Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e36342e302f32312d3231203d3e203138373437.roa
File:                     3138312e37392e36342e302f32312d3231203d3e203138373437.roa (raw, json)
Hash identifier:          WioRJWqkzNtln18hhCJQgYVK7zQngl0BhksHD/kTvz4=
Subject key identifier:   29:9F:0B:CB:FA:33:9D:A6:D9:5C:72:5F:9B:51:40:17:26:34:7F:33
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       30ED99D55FA8897CF00E263CCF1CF8D8F1D7A1F1
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e36342e302f32312d3231203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 18:04:49 +0000
ROA not before:           Tue 05 Mar 2024 17:59:49 +0000
ROA not after:            Tue 04 Mar 2025 18:04:49 +0000
asID:                     18747
IP address blocks:        181.79.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ed:99:d5:5f:a8:89:7c:f0:0e:26:3c:cf:1c:f8:d8:f1:d7:a1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:49 2024 GMT
            Not After : Mar  4 18:04:49 2025 GMT
        Subject: CN=299F0BCBFA339DA6D95C725F9B51401726347F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:33:b5:2c:71:78:64:07:9b:f4:db:ca:db:05:
                    7a:c1:08:d3:f0:ee:89:74:cf:be:27:02:57:16:9b:
                    ee:4c:2e:1d:8d:30:1d:88:2b:1d:85:79:8e:a5:59:
                    11:14:fa:7c:b7:db:b7:9c:b2:ac:7b:ec:e1:49:58:
                    68:0a:f5:72:85:8c:ef:e3:eb:97:7b:b9:26:29:d0:
                    ac:0c:a5:1b:ce:f4:bc:e7:1a:5c:53:b1:2a:ff:f7:
                    be:29:7b:af:f3:e5:ef:53:2b:4e:8e:d8:ad:40:c9:
                    b2:ed:e4:29:ac:5c:2e:79:21:99:2c:a4:6a:d3:5b:
                    c4:48:e8:03:12:c8:61:90:62:09:da:5a:17:c4:ec:
                    4b:b7:3f:a4:bf:fd:cc:2b:de:4f:92:05:bf:aa:03:
                    28:d0:c9:d3:2c:68:9c:75:1d:8f:d9:f6:01:d0:c5:
                    c8:9d:89:65:4f:17:6f:cb:40:cd:4a:a0:6c:43:3e:
                    70:61:19:f4:a7:66:b0:0b:31:65:68:43:e5:5d:4b:
                    ab:8a:b4:4e:4d:be:df:88:ce:4e:62:dc:42:68:06:
                    64:ae:a0:ad:04:4c:ea:c5:26:3d:ce:dd:09:58:9e:
                    39:d9:45:8a:6a:88:30:8a:39:4e:7f:24:55:19:f5:
                    24:d9:9b:10:44:30:48:3d:5c:4e:34:bb:07:10:0b:
                    27:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9F:0B:CB:FA:33:9D:A6:D9:5C:72:5F:9B:51:40:17:26:34:7F:33
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e36342e302f32312d3231203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:98:ed:ae:b8:d3:c1:9b:01:2d:64:18:2b:37:a6:fb:a8:d3:
         c3:e1:2e:82:54:53:45:bd:db:e4:cf:0c:9f:2c:21:d2:36:53:
         73:dd:f2:9f:3d:fd:df:b5:c8:15:b1:74:c4:1f:17:8b:01:f5:
         0e:ef:bf:85:1e:23:24:41:c8:4f:03:73:0e:95:3a:50:f7:59:
         8f:e1:87:96:0f:6d:e1:f9:af:1b:0e:3c:28:d6:e5:84:1a:aa:
         de:94:93:78:96:32:bf:41:5c:a5:96:98:61:73:65:7e:a1:e5:
         6e:31:80:6d:07:bd:54:ab:01:a9:95:d0:b9:fb:72:1e:3b:e4:
         3d:b1:cb:b3:ad:b9:b4:ac:af:89:fe:8b:24:95:eb:d7:9d:27:
         88:7e:dd:d0:d6:42:c1:cf:73:31:9b:39:47:6e:93:bf:b8:97:
         d3:e9:6d:6c:d0:39:14:3c:72:b5:5d:dc:ff:c3:23:fb:a7:62:
         56:0a:9c:74:18:47:5b:fe:d8:a0:76:c7:3b:c3:a6:90:cb:05:
         92:24:90:c7:ec:28:7e:2e:3f:cb:b6:a5:39:56:3b:32:9f:db:
         8c:bc:32:7e:f2:c6:31:79:c3:18:f1:6f:9d:d0:45:5b:b0:5a:
         da:bb:ac:cd:4a:66:2a:98:2f:fa:14:5c:ec:03:e3:07:a0:4c:
         83:f8:37:7f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUMO2Z1V+oiXzwDiY8zxz42PHXofEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNDAzMDUxNzU5NDlaFw0yNTAzMDQxODA0NDlaMDMxMTAvBgNV
BAMTKDI5OUYwQkNCRkEzMzlEQTZEOTVDNzI1RjlCNTE0MDE3MjYzNDdGMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHM7UscXhkB5v028rbBXrBCNPw
7ol0z74nAlcWm+5MLh2NMB2IKx2FeY6lWREU+ny327ecsqx77OFJWGgK9XKFjO/j
65d7uSYp0KwMpRvO9LznGlxTsSr/974pe6/z5e9TK06O2K1AybLt5CmsXC55IZks
pGrTW8RI6AMSyGGQYgnaWhfE7Eu3P6S//cwr3k+SBb+qAyjQydMsaJx1HY/Z9gHQ
xcidiWVPF2/LQM1KoGxDPnBhGfSnZrALMWVoQ+VdS6uKtE5Nvt+Izk5i3EJoBmSu
oK0ETOrFJj3O3QlYnjnZRYpqiDCKOU5/JFUZ9STZmxBEMEg9XE40uwcQCyf/AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUKZ8Ly/oznabZXHJfm1FAFyY0fzMwHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUFCREY0MDk1RkU4QjIyODgyRDIwQjE2REI3RDJCRkQzODFDMEY5RTYy
QzZFQjY1OTQ0N0Q0NEJFN0UxQ0JDMi8wLzMxMzgzMTJlMzczOTJlMzYzNDJlMzAy
ZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzgzNzM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO1T0AwDQYJ
KoZIhvcNAQELBQADggEBAGyY7a6408GbAS1kGCs3pvuo08PhLoJUU0W92+TPDJ8s
IdI2U3Pd8p89/d+1yBWxdMQfF4sB9Q7vv4UeIyRByE8Dcw6VOlD3WY/hh5YPbeH5
rxsOPCjW5YQaqt6Uk3iWMr9BXKWWmGFzZX6h5W4xgG0HvVSrAamV0Ln7ch475D2x
y7OtubSsr4n+iySV69edJ4h+3dDWQsHPczGbOUduk7+4l9PpbWzQORQ8crVd3P/D
I/unYlYKnHQYR1v+2KB2xzvDppDLBZIkkMfsKH4uP8u2pTlWOzKf24y8Mn7yxjF5
wxjxb53QRVuwWtq7rM1KZiqYL/oUXOwD4wegTIP4N38=
-----END CERTIFICATE-----
Generated at Fri May 3 01:27:20 2024 by rpki-client on console-fra.rpki-client.org