Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS272953.roa
File:                     AS272953.roa (raw, json)
Hash identifier:          BPzKDGvR7/kUMjuNa0YjeMH+65rB8StbhTmrd/R01gA=
Subject key identifier:   94:89:4B:A7:09:C9:B2:99:A0:59:7B:FF:F4:FE:3E:6C:EA:A7:B5:E4
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       03400765C8AC80D4C97B571D6E849EBF28D8D1AB
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS272953.roa
Signing time:             Mon 27 Apr 2026 22:00:01 +0000
ROA not before:           Mon 27 Apr 2026 21:55:01 +0000
ROA not after:            Mon 26 Apr 2027 22:00:01 +0000
asID:                     272953
IP address blocks:        190.216.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 07:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:40:07:65:c8:ac:80:d4:c9:7b:57:1d:6e:84:9e:bf:28:d8:d1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Apr 27 21:55:01 2026 GMT
            Not After : Apr 26 22:00:01 2027 GMT
        Subject: CN=94894BA709C9B299A0597BFFF4FE3E6CEAA7B5E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:0c:65:ce:1f:ba:81:f4:56:4f:d0:c5:e9:
                    e3:e7:6c:ba:fa:ab:33:91:0b:18:aa:ce:e8:b9:7c:
                    52:1d:9b:7f:11:7d:7e:ff:f4:88:28:98:41:51:16:
                    56:44:6b:b9:3f:33:09:73:57:3e:59:1e:32:79:3c:
                    28:44:e3:33:ab:2c:c2:1b:6c:93:49:49:1f:51:4f:
                    5c:f3:88:6b:ed:f0:48:31:38:69:87:a2:11:17:9e:
                    ad:19:d6:48:95:83:d6:64:15:4b:7d:6a:d3:d2:8b:
                    b4:2d:92:61:ee:f5:e0:b7:0e:94:f2:3a:35:57:95:
                    c7:62:d8:b5:08:02:95:24:6a:02:39:e1:38:25:77:
                    9d:97:03:45:53:8c:59:fd:87:79:a4:ce:62:d6:0b:
                    bb:ab:87:a9:08:69:6f:9d:1e:e0:d5:22:0a:92:45:
                    66:bf:f4:81:89:fa:a4:f8:fa:5c:32:1c:dd:37:c3:
                    8f:6c:67:7e:58:9d:d0:f0:83:a1:e1:be:2a:2c:a2:
                    4b:9f:57:a1:31:8a:e0:ec:18:0f:38:bd:1e:a1:60:
                    8a:09:2f:ff:73:27:02:2a:66:d0:63:61:f6:e0:8b:
                    56:be:9c:b2:30:db:cf:73:ec:7a:ea:59:2e:93:2c:
                    9f:57:61:dc:0a:60:80:01:ba:1a:c6:f8:bd:b0:4c:
                    1d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:89:4B:A7:09:C9:B2:99:A0:59:7B:FF:F4:FE:3E:6C:EA:A7:B5:E4
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS272953.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:d8:56:7b:10:3d:f3:43:69:b4:ac:ff:20:b7:32:71:1d:3b:
         c0:50:a3:2d:21:2a:8f:31:66:73:fd:e8:0e:42:20:8f:3d:c8:
         c6:56:eb:8f:2e:d9:62:cf:02:c0:a2:69:53:bd:8c:84:77:ce:
         0f:f0:ce:ca:13:7d:55:2c:a6:36:72:33:cf:69:d8:a3:1c:e3:
         a5:db:41:3a:85:77:9a:ff:2a:6b:29:aa:75:1c:75:ae:1d:e5:
         ce:2a:d3:90:bb:d8:b7:f0:81:38:c2:9e:8d:57:54:ed:5d:6a:
         be:a4:97:78:3f:3f:71:15:78:bf:70:ef:f3:98:c0:13:2f:c3:
         e4:04:bb:2f:2a:dd:e3:74:7b:05:66:eb:85:ee:23:aa:e1:0b:
         6a:60:08:bb:4b:44:ef:ed:34:d8:3b:e2:59:27:8a:bf:eb:90:
         95:27:df:9c:dc:70:ca:0d:80:fe:68:c8:94:d3:95:a2:0f:d6:
         42:07:21:a0:e4:78:3d:72:33:0b:06:8b:8c:3a:52:63:c3:37:
         61:34:36:4e:90:1f:ce:e5:c8:78:cc:6a:a8:37:d9:0e:1e:bb:
         22:f4:36:f5:77:bb:ef:b1:94:4a:e6:ca:2e:ed:68:08:71:e9:
         e9:8b:c0:f2:9a:d2:c8:ba:14:30:30:e8:e7:52:ee:73:18:b6:
         5f:59:5f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:22:55 2026 by rpki-client