Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e38342e302f32322d3234203d3e203532343638.roa
File:                     3138312e3131392e38342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          OslzFyKYySUqc1gAiEKFCrAT/tFM4v3zCSbHkuYnuek=
Subject key identifier:   51:F8:06:15:15:84:07:9F:53:FE:12:97:30:10:BD:43:1D:4B:1B:41
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       02E2EFD24CC53EDC331EC92B148E3765D00A44E2
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e38342e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:37 +0000
ROA not before:           Tue 05 Mar 2024 17:59:37 +0000
ROA not after:            Tue 04 Mar 2025 18:04:37 +0000
asID:                     52468
IP address blocks:        181.119.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e2:ef:d2:4c:c5:3e:dc:33:1e:c9:2b:14:8e:37:65:d0:0a:44:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:37 2024 GMT
            Not After : Mar  4 18:04:37 2025 GMT
        Subject: CN=51F806151584079F53FE12973010BD431D4B1B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:6d:98:46:95:43:8f:f7:c2:73:5d:5c:d6:
                    23:20:28:a9:4e:06:57:4d:1f:56:0c:4f:6e:50:7a:
                    c9:de:21:28:fe:13:70:03:5b:c4:49:dc:62:82:0c:
                    0c:f4:3a:a9:e9:ba:67:aa:52:e4:c3:60:ad:13:1b:
                    a8:13:0a:e8:80:e9:20:8a:df:39:2a:eb:e0:65:23:
                    12:1f:20:a2:dc:1c:06:c5:f1:db:6b:46:29:74:4f:
                    40:2c:2b:17:75:b6:42:37:eb:b7:a1:fd:4d:98:aa:
                    5a:b7:4b:a0:c5:ee:f7:07:ca:a9:03:9a:a6:b2:85:
                    70:4b:79:aa:60:28:a2:1c:99:45:ac:9e:68:7c:92:
                    0d:c2:c3:18:ab:2c:c2:bd:f2:96:30:60:66:fd:16:
                    c4:fa:d6:b3:29:19:f4:18:2d:aa:ff:7f:95:d0:79:
                    45:a9:31:7c:79:1e:81:6a:61:2b:a6:00:89:1e:58:
                    c6:d4:c1:09:9e:81:e2:47:9f:3a:ce:d0:45:96:2f:
                    d5:63:b6:78:84:b0:8f:d9:a0:35:1a:84:72:af:a4:
                    bf:77:04:0e:cf:19:d1:8b:62:5b:d6:98:64:ed:ff:
                    6b:12:68:15:33:23:f5:16:dd:29:8d:5b:6b:23:fb:
                    1e:1e:db:f5:43:ba:3e:76:e6:00:0a:90:ce:7f:c4:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F8:06:15:15:84:07:9F:53:FE:12:97:30:10:BD:43:1D:4B:1B:41
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e38342e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:e4:ac:d2:88:87:de:69:6f:2c:1a:22:c4:96:e4:c4:56:7e:
         21:c0:90:87:47:f1:ae:20:1e:a0:a4:34:f1:40:96:6c:c3:b0:
         1a:1d:e2:ec:82:82:bb:35:2d:ab:17:01:66:9a:81:1e:3d:ac:
         8e:26:28:6a:f6:99:42:0a:87:20:af:84:fb:7f:ac:4c:e7:d7:
         83:91:a8:2f:32:8c:24:cf:8a:be:c4:36:4f:b6:92:36:38:6f:
         30:c3:9e:fb:5c:25:40:89:b6:7c:cf:70:36:d2:d5:46:67:01:
         3a:ef:b1:de:58:26:b2:e3:eb:43:c4:9c:fb:39:12:cd:bc:8d:
         32:88:97:2f:30:b0:f9:2a:87:2b:5f:89:ec:93:5f:a5:a5:22:
         84:6c:96:87:1a:39:df:dc:dd:64:4d:73:d6:ef:a0:48:7f:f3:
         c6:b6:05:1a:ae:2e:5d:56:b8:bd:80:64:ed:ee:be:7d:4e:79:
         59:ce:a4:0b:b7:03:d2:4e:5a:9e:cb:3d:3e:e7:1a:a0:7b:6d:
         39:aa:ef:6f:8b:26:0e:52:4b:d9:2a:c9:19:82:5f:43:b9:7d:
         73:b1:0f:12:5d:43:48:c6:85:28:4d:ea:a8:33:c8:6d:94:6f:
         52:90:91:45:75:40:75:4b:0d:21:ec:7d:36:96:02:85:09:2c:
         6e:da:91:4c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAuLv0kzFPtwzHskrFI43ZdAKROIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNDAzMDUxNzU5MzdaFw0yNTAzMDQxODA0MzdaMDMxMTAvBgNV
BAMTKDUxRjgwNjE1MTU4NDA3OUY1M0ZFMTI5NzMwMTBCRDQzMUQ0QjFCNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OW2YRpVDj/fCc11c1iMgKKlO
BldNH1YMT25QesneISj+E3ADW8RJ3GKCDAz0OqnpumeqUuTDYK0TG6gTCuiA6SCK
3zkq6+BlIxIfIKLcHAbF8dtrRil0T0AsKxd1tkI367eh/U2Yqlq3S6DF7vcHyqkD
mqayhXBLeapgKKIcmUWsnmh8kg3CwxirLMK98pYwYGb9FsT61rMpGfQYLar/f5XQ
eUWpMXx5HoFqYSumAIkeWMbUwQmegeJHnzrO0EWWL9VjtniEsI/ZoDUahHKvpL93
BA7PGdGLYlvWmGTt/2sSaBUzI/UW3SmNW2sj+x4e2/VDuj525gAKkM5/xFptAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUUfgGFRWEB59T/hKXMBC9Qx1LG0EwHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUFCREY0MDk1RkU4QjIyODgyRDIwQjE2REI3RDJCRkQzODFDMEY5RTYy
QzZFQjY1OTQ0N0Q0NEJFN0UxQ0JDMi8wLzMxMzgzMTJlMzEzMTM5MmUzODM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArV3VDAN
BgkqhkiG9w0BAQsFAAOCAQEAM+Ss0oiH3mlvLBoixJbkxFZ+IcCQh0fxriAeoKQ0
8UCWbMOwGh3i7IKCuzUtqxcBZpqBHj2sjiYoavaZQgqHIK+E+3+sTOfXg5GoLzKM
JM+KvsQ2T7aSNjhvMMOe+1wlQIm2fM9wNtLVRmcBOu+x3lgmsuPrQ8Sc+zkSzbyN
MoiXLzCw+SqHK1+J7JNfpaUihGyWhxo539zdZE1z1u+gSH/zxrYFGq4uXVa4vYBk
7e6+fU55Wc6kC7cD0k5anss9PucaoHttOarvb4smDlJL2SrJGYJfQ7l9c7EPEl1D
SMaFKE3qqDPIbZRvUpCRRXVAdUsNIex9NpYChQksbtqRTA==
-----END CERTIFICATE-----
Generated at Sun May 5 21:18:40 2024 by rpki-client on console-ams.rpki-client.org