Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232312e302f32342d3234203d3e20323635363230.roa
File:                     3138312e37382e3232312e302f32342d3234203d3e20323635363230.roa (raw, json)
Hash identifier:          14e/u1lIkgr8pIw/tfIUzDPNsS/ZMCLecyXYutO9kMo=
Subject key identifier:   24:81:69:63:7D:AE:E3:33:71:89:5E:65:5A:3D:BC:C3:CE:E1:A5:4B
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       0F9E4C83347CE689995E933D096B2F30788AC401
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232312e302f32342d3234203d3e20323635363230.roa
Signing time:             Tue 05 Mar 2024 18:04:57 +0000
ROA not before:           Tue 05 Mar 2024 17:59:57 +0000
ROA not after:            Tue 04 Mar 2025 18:04:57 +0000
asID:                     265620
IP address blocks:        181.78.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 May 2024 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9e:4c:83:34:7c:e6:89:99:5e:93:3d:09:6b:2f:30:78:8a:c4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:57 2024 GMT
            Not After : Mar  4 18:04:57 2025 GMT
        Subject: CN=248169637DAEE33371895E655A3DBCC3CEE1A54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2e:5b:ef:a9:19:ee:ed:d6:43:5d:72:76:14:
                    fc:74:e9:12:fc:72:a5:32:76:34:b8:76:cb:63:f6:
                    c7:a0:38:ab:89:5c:1d:22:2d:c0:63:77:34:cb:3d:
                    e7:26:cb:ed:7b:aa:db:5f:16:89:81:e5:a2:1a:86:
                    78:ea:5e:0b:6f:fe:94:d3:df:81:ce:20:b4:83:3c:
                    f2:15:06:a0:c7:24:ec:6f:79:46:d4:c0:f5:41:88:
                    b9:43:0f:5a:70:0b:49:2d:e8:ec:54:4d:56:ab:04:
                    35:d3:96:60:a7:dd:6f:b9:6d:e4:93:8e:4b:5e:76:
                    dd:1f:64:fe:c8:dc:2c:1c:d7:23:ff:c5:e9:45:fe:
                    f6:9b:13:ce:ec:3d:b1:d5:61:6a:de:1b:b1:0a:4a:
                    a7:05:3e:70:83:86:78:2d:9f:cd:0b:b4:84:c3:9e:
                    33:f4:21:f3:ac:92:20:71:56:c2:92:4c:09:60:05:
                    88:28:f0:f9:d5:05:66:d0:a9:46:b8:7b:09:8b:be:
                    70:8a:a1:4c:43:d9:ef:a4:b8:4e:da:bf:38:f3:6e:
                    ae:65:3b:14:24:fa:2e:9f:90:5f:06:f4:00:2a:91:
                    30:15:84:9b:ca:c2:91:8b:fd:18:c3:18:b0:ea:ce:
                    25:9a:b5:f3:bf:7f:01:ee:46:0e:07:33:60:2e:4b:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:81:69:63:7D:AE:E3:33:71:89:5E:65:5A:3D:BC:C3:CE:E1:A5:4B
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232312e302f32342d3234203d3e20323635363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:c8:93:ce:92:57:09:c8:cf:57:b8:af:aa:22:45:32:f6:0d:
         ae:62:ab:48:fa:84:7e:ba:ec:41:3e:7b:a6:c0:89:1a:ec:aa:
         90:49:39:dc:0a:51:e6:60:70:bb:f5:7b:0e:7d:c6:2a:72:ba:
         6e:c2:f6:af:4a:3e:7c:cd:1f:f8:87:e2:8e:59:2f:f8:5d:e1:
         6c:72:51:3b:96:b7:d8:26:59:74:52:ff:21:ba:22:40:aa:1c:
         6c:2f:7c:06:e8:b1:57:ff:23:ef:6e:8c:c2:61:1e:5c:a6:e8:
         63:b9:6f:88:4e:64:c2:8c:78:92:35:ee:7f:14:e5:19:6f:9c:
         65:d2:79:7d:03:b7:54:1f:25:e8:1f:eb:1f:f9:fe:be:a8:1b:
         f1:57:43:de:5b:b3:40:60:e5:27:9f:b5:72:da:6a:05:8c:34:
         5c:ed:78:4f:3c:db:0c:94:db:a3:ab:9d:3e:6a:e3:ed:35:0e:
         42:97:48:5a:e6:5f:32:20:83:5e:a7:7d:0a:29:61:c7:d6:84:
         72:cc:27:55:44:dd:99:3b:99:2c:6c:06:e8:23:35:a9:de:c5:
         48:98:01:7c:78:56:5f:18:a4:50:91:3a:0c:c2:bb:af:6e:fe:
         3e:c6:7f:00:6c:90:fc:8c:b4:49:c6:2d:96:1f:98:67:bb:e0:
         0f:ee:50:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 10:20:28 2024 by rpki-client on console-ams.rpki-client.org