Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37332e302f32342d3234203d3e20323636373235.roa
File:                     3138312e3131392e37332e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          FZXFhcu3boEI3KCSCu9OR6JUZSohWW5jPyIw4F71Dos=
Subject key identifier:   A7:F3:9F:3F:CF:5C:58:B3:BA:E2:5D:E5:C2:BB:B8:3D:3C:69:C2:1F
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       658E4581CE2543139410EE9D5C90C3ECA9A6FD7B
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37332e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:04:35 +0000
ROA not before:           Tue 05 Mar 2024 17:59:35 +0000
ROA not after:            Tue 04 Mar 2025 18:04:35 +0000
asID:                     266725
IP address blocks:        181.119.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8e:45:81:ce:25:43:13:94:10:ee:9d:5c:90:c3:ec:a9:a6:fd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:35 2024 GMT
            Not After : Mar  4 18:04:35 2025 GMT
        Subject: CN=A7F39F3FCF5C58B3BAE25DE5C2BBB83D3C69C21F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:c5:8d:c1:4e:04:28:a9:ce:b0:2b:c2:d8:
                    ed:db:8b:98:da:77:fb:a7:68:5b:39:be:8c:c6:88:
                    4e:8b:4f:6b:76:2b:cc:e2:37:f9:66:67:9f:bf:96:
                    77:b6:d3:4e:47:c6:f8:4f:45:b1:b9:52:b8:3b:62:
                    d6:95:86:ae:8d:ff:fe:0b:e5:43:f5:dc:9d:5e:69:
                    ae:6c:5e:86:82:b9:b8:67:91:9b:d6:d7:33:90:f7:
                    36:f6:4c:0d:d5:58:4b:43:86:01:af:16:85:55:c8:
                    4c:5d:b2:af:76:d2:6c:39:cf:a6:1a:dc:b5:91:2f:
                    5d:b3:4a:ec:35:ad:5e:bf:cd:85:38:af:ab:8d:8b:
                    5a:10:7c:ab:65:d5:c4:35:8c:ec:cd:45:b4:67:0b:
                    35:38:bb:01:80:ad:ed:47:ce:d3:64:37:eb:b1:32:
                    e9:6d:c6:ba:8f:78:74:de:41:b2:99:95:97:4c:5f:
                    32:a6:51:aa:80:d6:86:6f:e2:7b:9c:da:a2:f4:61:
                    d9:7e:95:87:3b:5d:16:88:2a:0a:0c:27:b2:c7:e3:
                    35:9f:6b:72:f0:e1:b5:dc:55:3e:b5:4d:7d:1e:ff:
                    c0:dc:21:22:30:29:92:55:d8:80:64:21:ee:e4:5a:
                    b4:b9:e5:ff:0d:1c:20:3e:95:61:58:d4:2c:af:aa:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F3:9F:3F:CF:5C:58:B3:BA:E2:5D:E5:C2:BB:B8:3D:3C:69:C2:1F
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37332e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:79:b3:26:b1:46:94:a7:bd:49:35:cf:a0:56:74:21:fa:0b:
         ab:83:1b:a3:89:47:fa:69:ed:93:d4:b8:41:0e:e2:75:5e:f7:
         36:86:fa:38:03:bd:88:fc:ad:c2:1f:b4:94:d0:b7:84:2a:fe:
         17:a6:05:74:49:c9:c4:e0:db:7c:69:67:a2:7e:98:95:04:91:
         04:59:11:93:e4:4b:e6:37:37:8a:6e:c6:c7:ad:92:0e:bc:6c:
         7d:9a:bc:70:58:33:fe:68:00:49:1f:bd:26:77:0c:7d:21:17:
         87:13:20:da:2f:ee:9d:b0:9b:99:72:f9:7c:14:9a:e8:92:58:
         af:ef:db:92:67:63:ef:fa:13:8b:f9:53:b3:c4:e8:37:7d:32:
         a8:d1:e7:5c:c1:0c:9d:73:df:7e:54:9b:d2:02:dc:3a:99:c2:
         30:ef:e1:27:88:b0:93:b9:ef:11:a1:05:bd:7e:4e:b6:67:a6:
         ba:e4:6f:03:40:4b:e8:e3:d6:26:a8:29:60:82:cd:48:f1:77:
         e7:67:f9:0c:c2:61:a5:ee:47:a2:96:2c:b7:56:a5:cb:36:20:
         01:05:84:56:d5:8c:65:61:93:ee:71:5f:2f:30:9e:00:8e:48:
         e1:52:1c:8b:cc:4a:46:77:19:52:d2:a4:e5:62:24:9f:6a:1d:
         92:fe:6e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:35:36 2024 by rpki-client on console-ams.rpki-client.org