Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3131342e302f32332d3234203d3e203532343638.roa
File:                     3138312e3131392e3131342e302f32332d3234203d3e203532343638.roa (raw, json)
Hash identifier:          5pQPj5Jd9XwTLiphYMvRC9EiimeQ059/kdmjC5LVB6Q=
Subject key identifier:   CD:78:75:69:61:24:F5:80:B2:5D:79:8D:2F:35:3D:F0:23:42:89:B4
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       3E172AEB36BD4682BAE2A4DBCB52F3A5159A353C
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3131342e302f32332d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:55 +0000
ROA not before:           Tue 05 Mar 2024 17:59:55 +0000
ROA not after:            Tue 04 Mar 2025 18:04:55 +0000
asID:                     52468
IP address blocks:        181.119.114.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:17:2a:eb:36:bd:46:82:ba:e2:a4:db:cb:52:f3:a5:15:9a:35:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:55 2024 GMT
            Not After : Mar  4 18:04:55 2025 GMT
        Subject: CN=CD7875696124F580B25D798D2F353DF0234289B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:58:91:5f:e3:6f:b6:1b:44:bb:55:89:4e:
                    60:c4:f8:4f:be:6d:4c:0d:83:57:d1:72:c7:3e:7e:
                    54:2d:93:59:cd:84:37:69:90:64:5a:bd:ca:10:71:
                    45:9d:97:be:95:f8:de:3b:c9:84:09:5f:c3:65:a6:
                    f6:dd:14:e3:20:83:81:31:48:57:53:e6:8f:ce:fe:
                    ad:5a:85:e0:73:d7:ea:4b:fc:35:33:c9:b4:2e:d0:
                    03:79:9a:ee:61:1a:fe:da:5a:a8:fb:ed:2d:b9:8b:
                    ef:b6:03:4e:59:64:f3:69:a4:70:ee:96:fb:a1:db:
                    bf:e9:34:35:99:bd:57:0e:de:26:ee:3a:b9:41:ee:
                    5e:1b:14:e1:6d:0c:bf:ee:9f:a7:15:59:fe:76:b1:
                    18:b1:06:e0:01:0f:6b:2a:7d:35:5e:01:dc:49:48:
                    f1:90:57:ff:66:1b:89:6b:ee:9c:47:8f:92:93:6b:
                    db:e8:cb:6c:a1:e7:1a:8b:79:c5:6a:38:b8:1a:5e:
                    d0:52:b5:7b:2b:7b:5a:de:b9:0d:30:35:1a:cf:9d:
                    54:7a:59:0d:32:34:55:0f:a3:14:00:52:51:ab:f2:
                    cc:db:54:f3:2e:03:c5:43:2e:3a:f5:fc:67:fd:42:
                    b5:0d:cc:35:9a:8c:83:28:d4:8f:b3:8f:b6:10:d3:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:78:75:69:61:24:F5:80:B2:5D:79:8D:2F:35:3D:F0:23:42:89:B4
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3131342e302f32332d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:1a:86:79:f0:d4:1e:3c:e9:83:fa:71:0a:9e:64:29:b2:3e:
         68:9f:7d:28:3d:0d:84:26:ca:bb:67:cf:ee:d0:d8:e1:16:5b:
         40:3b:3a:03:be:6e:6c:ef:8b:ff:71:97:42:8e:0f:3e:93:e7:
         09:0e:ce:43:0b:88:a7:4a:f2:38:2b:31:9a:a8:00:5b:b5:4c:
         a8:ee:5b:f0:98:04:10:5c:31:0e:d0:b5:14:99:8a:fb:23:fb:
         21:79:49:cc:20:32:d5:2a:d5:78:75:16:ed:d4:b9:24:ad:40:
         5a:ca:06:4b:23:13:90:f2:a2:1b:da:9b:8c:31:21:f0:ee:b8:
         31:8a:5a:c7:2b:5d:c1:8e:1b:56:bb:3b:9f:70:f9:61:2c:f3:
         c8:e6:58:cb:ae:56:2b:0d:b8:8c:b8:6b:b9:45:aa:a5:a4:a6:
         8e:74:36:bc:a8:d3:43:6e:7e:85:79:6a:93:03:76:71:06:f8:
         2a:c5:a1:b7:49:96:9f:a0:2c:1c:03:7b:42:33:9e:74:28:63:
         12:f5:7b:11:7d:d3:4c:8d:18:57:cb:75:6c:e7:db:1b:b7:c5:
         bf:96:f2:5c:f4:e9:15:5b:76:ca:ae:f2:66:fe:8a:94:dd:00:
         61:d3:5c:86:bd:90:94:93:c5:0a:97:58:f1:40:9d:b5:f9:57:
         fa:e9:2b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:09:58 2024 by rpki-client on console-fra.rpki-client.org