Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS272954.roa
File:                     AS272954.roa (raw, json)
Hash identifier:          GaXl1G1Zd2tODijCOZuKjC/lQIjFgrS5EL8Fw6p9yws=
Subject key identifier:   78:CB:1B:36:D7:38:47:02:8D:8E:15:D0:BB:7A:0B:A8:0C:A9:AC:F4
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       071FEC50CA3088AE73E33374321D8A998FD7901C
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS272954.roa
Signing time:             Tue 26 Aug 2025 22:41:15 +0000
ROA not before:           Tue 26 Aug 2025 22:36:15 +0000
ROA not after:            Tue 25 Aug 2026 22:41:15 +0000
asID:                     272954
IP address blocks:        181.78.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Sep 2025 09:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1f:ec:50:ca:30:88:ae:73:e3:33:74:32:1d:8a:99:8f:d7:90:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Aug 26 22:36:15 2025 GMT
            Not After : Aug 25 22:41:15 2026 GMT
        Subject: CN=78CB1B36D73847028D8E15D0BB7A0BA80CA9ACF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ef:eb:aa:d7:5f:63:ba:b7:64:19:e3:02:72:
                    83:39:7d:b1:a9:34:9c:71:42:5c:f9:ba:c1:9a:61:
                    b3:b5:0c:d0:55:28:98:dc:18:c7:5e:74:50:7d:e5:
                    20:8f:75:eb:11:7d:e0:fd:86:08:37:3b:0d:1b:39:
                    70:44:2e:1b:3f:9c:ed:8e:7e:a1:8e:58:65:df:30:
                    d5:13:80:c0:c8:c1:f8:92:7e:f4:ef:ed:f9:9b:cc:
                    89:01:f2:e1:34:e7:bb:f3:15:60:db:44:86:33:16:
                    8a:69:3d:2d:f8:52:eb:ad:2c:5e:1d:64:55:82:20:
                    a4:4d:0b:01:0a:3b:f4:84:d6:6a:50:17:37:0b:41:
                    4f:a7:c3:8d:80:cf:b2:0f:9a:f0:2c:60:6e:d3:69:
                    61:b1:67:c7:d3:5b:24:14:b9:bc:21:16:02:ca:60:
                    c5:04:56:29:00:d4:7c:33:6b:c7:4a:31:93:94:ef:
                    b3:a2:aa:11:e3:18:fc:a1:30:bc:c5:64:31:15:b3:
                    c9:e8:0e:fe:5e:44:fa:02:50:68:b0:c9:5b:b4:88:
                    4c:e7:18:28:53:4c:18:a6:8d:89:aa:94:fb:a4:7b:
                    a6:a5:cf:d6:d4:67:6c:ab:3e:c5:7c:5e:76:d4:23:
                    cf:f6:9f:a0:d8:df:f2:cd:c4:03:48:e7:75:63:9d:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CB:1B:36:D7:38:47:02:8D:8E:15:D0:BB:7A:0B:A8:0C:A9:AC:F4
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS272954.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:a3:6d:bb:da:e3:c5:cc:e7:a2:63:a7:10:1e:83:09:6b:62:
         36:8a:49:3f:fe:26:30:2b:f0:49:55:e4:ca:23:11:f5:17:48:
         bc:d4:e9:4b:74:28:b0:cf:d7:31:f7:71:92:27:79:f7:c4:1e:
         99:2c:12:a7:a2:ef:be:8c:23:f4:fa:20:28:b3:20:90:f2:17:
         b6:e9:b6:5e:55:5d:dc:1b:57:5e:e0:44:af:18:92:f2:31:80:
         06:0f:8b:f4:d6:11:e2:6d:cf:55:7d:ca:48:a0:99:27:65:29:
         f2:ed:6f:08:24:7c:3c:75:0f:10:bf:6c:3b:07:25:2f:92:97:
         57:5d:c1:9d:13:45:ec:4a:33:0e:ef:52:82:b0:a7:2e:ef:5d:
         2b:71:c2:5d:24:62:c4:6c:ae:1f:1f:29:05:28:59:de:48:4d:
         74:90:b6:e5:e5:1d:e6:94:2b:e9:db:11:e8:1e:7f:52:78:e3:
         e1:ff:26:90:bf:0a:ef:71:5c:9a:b6:55:53:0d:c8:77:9d:fd:
         b9:56:51:d0:d1:5a:46:a1:65:0f:08:a4:a2:ed:20:ab:bd:2e:
         56:c0:ce:4f:d7:64:cd:f5:b3:82:87:4a:f5:a9:7f:de:ca:4f:
         89:3c:37:8f:13:ca:58:fd:c9:e8:20:27:d0:6c:84:2b:01:1c:
         2d:7a:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 09:28:42 2025 by rpki-client