05:00 +0000
ROA not before:           Wed 08 Apr 2026 01:00:00 +0000
ROA not after:            Wed 07 Apr 2027 01:05:00 +0000
asID:                     274311
IP address blocks:        181.78.15.116/30 maxlen: 30
                          181.78.24.68/30 maxlen: 30
                          181.78.72.128/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 10:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:26:69:7a:29:37:72:0e:dc:40:0a:fa:77:af:7e:29:81:ed:b2:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Apr  8 01:00:00 2026 GMT
            Not After : Apr  7 01:05:00 2027 GMT
        Subject: CN=190FC3989551EF3459E44CFD58F95756F7CE8BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:80:ba:cd:7e:2f:55:19:e8:5c:d6:d3:c8:
                    de:8f:e7:ff:9b:cb:47:e7:ab:c1:94:d4:2f:9f:27:
                    ee:26:ce:cb:93:4c:28:35:70:fa:f6:a3:8f:17:0e:
                    10:b3:00:16:97:ca:ce:61:f8:a3:69:39:c2:af:2a:
                    6b:47:ef:29:c9:e7:8b:d7:b3:3b:b1:2e:be:5c:22:
                    60:74:a2:e1:f7:e6:7e:a3:e2:f1:5f:bb:94:d1:83:
                    9d:00:4d:ec:1b:ff:e3:cb:a9:2d:6b:fc:bc:2e:ad:
                    a6:7b:51:74:e9:97:5a:40:77:21:8e:59:6e:24:4d:
                    98:f8:cb:cd:ca:6d:c4:2a:53:6d:04:39:0f:4a:e9:
                    a8:5c:ed:8a:fd:a0:5e:f7:29:e3:3a:bb:14:54:32:
                    19:61:0e:ca:63:17:f1:2a:79:ec:47:29:7b:18:5a:
                    5a:49:b2:ef:06:7a:4b:d0:01:ef:f3:80:b8:6c:04:
                    dd:54:c9:cf:db:83:55:2d:93:08:42:6f:6e:7e:88:
                    b4:85:22:2b:d5:c8:81:04:0b:f9:74:cf:e8:29:c0:
                    e4:16:f6:9e:a6:5f:c7:d5:78:6b:38:ab:f5:7a:63:
                    79:c7:57:e7:42:3e:45:b7:c0:9f:1b:da:19:22:48:
                    4e:6b:f7:f6:a7:6f:ea:ba:15:08:45:85:87:2b:ab:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0F:C3:98:95:51:EF:34:59:E4:4C:FD:58:F9:57:56:F7:CE:8B:B8
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS274311.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.15.116/30
                  181.78.24.68/30
                  181.78.72.128/29

    Signature Algorithm: sha256WithRSAEncryption
         55:05:84:a4:ce:5f:1b:b1:a2:f3:7c:54:ac:10:c5:40:c2:40:
         ad:e4:9d:e6:b4:c0:97:2e:8a:a0:73:98:64:90:b7:12:58:fd:
         cd:86:5e:99:1f:4e:89:07:86:d3:b9:da:09:8f:3e:b3:82:50:
         51:cb:ff:c2:66:bd:f8:bc:46:43:ff:b4:2d:6e:33:b8:c8:f1:
         72:27:29:c8:44:11:77:d4:37:4f:ed:21:8a:58:fe:d8:ef:69:
         ef:af:5d:2c:73:60:97:c0:79:7d:e9:ce:57:7e:41:fd:fd:3c:
         8c:c2:ba:70:7b:8e:4c:3a:eb:be:66:f0:15:7a:b6:b7:b5:06:
         21:80:60:e3:43:49:b2:e5:52:80:14:26:30:9c:00:c7:6a:02:
         08:d0:69:17:d2:4a:75:4d:e1:d0:9b:94:d5:34:fb:98:6e:71:
         27:97:57:be:17:4f:11:ab:a1:9c:e7:97:60:74:e1:8c:51:14:
         b5:66:7b:78:64:16:26:fc:d0:cb:06:e3:4e:ab:a4:48:eb:51:
         72:c3:f8:4c:18:35:b9:38:20:20:fb:19:90:14:30:c0:8d:63:
         ea:88:b2:d2:8e:cc:73:7b:d8:43:b0:ee:a0:26:7a:a6:d1:1c:
         e3:67:cd:e4:80:52:b1:52:5a:27:6b:22:20:21:46:88:9e:c4:
         f8:da:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:02 2026 by rpki-client