Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS264668.roa
File:                     AS264668.roa (raw, json)
Hash identifier:          be84ScC0ujVedG7/yG+eYxgdZkOxFnED9/QgL6gbj2k=
Subject key identifier:   9E:8F:B3:83:F6:5F:3E:AA:08:3E:35:A1:2B:19:9A:C0:61:5B:A4:20
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       3C0ECC6E22714DBF6669F38FEF642CA33C116152
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS264668.roa
Signing time:             Tue 26 Aug 2025 22:41:15 +0000
ROA not before:           Tue 26 Aug 2025 22:36:15 +0000
ROA not after:            Tue 25 Aug 2026 22:41:15 +0000
asID:                     264668
IP address blocks:        181.78.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Sep 2025 12:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0e:cc:6e:22:71:4d:bf:66:69:f3:8f:ef:64:2c:a3:3c:11:61:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Aug 26 22:36:15 2025 GMT
            Not After : Aug 25 22:41:15 2026 GMT
        Subject: CN=9E8FB383F65F3EAA083E35A12B199AC0615BA420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:0a:ba:30:fd:5e:c7:4e:ba:f5:e8:31:d2:
                    85:0b:ed:01:fe:ed:6e:fe:23:7b:a5:08:9e:8f:aa:
                    e0:81:65:60:8d:97:c8:4b:db:dc:ba:fe:01:77:59:
                    8b:18:80:73:90:4d:f5:8d:1f:42:2d:cf:5d:88:b2:
                    92:c9:b2:44:85:af:13:aa:a7:f5:d2:89:61:ef:e9:
                    a3:73:4a:1d:93:8f:81:27:77:5b:70:4b:55:01:95:
                    df:91:7c:ee:50:4a:92:11:23:43:0f:5d:5b:d3:47:
                    67:e9:ee:25:ca:7e:b0:db:28:16:fe:10:89:60:58:
                    86:1f:f7:44:a5:76:40:68:2e:83:f8:0c:50:92:b4:
                    cf:c6:89:6f:b9:9c:07:27:06:b6:39:05:06:a8:dc:
                    da:62:e0:57:45:fb:36:3e:8d:6e:6b:c2:43:1d:03:
                    6f:19:0e:63:71:f4:2c:dd:0a:72:43:7f:13:6f:aa:
                    a5:4e:27:68:0e:83:7b:23:df:6d:4b:01:ce:13:66:
                    8e:f0:3c:43:1a:98:ee:ea:1a:10:f4:0b:e1:29:0f:
                    96:1d:04:ec:c6:1c:87:fd:41:18:c3:73:24:c1:71:
                    95:07:6a:1a:33:cf:bb:08:b9:05:29:20:ed:b7:5c:
                    bb:97:76:e4:26:1d:f7:35:e3:f8:ac:5e:f5:6d:cd:
                    67:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8F:B3:83:F6:5F:3E:AA:08:3E:35:A1:2B:19:9A:C0:61:5B:A4:20
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS264668.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:fc:cc:48:23:ca:a1:47:4f:9d:5a:50:a6:8b:21:54:3e:9a:
         15:96:96:01:45:0c:23:3f:99:48:92:74:a3:4b:f8:2d:eb:22:
         42:76:7d:54:7c:f2:33:4f:54:8d:0a:52:ea:47:34:9d:61:03:
         1b:a7:76:1e:ba:f1:71:42:2b:d2:3d:ee:52:02:8c:e1:ff:72:
         ed:e7:fe:34:75:bd:3c:5e:14:cd:2f:9b:86:60:4f:dd:20:c0:
         de:09:d2:15:12:15:ed:80:70:08:88:32:72:5d:fb:67:f5:7c:
         8b:65:49:24:35:23:1a:e6:53:26:ea:f6:76:07:ad:0d:3e:1e:
         08:e3:44:77:5e:ab:7b:cb:29:df:5b:d2:33:ee:16:4d:91:7e:
         17:d4:75:23:bb:58:e8:29:70:2f:c2:c7:ff:da:a7:37:ce:af:
         6c:d9:dc:dc:66:4a:16:0e:7c:6c:ae:cf:ce:47:7c:05:88:ed:
         2b:66:06:6e:30:a4:6a:1f:ba:de:58:13:29:64:be:b7:66:3e:
         69:4d:02:60:29:36:63:39:69:bb:5e:ef:a3:5b:42:8b:07:be:
         2e:0f:b3:fa:ed:c9:1d:25:71:fe:9f:3c:af:00:6a:a0:f9:48:
         3f:99:21:11:ed:f0:d4:7f:bf:63:c7:c5:7b:8f:f7:f1:72:fb:
         9b:9f:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:57:51 2025 by rpki-client