Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e33342e302f32342d3234203d3e20323636373235.roa
File:                     3138312e3131392e33342e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          Wgk8/ntOFJrUvukHRy7LrgCGT/WTcublI2TaS8a1p5U=
Subject key identifier:   85:4E:C9:B3:C8:9B:59:71:53:CB:AA:A5:F3:F2:1E:79:DB:96:17:6F
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       6872BCF34CCC5F12341679DB63871ADCA80D591B
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e33342e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:04:33 +0000
ROA not before:           Tue 05 Mar 2024 17:59:33 +0000
ROA not after:            Tue 04 Mar 2025 18:04:33 +0000
asID:                     266725
IP address blocks:        181.119.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:72:bc:f3:4c:cc:5f:12:34:16:79:db:63:87:1a:dc:a8:0d:59:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:33 2024 GMT
            Not After : Mar  4 18:04:33 2025 GMT
        Subject: CN=854EC9B3C89B597153CBAAA5F3F21E79DB96176F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:dd:10:31:34:46:80:c1:3c:11:7e:38:16:
                    90:bd:af:cc:6a:f4:8d:af:d3:c9:e4:a5:51:83:b6:
                    a6:ca:ab:44:c4:5e:af:ef:63:6f:e4:15:f4:0c:dc:
                    1a:6c:a5:1a:8c:a6:88:0f:7a:1e:c4:d1:14:78:ad:
                    8c:33:9f:8f:29:02:2f:81:fc:a2:91:c5:45:da:38:
                    55:59:2d:54:a0:39:13:03:fa:e1:85:d2:ae:1b:a6:
                    62:a8:95:07:f7:bf:b4:cc:5f:84:93:b0:df:25:c5:
                    8e:7c:da:3d:50:cc:46:50:c7:a3:59:1d:2f:e7:36:
                    63:21:e4:cb:00:b7:47:bc:05:60:87:c4:8c:8e:8c:
                    2c:7a:fc:59:a2:62:46:f7:82:61:9f:e0:58:b6:e3:
                    e3:27:f3:db:a0:71:7b:65:01:49:71:b9:22:e0:c6:
                    41:55:41:49:eb:99:d2:70:b9:ec:a1:8a:06:01:d7:
                    7d:2d:9c:7e:1b:30:76:87:71:83:10:dd:5f:58:76:
                    96:86:27:2d:75:79:2c:a5:85:24:91:8c:61:de:c8:
                    21:e7:c3:2e:d1:20:38:12:b8:3f:69:ba:cd:16:a7:
                    69:aa:a0:23:94:ab:91:99:e8:17:6d:7b:04:94:34:
                    52:02:c8:c1:f8:4e:35:e5:00:a1:d9:94:8a:65:92:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4E:C9:B3:C8:9B:59:71:53:CB:AA:A5:F3:F2:1E:79:DB:96:17:6F
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e33342e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:2a:af:10:fa:24:c2:71:7e:05:ea:d6:5c:46:29:1c:f8:e3:
         65:e4:be:d2:01:84:5f:a3:1d:0e:ed:45:aa:fb:ba:d7:fd:79:
         e9:e5:b9:f6:52:5d:30:88:9a:44:85:9a:b2:f8:35:73:02:20:
         c3:ba:3d:93:3d:fc:02:f6:43:f2:6f:d1:1c:1d:1d:16:f3:a3:
         c7:23:b0:0a:9f:37:fd:a6:10:d7:16:3e:e4:95:95:96:e1:af:
         0e:ff:f5:7a:8e:68:91:84:70:ba:50:69:26:08:73:56:74:57:
         ee:f3:84:64:7a:d4:ca:df:f8:ac:8a:34:f1:f5:ab:d5:3c:7d:
         68:f5:94:aa:52:8b:b5:f5:2b:2d:c3:57:05:ac:5f:4c:3b:66:
         18:2e:8e:1d:5e:51:ba:ad:e9:b4:23:ed:9b:7e:d0:08:80:05:
         2a:30:dd:37:97:fc:a4:34:a2:d4:f1:1e:d7:65:51:cc:3e:a8:
         99:13:78:40:bf:7d:d6:7a:f3:d7:e8:18:d5:24:14:a4:07:b3:
         a9:a4:d9:67:7c:46:a5:93:46:05:7e:d8:e1:53:61:37:e9:b2:
         e7:2a:01:30:67:5d:bf:72:62:31:62:b2:9e:01:01:1b:6a:11:
         27:95:de:89:10:bd:d6:37:78:9e:62:df:14:b7:a2:25:80:37:
         99:9b:65:08
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaHK880zMXxI0FnnbY4ca3KgNWRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNDAzMDUxNzU5MzNaFw0yNTAzMDQxODA0MzNaMDMxMTAvBgNV
BAMTKDg1NEVDOUIzQzg5QjU5NzE1M0NCQUFBNUYzRjIxRTc5REI5NjE3NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkB90QMTRGgME8EX44FpC9r8xq
9I2v08nkpVGDtqbKq0TEXq/vY2/kFfQM3BpspRqMpogPeh7E0RR4rYwzn48pAi+B
/KKRxUXaOFVZLVSgORMD+uGF0q4bpmKolQf3v7TMX4STsN8lxY582j1QzEZQx6NZ
HS/nNmMh5MsAt0e8BWCHxIyOjCx6/FmiYkb3gmGf4Fi24+Mn89ugcXtlAUlxuSLg
xkFVQUnrmdJwueyhigYB130tnH4bMHaHcYMQ3V9YdpaGJy11eSylhSSRjGHeyCHn
wy7RIDgSuD9pus0Wp2mqoCOUq5GZ6BdtewSUNFICyMH4TjXlAKHZlIplklAdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhU7Js8ibWXFTy6ql8/IeeduWF28wHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUFCREY0MDk1RkU4QjIyODgyRDIwQjE2REI3RDJCRkQzODFDMEY5RTYy
QzZFQjY1OTQ0N0Q0NEJFN0UxQ0JDMi8wLzMxMzgzMTJlMzEzMTM5MmUzMzM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczMjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtXci
MA0GCSqGSIb3DQEBCwUAA4IBAQBCKq8Q+iTCcX4F6tZcRikc+ONl5L7SAYRfox0O
7UWq+7rX/Xnp5bn2Ul0wiJpEhZqy+DVzAiDDuj2TPfwC9kPyb9EcHR0W86PHI7AK
nzf9phDXFj7klZWW4a8O//V6jmiRhHC6UGkmCHNWdFfu84RketTK3/isijTx9avV
PH1o9ZSqUou19Sstw1cFrF9MO2YYLo4dXlG6rem0I+2bftAIgAUqMN03l/ykNKLU
8R7XZVHMPqiZE3hAv33WevPX6BjVJBSkB7OppNlnfEalk0YFftjhU2E36bLnKgEw
Z12/cmIxYrKeAQEbahEnld6JEL3WN3ieYt8Ut6IlgDeZm2UI
-----END CERTIFICATE-----
Generated at Tue May 7 21:35:36 2024 by rpki-client on console-ams.rpki-client.org