Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3131332e302f32342d3234203d3e203532343638.roa
File:                     3138312e3131392e3131332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          E8WiEtoJ0Vrq0sXKx+gydNbj8ZhDgzj/b1uTUf8pidQ=
Subject key identifier:   98:00:78:10:0C:CC:13:DF:B1:21:4F:83:77:F8:8D:B1:27:92:E2:1C
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       22B9C1041E506A4712739071AE440A3EA6D8EF36
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3131332e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:36 +0000
ROA not before:           Tue 05 Mar 2024 17:59:36 +0000
ROA not after:            Tue 04 Mar 2025 18:04:36 +0000
asID:                     52468
IP address blocks:        181.119.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b9:c1:04:1e:50:6a:47:12:73:90:71:ae:44:0a:3e:a6:d8:ef:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:36 2024 GMT
            Not After : Mar  4 18:04:36 2025 GMT
        Subject: CN=980078100CCC13DFB1214F8377F88DB12792E21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:a5:01:77:ee:9e:23:78:b0:36:b4:9b:e3:
                    ad:b8:bd:13:03:d0:00:38:df:22:93:f3:2c:b1:ba:
                    49:63:c1:69:8f:ca:cd:ab:24:2d:02:7e:9c:b2:ae:
                    b7:09:15:46:c0:fb:f6:9e:15:f8:b8:05:24:48:cc:
                    88:5c:01:d7:a6:f5:9b:ab:c5:1c:2a:64:da:db:ec:
                    3d:b2:63:95:7d:43:6a:3a:7c:28:1d:15:b5:a7:be:
                    d4:c5:7b:ee:82:2b:3a:c1:39:bc:0a:fe:5f:77:cc:
                    b1:25:ac:e8:1a:a7:a3:e4:25:64:21:c0:60:59:dd:
                    a5:f9:b8:c1:57:bb:70:9a:db:92:1b:e7:57:a8:5a:
                    6d:a9:9f:bb:f6:f1:b2:a1:9e:97:cc:7b:ce:dc:e4:
                    e0:76:81:04:ed:63:3f:da:3c:21:e3:c9:61:d8:ef:
                    8a:22:06:05:f5:1f:67:11:65:54:48:42:d3:70:1b:
                    1c:9f:29:18:dc:11:b8:43:11:5d:1e:de:d5:c9:d9:
                    c6:91:bb:b6:de:95:8d:3f:2b:1b:af:8b:ff:7e:f6:
                    ef:18:97:24:f5:e8:dd:51:e1:d6:45:ab:74:95:76:
                    33:86:5c:c9:25:22:94:cb:81:ad:04:cb:a1:a1:ef:
                    2f:0c:42:44:db:05:b8:c8:10:cd:67:82:a9:c5:83:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:00:78:10:0C:CC:13:DF:B1:21:4F:83:77:F8:8D:B1:27:92:E2:1C
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3131332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f3:79:02:73:09:46:9f:01:30:67:72:d5:65:06:fb:cb:d7:
         00:55:19:d0:25:65:6c:96:58:26:44:0d:81:f9:18:af:bb:19:
         35:43:a2:8d:e6:0f:62:22:0e:d0:df:73:1e:b0:24:ba:e6:67:
         d3:fe:61:b2:51:bd:9f:13:ef:5b:54:c2:0f:fc:ea:37:34:6e:
         4e:12:74:b9:4f:a1:3b:49:06:e5:26:2c:08:be:b3:30:7a:06:
         eb:9f:38:23:ae:0a:23:85:35:72:63:3a:07:21:a6:ed:75:97:
         5d:82:4c:f3:dd:54:db:d5:c2:e0:5d:1b:ac:b9:c1:d5:e9:e4:
         76:5b:e6:fd:fc:26:80:82:40:b4:08:1d:80:39:7a:14:db:c3:
         7a:92:21:ce:f2:d5:77:82:ab:70:c1:e7:bf:60:c9:69:ca:cd:
         75:34:36:47:60:39:70:8f:b1:9a:2e:40:bf:3a:7e:f6:c3:23:
         9c:5c:a9:ce:06:47:32:10:46:5f:0c:e5:90:fc:73:67:40:95:
         96:bd:d6:94:af:a3:ac:0f:bd:c9:68:c4:e2:2a:03:2e:b2:53:
         42:a2:7c:6d:24:a2:ba:84:ba:c6:bf:4f:e6:60:73:08:ca:19:
         7d:2e:06:40:96:23:ea:55:af:50:95:0d:ef:5e:bc:09:90:52:
         e2:75:36:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:09:58 2024 by rpki-client on console-fra.rpki-client.org