Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS269777.roa
File:                     AS269777.roa (raw, json)
Hash identifier:          91fQ0/LeTX2esc8bgkGaDVnUayUKzX+g5NSCHfx9VLo=
Subject key identifier:   13:93:BC:0D:8C:89:90:38:5F:73:B5:05:DB:40:51:7E:1D:6B:91:CB
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       713694EED87807AB3DF77FC4E70E291C0B6D3AE6
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS269777.roa
Signing time:             Tue 26 Aug 2025 22:41:15 +0000
ROA not before:           Tue 26 Aug 2025 22:36:15 +0000
ROA not after:            Tue 25 Aug 2026 22:41:15 +0000
asID:                     269777
IP address blocks:        181.79.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 14:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:36:94:ee:d8:78:07:ab:3d:f7:7f:c4:e7:0e:29:1c:0b:6d:3a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Aug 26 22:36:15 2025 GMT
            Not After : Aug 25 22:41:15 2026 GMT
        Subject: CN=1393BC0D8C8990385F73B505DB40517E1D6B91CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:92:cc:26:4d:3b:7e:88:14:42:1c:a9:14:58:
                    28:3c:98:64:0b:5a:e7:bd:03:57:88:b8:f4:33:f4:
                    c6:c6:57:c5:c7:ad:55:a7:25:de:96:ca:e7:15:76:
                    b7:53:a6:ec:c9:96:16:43:99:7f:14:62:70:94:7c:
                    aa:c2:32:fe:73:21:ca:d0:b5:41:e4:ef:85:65:df:
                    80:7a:e7:d0:d9:04:71:91:eb:fb:d8:18:1a:5d:c1:
                    fc:17:41:ac:ae:d6:86:85:52:a5:f3:af:14:0c:ba:
                    58:c0:2f:c1:b0:e2:46:3c:ed:93:47:57:16:38:ac:
                    7b:57:8d:7d:bc:ce:91:ec:f2:16:ac:e6:98:90:0f:
                    88:b1:73:7c:36:2c:1a:11:51:01:44:f3:be:75:dd:
                    c1:7d:71:ab:a6:78:1b:09:d8:9e:5a:51:e6:8f:bc:
                    80:fe:0b:43:06:a5:b8:8d:4f:e7:3c:69:ae:62:56:
                    7f:ee:f7:75:01:98:a2:b7:39:cf:16:1f:e4:a4:7a:
                    5d:b8:b5:1a:bb:19:ad:fe:2c:ab:a6:e3:7d:fa:8a:
                    b8:62:76:48:66:e4:2b:35:3a:e3:8d:ed:9f:96:d6:
                    a8:53:41:37:20:95:c1:48:6e:00:70:f6:21:19:43:
                    56:38:aa:65:05:c9:67:20:28:5e:4c:3d:92:87:6e:
                    a8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:93:BC:0D:8C:89:90:38:5F:73:B5:05:DB:40:51:7E:1D:6B:91:CB
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS269777.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:37:80:ec:56:81:a3:6e:8d:51:75:e4:9c:ee:15:d4:1f:45:
         7b:ca:30:b6:0f:0b:33:47:26:fa:03:4b:a2:fb:7a:77:04:10:
         37:3f:46:df:38:74:c6:dd:c1:18:2b:2a:e7:0a:40:ac:fd:84:
         54:ff:bc:a5:1a:52:3d:9a:18:a3:87:56:83:05:a7:5b:66:d8:
         ca:8b:40:9b:f7:9c:47:26:8b:10:6d:e2:02:f5:d2:4e:5a:e8:
         44:b3:87:68:49:fc:58:62:8f:ba:90:e5:bb:17:7d:10:d6:89:
         55:a0:21:41:f6:98:34:18:20:47:a6:2f:be:f1:56:8b:89:bf:
         01:14:cb:b6:a2:b6:63:8e:eb:7b:f4:1c:62:17:01:0d:dd:9e:
         b8:dd:a5:83:07:b9:2e:b4:da:dc:00:27:40:eb:d5:ce:69:94:
         aa:11:95:5a:a9:fd:49:4d:f0:b7:c7:9b:cc:9e:1a:a7:e2:63:
         2b:ec:a2:a4:55:a9:4d:85:c4:10:43:d6:03:87:b6:e8:79:44:
         03:03:9d:64:2e:de:b0:70:9b:19:44:34:13:1d:71:56:e0:fd:
         90:35:63:60:0e:e4:79:ba:cb:eb:c2:7f:bd:16:ad:c6:c2:31:
         6c:ee:03:ee:d1:9a:9c:4b:be:f3:14:b1:04:13:e4:58:a0:21:
         20:7c:c6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 12:34:08 2025 by rpki-client