Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS274981.roa
File:                     AS274981.roa (raw, json)
Hash identifier:          uU6PpoPf7Y5CTGtri1Tt3y5tzRDgA4vZeJUDXisZDW8=
Subject key identifier:   EB:E7:76:3F:BF:3C:EF:32:EF:C0:7B:20:7E:F3:3C:74:33:29:4B:33
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       4C6C7D8D5723CC2CFE4558294AFE4A9CCCDA4801
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS274981.roa
Signing time:             Thu 09 Jul 2026 02:55:00 +0000
ROA not before:           Thu 09 Jul 2026 02:50:00 +0000
ROA not after:            Thu 08 Jul 2027 02:55:00 +0000
asID:                     274981
IP address blocks:        181.78.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 14 Jul 2026 10:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6c:7d:8d:57:23:cc:2c:fe:45:58:29:4a:fe:4a:9c:cc:da:48:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Jul  9 02:50:00 2026 GMT
            Not After : Jul  8 02:55:00 2027 GMT
        Subject: CN=EBE7763FBF3CEF32EFC07B207EF33C7433294B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:d4:ce:45:27:60:7d:fa:ee:8d:fd:81:2e:
                    04:12:78:6e:c3:a9:de:d1:8d:66:a6:4d:31:c2:8d:
                    bb:d8:d9:b7:1d:8c:71:9f:2a:cb:fa:89:9c:ab:e7:
                    ef:1c:0a:08:07:ab:c1:0c:ab:94:22:70:ed:51:1c:
                    71:f6:95:80:e8:30:20:bd:77:25:b8:fc:89:22:66:
                    78:73:a5:a0:25:bb:9e:fb:89:2b:01:96:38:4f:e3:
                    aa:aa:2a:5b:d8:d2:3a:86:09:52:c8:50:31:14:24:
                    bf:06:0e:9b:a5:b5:fd:3b:9e:38:bb:b0:7d:4d:02:
                    eb:b4:d8:8d:54:a3:1d:06:1b:9f:e7:2d:c2:fc:5b:
                    88:97:dd:40:a3:10:3e:47:c4:48:34:9d:4e:18:56:
                    99:2e:15:c2:16:fa:19:0a:7d:17:be:8e:ce:7f:9a:
                    9a:82:46:cd:95:35:83:50:10:1f:af:53:d1:27:41:
                    5a:51:94:7a:ea:bc:2e:ba:b9:fc:b9:79:03:08:a2:
                    36:43:f8:ed:db:25:0e:be:48:b7:51:1d:ed:13:fb:
                    66:3d:bb:69:44:c4:eb:b5:37:64:d0:da:00:5b:41:
                    f0:7d:3b:53:ed:7c:ad:57:08:3b:02:f4:dc:69:11:
                    dc:bc:c8:c0:25:9c:ef:8c:d9:aa:fd:fe:18:16:2c:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E7:76:3F:BF:3C:EF:32:EF:C0:7B:20:7E:F3:3C:74:33:29:4B:33
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS274981.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:a3:57:ff:2a:46:c7:cf:ad:38:ec:0b:54:aa:8e:25:85:62:
         17:25:e6:f8:af:a4:10:c9:25:0e:6b:25:51:8c:f0:d6:ce:5d:
         d2:e3:c6:14:58:89:fa:49:03:a8:80:6e:e7:bb:3f:51:f3:aa:
         ea:56:0c:c3:08:75:c3:0d:42:d9:ba:1a:6a:8a:1b:e4:f9:e1:
         f2:af:81:fc:17:d5:31:74:c6:4d:c7:d6:36:c5:fe:5d:85:33:
         8f:95:ee:af:4b:95:23:63:4b:0c:59:06:11:7a:31:f9:db:4c:
         98:42:9a:e4:e3:9a:82:da:d5:a5:a5:bc:4a:50:b6:22:ee:f0:
         87:ad:40:d1:9d:18:73:06:67:bf:25:74:8b:70:15:dd:ac:bd:
         92:06:52:5a:00:21:34:81:e5:39:32:e8:71:a6:fd:6e:22:dd:
         e4:af:34:3f:88:d7:5c:d0:73:cc:89:21:80:9b:e6:be:26:04:
         fe:6d:41:c8:7d:53:f5:dc:da:b9:c5:d3:29:8c:0f:33:f5:a1:
         38:29:1b:f0:53:ab:17:ce:34:88:d8:6a:8c:20:dd:52:11:aa:
         3d:c7:6e:c7:ce:52:6c:a1:03:42:d7:8f:d7:50:eb:f8:6d:77:
         2e:78:f1:39:30:1f:fa:11:d3:cb:36:91:c1:20:a1:ff:f2:44:
         03:fa:05:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 09:00:01 2026 by rpki-client