Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/80750625410a0989385d7fe68bd852441f28b295.roa
File:                     80750625410a0989385d7fe68bd852441f28b295.roa (raw, json)
Hash identifier:          VDCmsow2KaD0G/m6AzJfQwECV/Ioho4hN9sR2WeUQhc=
Subject key identifier:   0B:9E:D0:57:8A:C8:88:BF:B3:01:72:A5:13:41:D0:E4:62:22:34:AA
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       1C7E39
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/80750625410a0989385d7fe68bd852441f28b295.roa
Signing time:             Wed 04 Jan 2023 19:58:43 +0000
ROA not before:           Tue 23 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52468
IP address blocks:        181.119.87.0/24 maxlen: 24
                          181.78.0.0/19 maxlen: 24
                          181.119.64.0/24 maxlen: 24
                          181.119.66.0/24 maxlen: 24
                          181.119.67.0/24 maxlen: 24
                          181.119.68.0/24 maxlen: 24
                          181.119.69.0/24 maxlen: 24
                          181.119.70.0/24 maxlen: 24
                          181.119.82.0/24 maxlen: 24
                          181.119.83.0/24 maxlen: 24
                          181.119.84.0/24 maxlen: 24
                          181.119.85.0/24 maxlen: 24
                          181.119.86.0/24 maxlen: 24
                          181.119.88.0/24 maxlen: 24
                          181.119.89.0/24 maxlen: 24
                          181.119.90.0/24 maxlen: 24
                          181.119.91.0/24 maxlen: 24
                          181.119.92.0/24 maxlen: 24
                          181.119.93.0/24 maxlen: 24
                          181.119.94.0/24 maxlen: 24
                          181.119.95.0/24 maxlen: 24
                          181.119.96.0/24 maxlen: 24
                          181.119.97.0/24 maxlen: 24
                          181.119.98.0/24 maxlen: 24
                          181.119.99.0/24 maxlen: 24
                          181.119.100.0/24 maxlen: 24
                          181.119.101.0/24 maxlen: 24
                          181.119.102.0/24 maxlen: 24
                          181.119.103.0/24 maxlen: 24
                          181.119.104.0/24 maxlen: 24
                          181.119.105.0/24 maxlen: 24
                          181.119.106.0/24 maxlen: 24
                          181.119.107.0/24 maxlen: 24
                          181.119.108.0/24 maxlen: 24
                          181.119.109.0/24 maxlen: 24
                          181.119.110.0/24 maxlen: 24
                          181.119.111.0/24 maxlen: 24
                          181.119.113.0/24 maxlen: 24
                          181.119.114.0/24 maxlen: 24
                          181.119.115.0/24 maxlen: 24
                          181.119.122.0/24 maxlen: 24
                          181.119.124.0/24 maxlen: 24
                          181.119.125.0/24 maxlen: 24
                          181.119.126.0/24 maxlen: 24
                          181.78.120.0/24 maxlen: 24
                          181.78.121.0/24 maxlen: 24
                          181.78.122.0/24 maxlen: 24
                          181.78.123.0/24 maxlen: 24
                          181.78.124.0/24 maxlen: 24
                          181.78.125.0/24 maxlen: 24
                          181.78.126.0/24 maxlen: 24
                          181.78.127.0/24 maxlen: 24
                          181.78.64.0/20 maxlen: 20
                          181.78.64.0/24 maxlen: 24
                          181.78.65.0/24 maxlen: 24
                          181.78.66.0/24 maxlen: 24
                          181.78.67.0/24 maxlen: 24
                          181.78.68.0/24 maxlen: 24
                          181.78.69.0/24 maxlen: 24
                          181.78.70.0/24 maxlen: 24
                          181.78.71.0/24 maxlen: 24
                          181.78.72.0/24 maxlen: 24
                          181.78.73.0/24 maxlen: 24
                          181.78.74.0/24 maxlen: 24
                          181.78.75.0/24 maxlen: 24
                          181.78.76.0/24 maxlen: 24
                          181.78.77.0/24 maxlen: 24
                          181.78.78.0/24 maxlen: 24
                          181.78.79.0/24 maxlen: 24
                          181.78.80.0/21 maxlen: 21
                          181.78.80.0/24 maxlen: 24
                          181.78.81.0/24 maxlen: 24
                          181.78.82.0/24 maxlen: 24
                          181.78.83.0/24 maxlen: 24
                          181.78.84.0/24 maxlen: 24
                          181.78.85.0/24 maxlen: 24
                          181.78.86.0/24 maxlen: 24
                          181.78.87.0/24 maxlen: 24
                          181.78.88.0/22 maxlen: 22
                          181.78.88.0/24 maxlen: 24
                          181.78.89.0/24 maxlen: 24
                          181.78.90.0/24 maxlen: 24
