Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3130342e302f32312d3234203d3e203532343638.roa
File:                     3138312e37382e3130342e302f32312d3234203d3e203532343638.roa (raw, json)
Hash identifier:          RxX9vvMqd/63kNPwdRde8MhtU9Pjq1NEpCzHqo5kFQs=
Subject key identifier:   4A:C1:84:29:9D:12:14:44:8A:C1:15:49:0B:24:68:70:36:24:6C:38
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       55CE6E33DAF4A7A848F02702CFB9188F478C03F6
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3130342e302f32312d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:44 +0000
ROA not before:           Tue 05 Mar 2024 17:59:44 +0000
ROA not after:            Tue 04 Mar 2025 18:04:44 +0000
asID:                     52468
IP address blocks:        181.78.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ce:6e:33:da:f4:a7:a8:48:f0:27:02:cf:b9:18:8f:47:8c:03:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:44 2024 GMT
            Not After : Mar  4 18:04:44 2025 GMT
        Subject: CN=4AC184299D1214448AC115490B24687036246C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:8e:64:4d:f8:bd:bf:57:f6:07:2c:3d:eb:
                    ec:75:20:31:ba:76:21:f2:04:f6:c2:ba:f9:49:1f:
                    6c:47:46:36:72:cd:ad:d6:7a:ef:98:d7:da:9e:19:
                    30:48:42:60:b2:89:8c:69:09:14:09:50:e4:f4:39:
                    e0:21:b1:22:d5:e7:87:50:16:a2:ae:05:82:63:7a:
                    a0:cf:5f:d3:cd:62:ee:23:62:30:94:78:b5:cb:9c:
                    32:d5:11:72:d9:92:bf:1f:b3:0c:b1:87:2f:6b:32:
                    f6:db:cb:1f:7a:7a:dc:26:0c:b0:a4:e4:aa:fb:0c:
                    3d:2c:7a:9d:16:5d:c4:88:2e:3a:65:df:01:2d:ee:
                    d6:a4:53:3b:8e:42:d3:21:6b:c6:c3:22:9b:22:dd:
                    16:e2:26:57:d7:ac:b1:a3:b6:8d:fb:65:ee:a6:1c:
                    a7:a3:11:be:01:41:6b:79:6f:df:79:14:93:f8:29:
                    ea:95:cb:6a:e2:9b:35:b0:fa:af:2a:78:a0:3a:6e:
                    36:3a:c9:25:d7:27:e9:c4:55:c2:4d:c2:7d:ea:7b:
                    f1:a0:7e:63:2d:c6:41:30:d4:fb:5f:1e:fe:11:37:
                    f5:27:9c:6d:d5:ad:72:69:cd:0c:14:f8:9f:2d:53:
                    bb:c6:68:03:32:cf:8c:90:78:33:b1:da:07:fb:df:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C1:84:29:9D:12:14:44:8A:C1:15:49:0B:24:68:70:36:24:6C:38
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3130342e302f32312d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:b6:d7:46:ee:86:3f:fd:52:3c:88:66:18:33:22:fb:06:2b:
         06:38:a0:a8:e2:ba:e8:98:88:88:fe:a4:c6:b9:7e:08:56:3a:
         88:24:7c:7c:69:c4:86:c1:92:92:f8:95:68:dc:72:c4:16:b0:
         fa:8d:38:c1:d3:d0:33:fa:5a:26:42:0c:2c:56:92:9c:04:46:
         18:1d:a8:c4:a0:3a:e8:5e:4d:f3:ae:fd:4a:d6:02:cb:3a:05:
         5e:50:29:92:c0:ee:16:ef:a2:4e:1e:59:10:f2:42:14:bf:eb:
         de:cb:47:98:dd:83:14:62:c8:73:42:05:5c:3c:1e:5c:65:28:
         71:a0:18:3a:53:27:d9:a4:5a:80:1f:f2:f9:fd:92:67:57:79:
         d7:38:01:5d:a1:d1:47:46:18:e1:15:6f:ee:de:68:24:9c:2c:
         17:14:43:85:96:2d:0a:df:23:43:ae:ff:3c:fb:ed:1b:d5:e8:
         69:d3:f1:e3:e7:28:3b:ba:af:5f:1a:e5:c9:65:c3:89:ff:b4:
         60:7c:c7:cc:ff:d5:27:e8:d3:13:28:28:4c:c9:1c:44:8c:3b:
         d3:0d:45:11:9f:0d:d1:d7:00:47:4c:65:cb:59:7d:7b:fe:5d:
         f4:4e:bf:9d:30:dc:51:23:10:11:8f:42:c9:5e:1c:5e:ae:d4:
         98:dc:b9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:18:40 2024 by rpki-client on console-ams.rpki-client.org