Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e32392e302f32342d3234203d3e20323636373235.roa
File:                     3138312e3131392e32392e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          kYPqYqQWBrxasJE52QG0g6DaK7b7F1dH+MaXasySTNg=
Subject key identifier:   CF:6D:1A:0C:67:30:6C:EA:7B:AD:84:7C:E1:66:81:BB:E2:19:80:3D
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       223CD3394B9B081196719E792FDF4E35D68E6084
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e32392e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:04:29 +0000
ROA not before:           Tue 05 Mar 2024 17:59:29 +0000
ROA not after:            Tue 04 Mar 2025 18:04:29 +0000
asID:                     266725
IP address blocks:        181.119.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3c:d3:39:4b:9b:08:11:96:71:9e:79:2f:df:4e:35:d6:8e:60:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:29 2024 GMT
            Not After : Mar  4 18:04:29 2025 GMT
        Subject: CN=CF6D1A0C67306CEA7BAD847CE16681BBE219803D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:78:30:21:ca:d6:cf:f7:0f:7c:e3:ad:f0:
                    31:28:73:63:f2:6b:13:59:08:a7:b7:6f:65:ef:49:
                    c3:11:d2:9c:43:51:80:9c:11:3f:ee:db:47:9f:c8:
                    61:91:12:be:b3:65:ce:27:54:58:3d:64:b4:cd:a7:
                    5a:eb:04:aa:a3:03:be:52:a6:df:b1:ef:48:8d:a3:
                    e0:23:77:aa:0d:e4:8d:0c:3e:89:01:4d:0d:03:b4:
                    d4:59:f0:d4:d7:ce:e5:da:f3:35:c9:0f:b3:f6:c6:
                    c7:45:e4:e3:45:7d:0e:2d:e9:f3:5e:d4:36:7e:fb:
                    1b:91:ce:e2:f2:ad:f3:8c:03:e3:ad:b6:d4:73:9a:
                    d7:5c:ea:fd:e6:0e:de:5e:62:2e:74:ea:35:f6:28:
                    61:a3:c2:5d:a3:1d:7b:5d:59:a7:ce:b5:0b:68:32:
                    f0:68:f2:ed:d2:55:ea:82:eb:ca:b5:f1:04:90:d7:
                    2c:94:96:be:a1:64:9f:7b:65:8b:72:30:57:11:ca:
                    ec:3c:00:f7:be:58:af:d8:b6:c7:c1:81:14:cb:d1:
                    71:77:97:18:8e:17:9c:8c:5d:83:b8:85:37:fe:b6:
                    aa:58:f1:53:0f:41:a1:e3:4d:9b:36:bf:a7:3e:53:
                    53:5d:5a:67:a6:d0:cd:ec:cf:a4:45:2e:56:50:c8:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6D:1A:0C:67:30:6C:EA:7B:AD:84:7C:E1:66:81:BB:E2:19:80:3D
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e32392e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:75:2b:3c:aa:f5:82:70:ae:89:e7:3a:ac:95:1a:3c:23:64:
         61:17:8b:11:dc:b8:23:a4:f2:63:6e:67:3d:6e:80:db:b9:8a:
         6b:6e:4c:6a:d7:0a:2e:dd:d6:aa:65:0a:3b:50:8c:d2:37:f3:
         14:7b:ab:4b:2f:1d:da:66:3d:06:0a:68:86:f5:a1:18:9f:c2:
         0d:5c:4b:ea:6b:ae:ab:81:6d:af:3d:ae:79:5f:f5:10:7c:20:
         18:16:90:0c:16:4f:e0:6e:79:d4:5d:57:e7:b2:16:93:15:16:
         60:a6:23:ba:fe:63:03:72:5d:71:8f:ee:af:34:ab:41:ad:35:
         46:21:1e:cb:a5:97:8b:fc:d4:a2:54:be:14:63:e6:c9:43:33:
         df:86:8c:97:01:5a:aa:de:fb:3c:56:cc:fe:72:db:24:ca:00:
         5d:92:f7:24:c9:48:ca:e3:85:46:ce:42:05:78:26:89:56:e7:
         e3:99:96:95:d9:65:ed:d2:98:9e:d6:54:b6:73:93:53:33:66:
         72:a0:09:ca:41:19:4b:00:6d:39:7b:f9:f8:c0:72:5a:a8:72:
         79:e3:85:c9:61:25:07:db:a6:9d:1e:78:aa:a0:5f:8d:25:68:
         c4:0e:61:cd:80:06:85:ec:31:c7:62:07:e9:a7:76:96:49:a3:
         db:b7:1e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:46:22 2024 by rpki-client on console-fra.rpki-client.org