Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3234302e302f32312d3234203d3e203237393332.roa
File:                     3138312e37392e3234302e302f32312d3234203d3e203237393332.roa (raw, json)
Hash identifier:          jLfKhC6Pnegpy8A6jU620T219Nw18MVDKzyh8YB6stY=
Subject key identifier:   9F:A1:CC:AC:64:C9:CF:19:83:72:6F:A8:7C:BB:04:EE:90:8A:D7:3A
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       51B03D6AE65B1B74CD13ED63730B9F57CA2D504D
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3234302e302f32312d3234203d3e203237393332.roa
Signing time:             Tue 05 Mar 2024 18:04:43 +0000
ROA not before:           Tue 05 Mar 2024 17:59:43 +0000
ROA not after:            Tue 04 Mar 2025 18:04:43 +0000
asID:                     27932
IP address blocks:        181.79.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 02:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b0:3d:6a:e6:5b:1b:74:cd:13:ed:63:73:0b:9f:57:ca:2d:50:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:43 2024 GMT
            Not After : Mar  4 18:04:43 2025 GMT
        Subject: CN=9FA1CCAC64C9CF1983726FA87CBB04EE908AD73A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:7e:3e:c4:b6:6c:45:fd:fb:73:cd:89:bf:
                    70:30:14:a2:27:91:e3:17:10:6a:be:ae:0c:56:aa:
                    3f:46:fd:ff:4f:a4:33:b2:62:df:2e:55:57:3e:7b:
                    18:e1:2a:47:eb:77:76:8a:44:7a:e2:b6:cb:e7:43:
                    d9:fb:c9:c3:4b:60:5f:b9:7a:9f:fa:d8:fb:c4:d0:
                    99:7f:cd:d7:9d:7f:95:f9:6a:2a:75:6b:8f:3e:db:
                    8c:28:a4:c2:01:95:3a:b3:82:57:be:6b:92:eb:bd:
                    c8:ad:7a:1d:5d:4b:c3:46:cc:14:e6:5b:7b:1f:31:
                    dc:46:f7:a1:0b:16:79:93:e5:38:51:76:90:8b:2d:
                    6e:61:03:0f:fc:34:c6:6d:a3:39:13:4a:10:98:04:
                    ba:fa:8f:f2:ce:72:35:16:68:06:ec:f6:06:c2:57:
                    0e:70:a7:2b:58:cb:8e:36:e4:13:f4:96:2c:8e:f8:
                    f3:ac:6d:54:f0:76:bd:e8:48:9f:6b:9b:38:0f:c0:
                    41:85:27:7e:07:bf:14:62:27:60:50:cd:22:1f:8d:
                    fb:9e:4c:d1:3f:f0:b1:21:99:0a:2a:52:99:5c:54:
                    14:36:2c:d3:6b:65:5b:09:f5:47:1d:e5:48:c1:8f:
                    99:36:09:bf:38:34:b5:52:f7:6e:b1:2c:e2:a0:69:
                    4a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A1:CC:AC:64:C9:CF:19:83:72:6F:A8:7C:BB:04:EE:90:8A:D7:3A
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3234302e302f32312d3234203d3e203237393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:cd:94:f4:24:db:a5:cf:92:05:7a:7d:06:6e:69:f5:9a:19:
         99:c0:eb:7f:cd:72:33:8f:f7:c9:77:58:93:18:4d:ee:74:06:
         8c:b3:41:16:d3:d9:cf:d2:a6:65:69:c3:a8:ba:64:ac:b2:61:
         a2:17:ee:da:06:88:a3:b8:50:8e:95:1a:52:fa:e6:89:04:4c:
         ca:ae:ee:38:c2:d8:b5:e5:2f:d6:0d:2d:7d:e6:be:67:5e:ad:
         69:f9:a6:55:2c:29:a8:95:e4:4d:b9:2c:8d:6c:0c:b5:4e:18:
         0e:30:c3:27:e6:61:93:86:24:4f:34:f4:f8:45:42:89:ec:e6:
         2c:c2:81:24:b2:db:a6:8c:ca:ca:ee:a8:38:29:7c:98:f2:c9:
         01:05:c1:ea:e2:de:1a:1a:62:0d:92:c2:53:2a:11:f2:9d:e2:
         e1:c6:ab:a9:ef:38:1c:65:64:da:72:09:93:a1:8f:bf:56:c0:
         cb:4b:8c:30:36:75:6f:b8:6a:e7:27:2c:f8:96:b0:7f:34:f0:
         0f:7c:19:59:5b:a9:8f:ba:37:23:9a:90:3a:51:bb:8a:27:32:
         27:03:31:55:43:ef:1b:c5:91:29:c9:ee:a7:5c:c8:22:1d:93:
         4f:3e:5a:99:69:e3:da:83:c1:d3:27:15:1c:de:78:e3:55:9b:
         ef:86:fe:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:48:17 2024 by rpki-client on console-ams.rpki-client.org