Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3132322e302f32342d3234203d3e203532343638.roa
File:                     3138312e3131392e3132322e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          R5r6/vmDeTjtTJrrP+anuZUohdpKc4ARhsclYZcdQC8=
Subject key identifier:   58:DE:CE:61:53:BE:72:B6:15:01:20:50:57:57:A9:62:41:7F:43:FC
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       7CC5B88D192C90799607FC7EF96F75AAD9560EE7
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3132322e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:45 +0000
ROA not before:           Tue 05 Mar 2024 17:59:45 +0000
ROA not after:            Tue 04 Mar 2025 18:04:45 +0000
asID:                     52468
IP address blocks:        181.119.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c5:b8:8d:19:2c:90:79:96:07:fc:7e:f9:6f:75:aa:d9:56:0e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:45 2024 GMT
            Not After : Mar  4 18:04:45 2025 GMT
        Subject: CN=58DECE6153BE72B6150120505757A962417F43FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bc:81:15:23:9a:18:21:86:b9:23:b9:44:c6:
                    20:24:39:6d:b9:3e:08:ad:b1:c1:b8:8c:5a:47:b2:
                    11:a4:d5:cc:a1:66:61:0e:36:02:15:2f:fe:07:ad:
                    f2:cc:9e:8b:b3:49:6b:58:38:e1:d0:06:91:a4:36:
                    b9:17:76:39:4d:45:bf:4f:d9:a7:5d:79:d5:b1:7e:
                    7b:ab:2b:47:15:c2:5d:b7:a9:c3:e2:e7:9d:eb:00:
                    5b:53:dd:e8:1c:5c:35:57:4e:2c:0d:d0:f3:dc:a7:
                    b9:84:fb:fa:15:2f:e6:e0:16:84:83:97:77:77:9f:
                    5a:f4:4c:9e:12:5c:30:70:02:b8:46:38:2f:c1:e2:
                    cd:e7:ba:55:a9:6b:a3:91:43:6d:25:6d:22:cf:50:
                    39:ba:01:77:8b:78:54:da:9d:76:9d:d0:74:78:79:
                    d0:c8:e2:69:1a:2e:9d:74:ad:27:c2:37:0f:1f:75:
                    b1:c1:ab:90:07:c3:25:0e:b4:d1:31:dc:66:cc:ce:
                    2e:87:09:c2:63:bb:d7:cd:7e:32:a1:38:4d:34:aa:
                    4d:d0:2a:b5:55:5c:95:76:27:87:3b:08:f4:71:24:
                    67:b8:e6:5e:bd:71:30:b4:98:67:5a:89:d5:7b:6f:
                    57:2e:2e:bc:1f:97:e8:8b:6d:b9:75:a3:b1:ae:d2:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DE:CE:61:53:BE:72:B6:15:01:20:50:57:57:A9:62:41:7F:43:FC
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3132322e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:a5:79:84:a2:48:4c:15:c1:5c:a3:40:39:09:7d:95:61:
         cb:ec:cf:cd:87:40:7a:98:7d:4a:09:4e:d6:35:51:e0:b8:5b:
         98:b9:1f:43:a5:fe:34:cb:2f:df:3a:ba:67:63:45:32:c1:4c:
         f7:d0:80:ff:02:f2:a1:d7:dd:44:78:83:a9:1e:28:49:dc:74:
         c8:1d:39:d4:f5:30:c0:1a:bd:d7:97:f1:a6:50:46:c1:27:3a:
         7c:76:61:ea:4a:a3:76:6a:3c:cf:5e:f0:f5:7a:88:bb:5c:43:
         05:c5:58:22:ad:62:2b:08:8d:92:70:2c:04:ec:f2:d2:8a:14:
         bd:2b:b5:54:4d:d2:a1:cd:73:41:2e:b2:50:e4:e6:e6:a4:c9:
         e1:90:db:15:3b:80:52:7e:47:83:67:40:01:a4:da:ec:3e:a2:
         de:de:8d:3f:1a:8f:ac:6d:4e:02:50:5d:63:4a:64:cc:87:51:
         ba:e1:c0:d6:38:a6:56:ce:8a:f0:68:b9:f3:e0:af:93:f3:e2:
         cc:fd:2c:51:28:c2:23:3e:56:8e:bb:87:15:5c:d2:e8:d3:c7:
         48:df:b6:99:16:3b:be:18:a5:43:cf:c9:96:1d:c7:67:4c:d5:
         4b:aa:d5:02:92:72:65:88:50:02:32:f2:de:2f:21:b9:34:58:
         e6:c2:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:09:58 2024 by rpki-client on console-fra.rpki-client.org