Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3234382e302f32322d3234203d3e203237393332.roa
File:                     3138312e37392e3234382e302f32322d3234203d3e203237393332.roa (raw, json)
Hash identifier:          7N+qdsxNnhZOGQPZtpXwjbQ+NUyEjcBe50D7/xulpvU=
Subject key identifier:   BB:72:CC:B5:6F:4A:37:78:F3:3B:7A:CD:46:C6:91:0C:06:08:10:95
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       5D2E730D2F8E50B390C4A3682FC80DF48814DDEE
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3234382e302f32322d3234203d3e203237393332.roa
Signing time:             Tue 05 Mar 2024 18:04:43 +0000
ROA not before:           Tue 05 Mar 2024 17:59:43 +0000
ROA not after:            Tue 04 Mar 2025 18:04:43 +0000
asID:                     27932
IP address blocks:        181.79.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 00:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2e:73:0d:2f:8e:50:b3:90:c4:a3:68:2f:c8:0d:f4:88:14:dd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:43 2024 GMT
            Not After : Mar  4 18:04:43 2025 GMT
        Subject: CN=BB72CCB56F4A3778F33B7ACD46C6910C06081095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:07:b3:1a:8f:50:95:2c:95:b3:40:1b:44:
                    88:e3:d1:49:1c:01:0b:f5:35:24:6b:03:a4:5a:01:
                    6c:38:eb:a6:2a:0a:af:f9:f1:34:7e:07:e5:79:e1:
                    78:cb:ca:c7:4f:48:99:d5:ba:56:3a:83:11:6d:d1:
                    c9:6f:67:21:e9:5d:d9:62:21:ef:de:d8:c3:7b:88:
                    7c:9e:76:3a:5d:9b:e8:a5:2b:4e:60:8c:d1:d8:b4:
                    0b:44:34:cd:ce:fe:42:ff:c2:44:41:fa:93:62:16:
                    24:17:91:d4:dc:8f:73:7f:35:8a:70:46:26:5d:9e:
                    18:d9:6c:89:b1:0d:55:4e:1d:4f:e6:98:2c:34:28:
                    b4:db:f8:5e:82:52:23:a3:af:8e:95:7d:dd:54:6f:
                    b7:3f:6f:dd:fa:a0:01:21:ce:b7:6d:86:2f:7a:7e:
                    ef:79:70:df:26:67:4c:b7:f4:7f:83:ca:92:07:77:
                    6c:84:eb:84:b8:1e:5d:2f:54:78:b4:aa:91:90:4e:
                    57:2e:7c:fe:98:6a:9d:11:10:54:3d:d9:e4:8d:fc:
                    03:35:c9:87:26:15:ab:72:24:22:30:ac:07:3f:d0:
                    61:58:5f:2c:c8:bd:d1:12:29:ba:94:26:02:1a:86:
                    43:9f:f0:b0:d5:54:36:ec:2a:ea:72:4c:c1:21:ba:
                    eb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:72:CC:B5:6F:4A:37:78:F3:3B:7A:CD:46:C6:91:0C:06:08:10:95
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3234382e302f32322d3234203d3e203237393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:73:13:2a:04:aa:31:34:93:d0:4f:e2:c8:a0:50:aa:95:61:
         a3:cf:af:21:cc:d7:f0:6c:62:09:58:e6:99:40:79:b1:ce:88:
         e2:06:28:22:f3:4b:5f:c8:8d:b4:71:b4:76:9a:78:4e:e3:cc:
         73:43:65:d0:dc:9f:dc:b4:ab:11:bb:a1:38:e8:cf:78:97:86:
         9e:7c:d1:a0:2f:38:13:f2:4b:72:16:a2:b3:44:f1:6a:b1:3d:
         f4:b3:bf:27:1a:29:b1:c7:d0:a9:99:71:85:2a:4d:3d:da:12:
         ad:cc:f2:22:f8:ef:3d:69:d5:91:f9:04:0c:49:ea:47:9e:70:
         23:bd:ed:30:c5:f2:4b:ea:ba:94:0c:b9:ce:3d:39:33:87:32:
         4e:4a:ff:bd:2f:72:8d:f4:da:45:87:80:e5:a0:a9:d1:ac:7c:
         0f:cf:66:e0:25:e7:52:49:7a:bb:26:1a:47:17:50:b1:95:14:
         62:60:44:ab:a2:d9:28:c2:c5:cf:9e:e5:81:7d:ad:47:55:08:
         be:1c:90:d5:e4:70:f8:08:9f:16:e1:e7:7f:de:a0:97:63:82:
         55:77:65:8f:35:22:3e:93:45:87:40:f6:6f:dc:ab:bf:dc:8e:
         d3:30:5b:9b:55:d9:5d:e1:33:7c:4e:a2:df:0c:97:3a:29:83:
         5d:88:e9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:56:57 2024 by rpki-client on console-fra.rpki-client.org