                          181.78.91.0/24 maxlen: 24
                          181.78.92.0/23 maxlen: 23
                          181.78.92.0/24 maxlen: 24
                          181.78.93.0/24 maxlen: 24
                          181.78.94.0/23 maxlen: 23
                          181.78.94.0/24 maxlen: 24
                          181.78.95.0/24 maxlen: 24
                          181.78.98.0/23 maxlen: 23
                          181.78.98.0/24 maxlen: 24
                          181.78.99.0/24 maxlen: 24
                          181.78.100.0/23 maxlen: 23
                          181.78.100.0/24 maxlen: 24
                          181.78.101.0/24 maxlen: 24
                          181.78.102.0/23 maxlen: 23
                          181.78.102.0/24 maxlen: 24
                          181.78.103.0/24 maxlen: 24
                          181.78.104.0/21 maxlen: 21
                          181.78.104.0/24 maxlen: 24
                          181.78.105.0/24 maxlen: 24
                          181.78.106.0/24 maxlen: 24
                          181.78.107.0/24 maxlen: 24
                          181.78.108.0/24 maxlen: 24
                          181.78.109.0/24 maxlen: 24
                          181.78.110.0/24 maxlen: 24
                          181.78.111.0/24 maxlen: 24
                          181.78.112.0/21 maxlen: 21
                          181.78.112.0/24 maxlen: 24
                          181.78.113.0/24 maxlen: 24
                          181.78.114.0/24 maxlen: 24
                          181.78.115.0/24 maxlen: 24
                          181.78.116.0/24 maxlen: 24
                          181.78.117.0/24 maxlen: 24
                          181.78.118.0/24 maxlen: 24
                          181.78.119.0/24 maxlen: 24
                          181.79.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Mar 2023 02:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867321 (0x1c7e39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Mar 23 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=80750625410a0989385d7fe68bd852441f28b295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a1:b7:2d:1e:fd:78:86:21:54:bf:ad:2c:bb:
                    c6:d1:66:f4:c7:91:2f:ff:60:f2:b5:3c:dc:0b:de:
                    16:25:22:94:bd:d7:0d:8e:a7:ef:d2:97:b1:b5:e6:
                    50:99:47:c2:b1:41:7b:ab:67:e0:7c:49:cf:b9:3e:
                    1a:14:29:3a:f7:6e:4a:3d:f1:91:d7:21:b9:2d:4b:
                    34:3d:43:87:6d:9f:b0:3d:46:35:76:97:db:61:91:
                    58:66:20:86:04:32:80:c1:d5:ca:53:f6:64:e6:17:
                    09:7a:4b:6e:1a:0a:06:df:62:09:d5:f2:d6:e6:73:
                    b4:bb:ae:14:51:62:25:11:ad:90:eb:00:fd:17:c7:
                    51:6f:21:0f:7b:d9:24:5e:27:1a:3e:68:c5:93:d1:
                    95:75:15:c0:b7:3b:4a:2a:cc:e0:db:b8:78:dd:e8:
                    9c:90:98:93:d0:85:1d:cd:3a:e3:91:4c:d2:4c:63:
                    a4:6e:a4:d7:27:31:78:cd:d9:a3:76:b9:0e:da:21:
                    48:60:66:51:9e:b8:71:c0:1d:00:3a:ad:5c:df:dc:
                    b6:32:01:24:b3:82:d5:55:3a:4e:f6:15:e7:7a:80:
                    de:36:47:a4:67:37:27:1e:05:3c:5b:3a:2f:21:9c:
                    62:89:cf:26:6d:9d:d9:2d:b7:4f:b5:be:c1:e0:6a:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0B:9E:D0:57:8A:C8:88:BF:B3:01:72:A5:13:41:D0:E4:62:22:34:AA
            X509v3 Authority Key Identifier: 
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/80750625410a0989385d7fe68bd852441f28b295.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.0.0/19
                  181.78.64.0/19
                  181.78.98.0-181.78.127.255
                  181.79.220.0/24
                  181.119.64.0/24
                  181.119.66.0-181.119.70.255
                  181.119.82.0-181.119.111.255
                  181.119.113.0-181.119.115.255
                  181.119.122.0/24
                  181.119.124.0-181.119.126.255

    Signature Algorithm: sha256WithRSAEncryption
         79:1d:d8:24:b9:1a:0a:65:f3:45:e5:37:56:63:37:12:39:e4:
         2b:d2:f4:68:fa:25:b7:96:17:52:dc:d6:d8:55:5e:54:96:23:
         35:86:4c:db:f8:74:53:d7:5f:bd:fb:70:93:c4:c8:26:a5:0e:
         f4:d3:79:db:8c:db:a8:3e:73:fd:0d:df:cd:d1:8b:6d:48:96:
         b5:ad:be:0d:d8:f4:0e:fe:0a:9e:d0:7b:dc:99:16:40:75:f7:
         88:18:85:24:d3:b4:72:d3:62:b6:72:27:ef:17:c1:ba:86:43:
         dd:c9:ab:a6:53:70:a1:87:ca:9b:4b:1e:32:3f:ff:ea:09:21:
         97:80:a7:e1:c0:01:4b:e6:06:e5:a5:9a:28:a5:d2:83:1b:de:
         f9:83:22:d0:da:0a:45:0e:b8:94:de:e6:4b:53:d9:24:59:bd:
         6a:12:cf:18:04:ba:bc:81:d9:6c:7c:3b:c5:8a:a5:9c:d9:25:
         51:60:8a:71:94:e0:13:96:0c:29:b6:24:95:0d:d8:11:bd:83:
         97:d1:7f:c3:52:b6:0e:40:04:ce:a2:7c:3a:e7:9a:9c:49:67:
         ef:3e:f5:3e:d3:16:de:6e:fd:9a:a6:68:f0:4f:fc:2e:8f:fa:
         52:52:3f:ab:3f:33:7a:c8:47:e2:16:c4:41:97:84:62:53:d2:
         04:aa:b5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:33:27 2023 by rpki-client on console-ams.rpki-client.org