Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3230382e302f32312d3234203d3e203532343638.roa
File:                     3138312e37382e3230382e302f32312d3234203d3e203532343638.roa (raw, json)
Hash identifier:          crm44ub4yLmfoRnh7sV3kF8MJYUysuELTnAx57TxQxs=
Subject key identifier:   A4:82:D1:32:E0:D0:D7:27:63:71:3D:A3:50:28:D7:01:41:06:C6:77
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       169B6D5E4F563A0A965AFDB4FBD7D86AB0853660
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3230382e302f32312d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:27 +0000
ROA not before:           Tue 05 Mar 2024 17:59:27 +0000
ROA not after:            Tue 04 Mar 2025 18:04:27 +0000
asID:                     52468
IP address blocks:        181.78.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9b:6d:5e:4f:56:3a:0a:96:5a:fd:b4:fb:d7:d8:6a:b0:85:36:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:27 2024 GMT
            Not After : Mar  4 18:04:27 2025 GMT
        Subject: CN=A482D132E0D0D72763713DA35028D7014106C677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:21:a3:db:77:fb:1e:8f:94:2c:92:26:b7:
                    e8:01:26:f6:2d:c1:18:c4:30:ae:ce:24:cd:8f:0d:
                    b6:d5:7d:02:47:b3:2f:42:64:f6:6a:a2:75:89:10:
                    a9:b2:d0:80:27:a2:0c:32:30:c8:dd:d0:4c:51:15:
                    44:ca:d9:37:90:7a:7c:f5:a7:a1:e9:2b:d1:55:b6:
                    83:41:40:9c:6b:05:6b:a9:70:b3:30:aa:83:05:ae:
                    31:32:be:8d:76:4a:0c:7c:b5:3d:4b:be:e5:19:f5:
                    5e:84:ad:83:89:39:2e:17:8d:2a:cc:3e:ef:94:a1:
                    a6:00:7b:5d:14:b9:7c:56:da:fa:d7:e7:6f:d9:44:
                    f9:7c:b7:f9:44:44:41:54:0a:c7:cd:2f:76:1c:90:
                    b8:e2:34:d3:e3:78:7b:ca:4a:f5:bb:27:89:24:c7:
                    ff:29:bc:44:6e:8f:7f:51:00:89:7f:5f:19:27:ae:
                    06:f3:b7:cb:a4:88:b0:5d:bd:c9:bf:66:1d:f2:a5:
                    87:76:24:fd:eb:da:a5:22:da:65:84:e3:12:4c:23:
                    09:56:45:3f:dd:c7:5c:7f:2b:78:f3:4d:ee:bf:b8:
                    74:85:40:a3:43:11:bd:8e:05:5c:90:30:2d:b2:e3:
                    09:1b:dd:45:e7:d2:7d:7a:15:c1:30:9f:ee:cc:98:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:82:D1:32:E0:D0:D7:27:63:71:3D:A3:50:28:D7:01:41:06:C6:77
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3230382e302f32312d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:63:01:6b:8c:0a:72:77:4a:a2:a8:30:4a:0e:d3:d1:86:9c:
         56:a5:a9:52:01:2e:e0:94:8d:2a:04:95:5c:4e:86:fd:00:07:
         08:40:23:3f:88:e3:40:b9:2b:58:04:96:0e:b7:e4:0c:c9:bb:
         9f:16:7f:86:88:d5:99:c1:1f:28:39:14:b7:ac:14:aa:41:b6:
         bd:6b:40:bf:05:a4:f6:9d:5a:f5:e3:0e:7c:de:ad:57:10:95:
         2d:e6:c3:a0:8f:5c:f8:22:46:4c:bb:e3:e7:8e:48:a6:f5:29:
         08:49:31:d2:a8:ee:79:7b:88:1c:64:54:b6:57:a3:ac:9b:0a:
         17:8d:58:68:69:84:85:46:1a:3b:7e:a0:c0:e4:a1:65:03:6c:
         1e:7b:47:f8:58:c5:ea:78:4e:04:4f:a2:a9:c2:2f:5c:24:7d:
         08:59:d9:2e:8c:b8:2d:e5:ef:dc:75:20:2d:4b:72:bc:ea:38:
         85:7d:71:c2:23:f9:63:2a:04:8b:de:c3:93:15:b3:43:0b:65:
         78:63:f5:5b:de:c3:c6:0b:a3:6a:9a:8d:ec:49:32:85:56:3e:
         12:89:0e:cb:2d:52:41:ab:a2:31:fd:a9:f9:ef:81:1e:d1:c6:
         22:3e:85:7f:c9:50:80:3d:80:9f:3e:e5:d8:c1:62:53:10:42:
         57:7a:7b:b0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFpttXk9WOgqWWv20+9fYarCFNmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNDAzMDUxNzU5MjdaFw0yNTAzMDQxODA0MjdaMDMxMTAvBgNV
BAMTKEE0ODJEMTMyRTBEMEQ3Mjc2MzcxM0RBMzUwMjhENzAxNDEwNkM2NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiOSGj23f7Ho+ULJImt+gBJvYt
wRjEMK7OJM2PDbbVfQJHsy9CZPZqonWJEKmy0IAnogwyMMjd0ExRFUTK2TeQenz1
p6HpK9FVtoNBQJxrBWupcLMwqoMFrjEyvo12Sgx8tT1LvuUZ9V6ErYOJOS4XjSrM
Pu+UoaYAe10UuXxW2vrX52/ZRPl8t/lEREFUCsfNL3YckLjiNNPjeHvKSvW7J4kk
x/8pvERuj39RAIl/Xxknrgbzt8ukiLBdvcm/Zh3ypYd2JP3r2qUi2mWE4xJMIwlW
RT/dx1x/K3jzTe6/uHSFQKNDEb2OBVyQMC2y4wkb3UXn0n16FcEwn+7MmGH1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUpILRMuDQ1ydjcT2jUCjXAUEGxncwHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUFCREY0MDk1RkU4QjIyODgyRDIwQjE2REI3RDJCRkQzODFDMEY5RTYy
QzZFQjY1OTQ0N0Q0NEJFN0UxQ0JDMi8wLzMxMzgzMTJlMzczODJlMzIzMDM4MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7VO0DAN
BgkqhkiG9w0BAQsFAAOCAQEASWMBa4wKcndKoqgwSg7T0YacVqWpUgEu4JSNKgSV
XE6G/QAHCEAjP4jjQLkrWASWDrfkDMm7nxZ/hojVmcEfKDkUt6wUqkG2vWtAvwWk
9p1a9eMOfN6tVxCVLebDoI9c+CJGTLvj545IpvUpCEkx0qjueXuIHGRUtlejrJsK
F41YaGmEhUYaO36gwOShZQNsHntH+FjF6nhOBE+iqcIvXCR9CFnZLoy4LeXv3HUg
LUtyvOo4hX1xwiP5YyoEi97DkxWzQwtleGP1W97DxgujapqN7EkyhVY+EokOyy1S
QauiMf2p+e+BHtHGIj6Ff8lQgD2Anz7l2MFiUxBCV3p7sA==
-----END CERTIFICATE-----
Generated at Sun May 5 21:18:40 2024 by rpki-client on console-ams.rpki-client.org