Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132362e302f32342d3234203d3e203532343638.roa
File:                     3138312e37382e3132362e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          uv3PF6y8m3x+Vt7rL4Fx9fyuW3XGanlBww6NQOBuQMw=
Subject key identifier:   9C:13:54:21:A3:52:DD:27:4A:5C:BC:7F:F5:84:88:A2:12:AB:98:01
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       253016E84437E7DCD82D951D423F5E34E3C58E83
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132362e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:31 +0000
ROA not before:           Tue 05 Mar 2024 17:59:31 +0000
ROA not after:            Tue 04 Mar 2025 18:04:31 +0000
asID:                     52468
IP address blocks:        181.78.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:30:16:e8:44:37:e7:dc:d8:2d:95:1d:42:3f:5e:34:e3:c5:8e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:31 2024 GMT
            Not After : Mar  4 18:04:31 2025 GMT
        Subject: CN=9C135421A352DD274A5CBC7FF58488A212AB9801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:0f:a3:e7:46:4d:64:b4:24:2b:cc:4e:88:
                    cb:8d:bb:c3:54:c9:aa:85:35:b2:44:96:6a:18:e9:
                    75:27:7e:cf:0a:38:0d:17:3a:a2:57:09:78:8a:7d:
                    65:be:7b:4d:8b:b2:27:ad:84:ee:3f:87:ea:90:f4:
                    a9:8e:ab:ec:a5:f9:80:7e:c4:29:46:aa:c9:85:bc:
                    1c:1f:48:58:ae:24:cb:64:66:52:83:0c:51:dd:8e:
                    29:f1:5e:6b:93:d5:ce:12:3e:63:33:7a:4b:b7:13:
                    ee:fe:a3:5c:94:9a:90:ef:82:64:d8:6c:40:06:18:
                    90:1e:e2:9d:8f:d7:41:4b:92:44:e4:eb:cf:96:84:
                    01:3c:80:95:65:70:a7:05:4d:9b:6a:c8:48:f3:db:
                    5b:a1:75:7c:23:54:54:ba:3c:71:1a:2a:a5:e8:28:
                    5a:2f:05:1a:cb:82:b5:2d:18:48:2f:7c:cf:06:8a:
                    cb:14:fb:d2:c9:19:58:1f:a5:77:20:c5:db:81:63:
                    95:ab:6f:5d:d6:db:d8:14:12:a5:f6:a7:48:99:18:
                    21:cd:0b:1e:46:f2:24:30:54:87:60:fc:61:8e:e9:
                    bc:99:c6:82:75:06:bf:2e:73:89:7e:39:a3:fd:e1:
                    5a:1a:ef:1e:5e:9e:87:61:1b:86:c1:74:72:52:0a:
                    70:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:13:54:21:A3:52:DD:27:4A:5C:BC:7F:F5:84:88:A2:12:AB:98:01
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132362e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:e5:b5:ae:2a:65:d3:7d:c4:03:28:33:66:04:66:5c:32:2b:
         72:7f:66:d6:74:71:e8:dd:55:c8:bb:c8:62:8b:88:69:b0:6f:
         76:a6:c7:85:9a:ec:dc:c7:c3:eb:c4:fc:e4:1a:cb:19:5e:b7:
         29:e0:96:f0:4c:94:31:5d:77:35:df:26:88:ed:b9:8e:da:a4:
         69:e2:89:37:52:c2:f9:04:22:c6:b3:40:bf:2a:b3:04:a8:cc:
         32:23:db:4e:67:d1:d7:d2:48:09:16:e2:3f:fb:eb:bc:be:66:
         7c:dd:23:00:c2:b6:25:4f:d7:de:4b:64:e4:13:09:ef:9c:65:
         15:f2:95:d1:eb:16:b2:de:f0:c1:75:54:a2:4c:8e:93:9d:f4:
         98:89:19:2e:cd:59:54:ea:37:fd:63:e7:cc:99:50:92:f1:a4:
         0a:15:62:7a:d2:2d:d9:6e:b9:af:58:96:48:58:4c:f4:8c:5e:
         8d:24:80:df:5d:54:c6:b0:1f:f7:12:a7:7e:c8:cf:10:e2:58:
         b5:26:f0:5e:e6:ff:47:ad:93:e1:70:45:e5:1f:72:17:91:86:
         0e:3c:a5:21:cc:f1:07:eb:7d:20:6d:f6:c6:de:2c:c6:07:4f:
         4c:e8:23:c5:71:66:57:97:c3:21:ba:90:f9:14:39:3d:5c:f2:
         84:61:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:09:59 2024 by rpki-client on console-fra.rpki-client.org