Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e37322e302f32332d3233203d3e203138373437.roa
File:                     3138312e37392e37322e302f32332d3233203d3e203138373437.roa (raw, json)
Hash identifier:          zn2Phg78W6QdJlhsai3/ZNNQ694v++mc+WFFQnhdWKg=
Subject key identifier:   33:B3:81:31:60:F2:5A:9A:8F:ED:AF:37:F2:64:EA:B7:61:BC:0D:69
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       20326EBBCC86BE41D74362727970FD5BF92E3EB8
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e37322e302f32332d3233203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 18:04:51 +0000
ROA not before:           Tue 05 Mar 2024 17:59:51 +0000
ROA not after:            Tue 04 Mar 2025 18:04:51 +0000
asID:                     18747
IP address blocks:        181.79.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:32:6e:bb:cc:86:be:41:d7:43:62:72:79:70:fd:5b:f9:2e:3e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:51 2024 GMT
            Not After : Mar  4 18:04:51 2025 GMT
        Subject: CN=33B3813160F25A9A8FEDAF37F264EAB761BC0D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:df:75:93:5c:c5:49:9f:4d:56:94:9a:f9:
                    a5:a1:77:a4:8e:30:0e:45:d1:05:11:71:5d:f9:0d:
                    2b:b0:b2:08:ae:60:76:e2:53:26:55:d7:2a:4e:81:
                    0f:24:f0:38:d5:bb:54:fb:31:8e:a4:f0:04:75:fc:
                    10:1b:5b:8a:17:22:4d:40:3d:85:20:ab:29:92:6b:
                    5d:11:a5:84:75:e8:63:dd:03:cb:f4:d9:5a:4f:10:
                    e3:6d:63:71:8b:ff:9b:30:c3:83:67:cf:da:1a:31:
                    0d:d6:0e:27:19:ed:71:60:77:a7:b4:b2:6b:1e:5d:
                    52:65:62:a1:40:ae:57:9c:e5:46:b5:93:be:1e:84:
                    b2:24:6a:58:4f:54:86:b7:7a:f7:32:fa:6f:a2:04:
                    17:10:45:71:ff:32:a8:9e:98:b0:b8:9b:db:04:98:
                    24:c3:57:89:13:bf:6c:4d:db:db:3b:88:da:e1:08:
                    04:03:b0:73:7c:c8:f1:29:a5:09:8b:cf:70:bf:ad:
                    52:1a:e8:8e:71:31:b1:fa:ab:25:c2:94:7a:40:8b:
                    7d:e8:e5:b3:c2:9a:04:47:56:f7:44:ca:e8:13:6f:
                    48:a0:e6:33:e5:a2:dc:77:25:a7:35:5b:73:e8:66:
                    ff:07:0b:4a:97:18:d2:89:20:bd:c0:87:97:ef:7e:
                    e3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B3:81:31:60:F2:5A:9A:8F:ED:AF:37:F2:64:EA:B7:61:BC:0D:69
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e37322e302f32332d3233203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:68:2b:9e:7c:5d:35:be:42:45:80:6f:78:25:20:08:dc:
         94:44:75:03:0a:64:ae:e6:dc:b1:16:49:01:a4:70:8c:b5:5b:
         10:52:03:ab:7f:69:2a:6d:5a:dd:d8:b1:ff:02:2a:41:03:6d:
         c7:a8:e6:3d:fe:3d:4d:3c:77:e5:96:77:54:24:0b:ae:e4:6a:
         88:b8:7a:94:98:7f:f9:a3:a8:7c:c0:36:47:fb:76:c2:cc:86:
         07:21:74:a3:9e:a4:36:ac:26:9f:25:30:e8:10:81:20:c6:a8:
         9c:3b:f9:75:38:95:b4:dd:01:0d:4b:ca:df:ba:75:71:97:e8:
         80:28:f9:4f:49:2c:c7:c8:35:8e:fd:39:37:7b:c7:07:93:19:
         d6:d9:ed:af:f4:4e:81:e2:26:e1:c6:53:b0:9f:e8:4a:af:3f:
         f8:14:5f:de:9f:3f:3b:2c:d2:10:e6:1a:66:73:e3:79:6a:2f:
         fd:ed:14:45:7b:2e:3c:40:1b:62:cf:e0:75:63:07:36:9b:8e:
         5c:40:39:f6:9e:f3:4d:39:ce:03:db:6f:97:91:94:5a:3c:23:
         d6:83:c4:f8:60:ba:bf:26:91:6b:66:4d:fb:f2:25:15:4a:74:
         3c:b9:37:5e:6d:94:ff:ac:ea:92:fa:2f:7a:91:33:ce:de:98:
         73:ac:e5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:27:20 2024 by rpki-client on console-fra.rpki-client.org