Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3231372e302f32342d3234203d3e203532343638.roa
File:                     3138312e37392e3231372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          ZQUCGhpJQXdCk8ZJEn4P0jEJErY4CEUwIryA4wnqd/k=
Subject key identifier:   0B:3E:84:B0:36:E5:91:6C:DF:54:13:16:D9:F4:89:9B:57:C5:CA:96
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       21577EB8AFF2DF06A07EEF82ED97F3B4316358F1
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3231372e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:39 +0000
ROA not before:           Tue 05 Mar 2024 17:59:39 +0000
ROA not after:            Tue 04 Mar 2025 18:04:39 +0000
asID:                     52468
IP address blocks:        181.79.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:57:7e:b8:af:f2:df:06:a0:7e:ef:82:ed:97:f3:b4:31:63:58:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:39 2024 GMT
            Not After : Mar  4 18:04:39 2025 GMT
        Subject: CN=0B3E84B036E5916CDF541316D9F4899B57C5CA96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c8:a5:29:53:97:cc:82:21:15:ba:48:c6:77:
                    ac:94:cd:9b:29:bf:f0:b5:0d:03:2f:f0:16:9d:de:
                    bc:da:98:1d:12:be:52:d2:85:a1:2b:21:40:7a:17:
                    55:6e:1f:a9:e2:12:28:f4:37:6f:38:a3:b0:cc:e2:
                    67:57:b5:bf:85:51:b0:1b:53:a5:af:9f:8b:72:7f:
                    bb:e9:d2:ba:11:2e:18:cd:ea:b0:e8:ec:00:dd:45:
                    21:9b:e6:71:2a:b9:de:8a:34:b5:61:a7:a7:cf:e3:
                    47:9a:34:e3:45:0e:91:2d:c5:03:5e:40:ce:67:f9:
                    c8:09:06:03:de:fa:8f:0d:31:84:8f:ac:34:d4:bd:
                    50:9e:a9:a5:ea:79:54:cc:97:b0:1f:44:2c:62:35:
                    69:46:b5:f4:33:31:22:67:1e:14:43:20:3b:7e:cd:
                    0d:2a:7e:52:17:c5:4e:e0:69:21:77:8b:13:02:a7:
                    6b:d2:7a:0f:7e:0c:97:c5:ee:85:aa:05:50:67:89:
                    ec:d7:6d:7a:e5:e7:56:ba:7a:d2:1c:05:8c:97:0e:
                    b2:b2:ad:c3:4e:92:32:a0:a9:c6:f5:ef:34:8b:48:
                    33:a2:b1:c7:a0:ff:53:0c:79:d2:a7:75:e9:5c:de:
                    ab:56:5b:ee:43:ac:43:a5:a2:b8:39:9d:96:b0:16:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3E:84:B0:36:E5:91:6C:DF:54:13:16:D9:F4:89:9B:57:C5:CA:96
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3231372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:6c:20:cc:bb:0b:17:67:e3:86:ef:1f:50:11:c4:a2:16:21:
         02:eb:84:c1:a0:68:af:16:23:b6:6a:79:ff:99:3e:a1:13:a0:
         a8:1b:28:3a:47:d5:0a:d5:9b:ad:27:f4:56:08:31:fd:b9:35:
         c1:bd:6b:69:35:49:7b:5c:b1:99:66:d2:e2:45:ca:07:af:0a:
         02:6e:02:a7:5c:87:35:26:02:e8:e2:d2:39:8c:64:02:7b:8b:
         81:cf:d6:67:eb:78:df:66:ee:97:b5:21:25:71:4b:e5:68:1d:
         71:3a:0e:bd:ac:9e:57:df:46:6a:7f:b9:27:30:ba:5e:20:ca:
         8e:83:9e:ed:42:9c:c7:b0:0c:93:16:5e:e7:24:b0:1a:f7:02:
         70:c5:24:fe:70:3c:b7:9c:fa:25:b2:1a:cd:95:1a:b3:bb:33:
         ad:62:fc:3d:e5:51:f3:ae:cb:35:ff:1f:6f:0b:18:66:01:39:
         b9:14:d5:d2:90:ba:4b:96:f2:7b:e4:33:73:f0:ca:fd:11:ac:
         be:a4:5a:62:70:46:98:0a:17:78:78:00:44:24:68:7b:40:7f:
         c7:4b:c8:f4:a9:c6:ca:8a:1e:9d:21:78:4a:38:85:5b:f0:89:
         15:39:57:06:a5:33:a7:78:39:30:51:40:7c:6c:81:3c:6d:5b:
         28:df:1d:f6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUIVd+uK/y3wagfu+C7ZfztDFjWPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNDAzMDUxNzU5MzlaFw0yNTAzMDQxODA0MzlaMDMxMTAvBgNV
BAMTKDBCM0U4NEIwMzZFNTkxNkNERjU0MTMxNkQ5RjQ4OTlCNTdDNUNBOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWyKUpU5fMgiEVukjGd6yUzZsp
v/C1DQMv8Bad3rzamB0SvlLShaErIUB6F1VuH6niEij0N284o7DM4mdXtb+FUbAb
U6Wvn4tyf7vp0roRLhjN6rDo7ADdRSGb5nEqud6KNLVhp6fP40eaNONFDpEtxQNe
QM5n+cgJBgPe+o8NMYSPrDTUvVCeqaXqeVTMl7AfRCxiNWlGtfQzMSJnHhRDIDt+
zQ0qflIXxU7gaSF3ixMCp2vSeg9+DJfF7oWqBVBniezXbXrl51a6etIcBYyXDrKy
rcNOkjKgqcb17zSLSDOisceg/1MMedKndelc3qtWW+5DrEOlorg5nZawFudxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUCz6EsDblkWzfVBMW2fSJm1fFypYwHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUFCREY0MDk1RkU4QjIyODgyRDIwQjE2REI3RDJCRkQzODFDMEY5RTYy
QzZFQjY1OTQ0N0Q0NEJFN0UxQ0JDMi8wLzMxMzgzMTJlMzczOTJlMzIzMTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALVP2TAN
BgkqhkiG9w0BAQsFAAOCAQEAFmwgzLsLF2fjhu8fUBHEohYhAuuEwaBorxYjtmp5
/5k+oROgqBsoOkfVCtWbrSf0Vggx/bk1wb1raTVJe1yxmWbS4kXKB68KAm4Cp1yH
NSYC6OLSOYxkAnuLgc/WZ+t432bul7UhJXFL5WgdcToOvayeV99Gan+5JzC6XiDK
joOe7UKcx7AMkxZe5ySwGvcCcMUk/nA8t5z6JbIazZUas7szrWL8PeVR867LNf8f
bwsYZgE5uRTV0pC6S5bye+Qzc/DK/RGsvqRaYnBGmAoXeHgARCRoe0B/x0vI9KnG
yooenSF4SjiFW/CJFTlXBqUzp3g5MFFAfGyBPG1bKN8d9g==
-----END CERTIFICATE-----
Generated at Sun May 5 21:18:40 2024 by rpki-client on console-ams.rpki-client.org