Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS263756.roa
File:                     AS263756.roa (raw, json)
Hash identifier:          cg7gjFRd7EwWurJV09iI5+UIAtdAGg9xwuMYWz1LPb0=
Subject key identifier:   CC:30:6B:5E:43:4F:9E:83:97:16:E3:86:E0:F4:00:5D:53:11:99:4F
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       20D37291579F0658C05710C46E71EE9324998D45
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS263756.roa
Signing time:             Fri 27 Mar 2026 21:05:12 +0000
ROA not before:           Fri 27 Mar 2026 21:00:12 +0000
ROA not after:            Fri 26 Mar 2027 21:05:12 +0000
asID:                     263756
IP address blocks:        201.234.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d3:72:91:57:9f:06:58:c0:57:10:c4:6e:71:ee:93:24:99:8d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 27 21:00:12 2026 GMT
            Not After : Mar 26 21:05:12 2027 GMT
        Subject: CN=CC306B5E434F9E839716E386E0F4005D5311994F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:15:69:7d:77:6a:59:80:83:db:18:c3:79:ed:
                    33:7f:74:aa:66:fc:f4:f9:95:cc:6b:5c:66:4c:6e:
                    42:45:40:7d:a0:f8:17:a6:4b:df:7f:47:49:09:05:
                    5f:c1:00:5f:eb:df:33:ba:34:20:16:16:c3:7d:d3:
                    43:b1:ed:7d:c3:d5:e1:44:0f:8e:73:c0:6e:69:16:
                    8e:af:65:08:28:c3:b6:cb:ae:c1:af:f4:98:44:a9:
                    9e:e4:1f:a2:62:0e:3c:1c:ab:19:e5:11:e4:5e:38:
                    85:07:52:1d:15:94:9b:13:be:f2:5b:39:f3:28:c4:
                    9c:5f:08:01:1f:39:a9:a4:a9:f8:25:66:62:ed:1a:
                    86:31:60:91:2f:fc:d2:ca:7e:80:b3:eb:74:cc:82:
                    32:16:36:76:85:ca:91:e7:ca:0b:d5:71:20:c7:31:
                    4c:d7:e0:19:9b:3d:ec:ec:de:a0:c2:d1:d4:70:b3:
                    d6:d1:16:ed:3f:5a:02:e5:11:e9:c8:f2:46:85:38:
                    ff:1d:af:6a:f9:bb:d2:c5:db:3e:22:8d:0f:26:5f:
                    04:8a:2c:7d:8f:05:ee:60:e1:b6:50:2f:ec:c3:06:
                    bc:a1:d9:26:47:af:78:07:9c:09:53:1f:8a:ba:2e:
                    fb:34:fa:d0:8b:71:96:1f:c5:36:fc:77:12:e6:18:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:30:6B:5E:43:4F:9E:83:97:16:E3:86:E0:F4:00:5D:53:11:99:4F
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS263756.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:6a:5c:c3:30:3e:14:59:89:bb:d6:43:e0:43:bb:e2:24:14:
         fa:fe:82:c6:7d:05:39:aa:58:d9:51:a8:1e:67:8a:16:42:5a:
         8e:e8:27:30:f6:fc:36:0c:7a:c8:44:16:d2:7a:f4:f4:40:43:
         98:d9:67:8e:a0:67:e2:e0:86:52:a9:da:0b:cf:a4:03:4d:a5:
         6f:d1:23:90:e5:11:0d:44:b5:35:11:47:84:6f:65:b7:2e:68:
         5a:d9:9f:5c:d9:34:ea:ce:6f:d1:58:69:23:f3:0e:ad:68:31:
         5e:0e:12:92:d5:32:13:13:4b:8b:e3:ab:57:0b:47:d6:32:d3:
         11:7b:4b:6d:25:3d:c8:f8:e2:a3:51:73:a4:21:87:54:f9:b9:
         dd:e7:7c:ef:cf:11:b6:7c:e9:f5:0f:2e:e2:a3:f4:cb:dd:3b:
         82:31:9a:46:26:67:b0:55:8b:8c:35:32:e4:88:45:32:7b:e9:
         96:12:48:44:6c:31:ed:b0:d6:35:7b:3a:9a:53:b1:8a:5e:14:
         79:82:ec:b8:4f:fc:e2:87:ec:57:21:6c:9f:c4:50:5a:cf:5b:
         d1:0e:8c:c4:fa:7b:35:fd:52:95:18:bc:2c:6a:c5:3d:7e:0d:
         8a:3d:77:b2:37:80:0a:1a:e4:ed:7a:8b:37:33:31:6f:79:b1:
         25:de:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 05:53:00 2026 by rpki-client