Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3132362e302f32342d3234203d3e203532343638.roa
File:                     3138312e3131392e3132362e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          sfSgh2GKxtRk/zD0ObI/jifhYPtx/2Nm46DjW9deB64=
Subject key identifier:   E0:9A:FA:3D:71:2F:5E:87:CB:06:B3:BC:46:3C:A1:88:F5:2B:F7:57
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       32F06E1E1697F0C84E78A118E474579A5C07068A
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3132362e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:36 +0000
ROA not before:           Tue 05 Mar 2024 17:59:36 +0000
ROA not after:            Tue 04 Mar 2025 18:04:36 +0000
asID:                     52468
IP address blocks:        181.119.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f0:6e:1e:16:97:f0:c8:4e:78:a1:18:e4:74:57:9a:5c:07:06:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:36 2024 GMT
            Not After : Mar  4 18:04:36 2025 GMT
        Subject: CN=E09AFA3D712F5E87CB06B3BC463CA188F52BF757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:c0:a0:4a:b3:d4:c4:c8:90:78:b1:ef:bb:
                    40:29:96:4d:18:0c:4e:31:e6:16:3e:9c:55:b8:22:
                    75:88:95:8c:7c:6a:e7:79:60:0e:b7:ed:8a:0a:8d:
                    c7:f9:08:3e:bf:54:d6:8f:96:f6:ac:ae:e1:c4:13:
                    21:f8:c8:c7:13:b8:21:1d:0c:c7:c5:35:95:7e:a5:
                    c0:5c:2c:04:88:f6:08:10:30:a3:74:b1:6d:4e:48:
                    3a:05:73:18:c3:eb:ac:7a:48:d5:a0:58:74:0a:4f:
                    4e:e3:75:a3:36:9a:4f:e8:b3:b6:08:a0:da:93:27:
                    b2:d3:ed:1a:db:e0:ae:6d:47:12:74:44:60:54:47:
                    7e:57:1b:51:e4:d6:e1:3a:06:4d:f3:ab:52:c1:40:
                    15:b8:50:e8:21:fa:de:aa:cd:06:d5:32:5d:e6:f4:
                    23:60:d4:e5:b6:39:e2:3e:04:08:8d:f8:a0:bb:52:
                    14:31:47:79:ca:0d:b5:ec:2d:d4:10:3d:5e:d2:52:
                    6b:36:a6:7f:27:a4:c0:bf:58:00:cc:3c:ed:31:f1:
                    bb:fc:a7:e4:e9:a3:5b:43:a5:16:9a:f6:66:5e:58:
                    34:9a:58:bc:57:07:b4:b5:d6:f8:8d:10:7b:35:a4:
                    81:2e:80:81:1a:21:2c:f6:8d:17:ae:56:5e:f6:1c:
                    52:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9A:FA:3D:71:2F:5E:87:CB:06:B3:BC:46:3C:A1:88:F5:2B:F7:57
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3132362e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:9b:92:21:38:af:ab:81:11:d0:e9:f7:4b:41:04:c0:49:b3:
         ca:4f:36:f0:af:96:e6:44:ba:21:bd:f5:38:23:97:68:f8:be:
         9d:a8:9d:cc:4c:22:f3:5b:ee:b2:3a:11:a4:89:43:20:9a:db:
         9a:ab:95:11:4c:16:0f:63:37:12:b6:3b:19:45:d8:4b:dc:3b:
         09:ad:38:10:b0:ed:e7:d3:74:dc:3e:f6:63:e2:4b:65:3d:56:
         05:8b:84:33:c2:31:3d:63:67:3d:49:73:ea:30:b1:b7:5e:15:
         15:de:86:0b:49:0f:d2:5a:1a:c0:0f:21:f6:6c:1d:61:28:30:
         49:06:5f:d5:73:03:a9:89:3b:9a:96:77:76:90:db:0d:57:5c:
         4c:ed:9d:97:22:bb:c1:9a:d7:f7:9c:fa:c2:33:2a:92:eb:34:
         da:76:0e:b5:a9:9d:72:70:31:6e:b0:4e:b6:79:a6:21:c2:86:
         a2:77:f9:86:c4:60:65:34:cd:19:78:80:bf:66:dd:38:34:2c:
         36:54:31:4a:f5:f5:e4:66:fa:86:2e:db:ee:57:e9:2f:a2:ab:
         05:b3:c5:33:ed:ca:57:35:3a:f6:3e:24:d2:41:da:ca:a1:b7:
         41:60:d6:94:68:a5:2b:a7:63:94:c9:88:ce:08:e0:e9:8a:05:
         21:f6:9f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:09:58 2024 by rpki-client on console-fra.rpki-client.org