Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS16973.roa
File:                     AS16973.roa (raw, json)
Hash identifier:          S0JoDjYzjDWocQxTXneA0Qn7ABtl/GhAb/ZaP3FFXrw=
Subject key identifier:   7B:D5:6C:BB:04:8E:0B:AE:AE:AB:24:FB:75:57:D6:5D:42:1B:9C:3A
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       65ABFA62C4BC3A8739706884FCC46EDCE208C159
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS16973.roa
Signing time:             Mon 10 Mar 2025 20:50:00 +0000
ROA not before:           Mon 10 Mar 2025 20:45:00 +0000
ROA not after:            Mon 09 Mar 2026 20:50:00 +0000
asID:                     16973
IP address blocks:        181.119.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ab:fa:62:c4:bc:3a:87:39:70:68:84:fc:c4:6e:dc:e2:08:c1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar 10 20:45:00 2025 GMT
            Not After : Mar  9 20:50:00 2026 GMT
        Subject: CN=7BD56CBB048E0BAEAEAB24FB7557D65D421B9C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:fe:fc:7d:2d:50:0e:73:bf:8f:7c:c4:69:
                    be:0e:0a:d1:d9:d8:85:4f:19:b1:4b:b5:ab:ce:46:
                    87:67:04:1a:a8:a8:74:ff:11:7a:85:21:7a:db:04:
                    c4:fe:c6:76:d0:14:ad:99:5b:7a:d5:0e:87:12:db:
                    8b:82:91:da:c8:9c:7a:02:6e:fa:f0:8c:26:57:25:
                    12:f5:6b:74:e8:3e:ae:05:0e:ff:c3:56:b4:6a:2b:
                    d2:0c:43:eb:ae:eb:ff:c1:19:c5:24:ce:cd:5d:7c:
                    34:b8:02:13:7d:32:d3:93:7d:cd:6b:fe:5e:8d:da:
                    8d:0d:4a:20:83:74:0e:7f:7d:c2:35:a4:2b:4f:58:
                    c1:07:96:9f:fd:9f:91:04:76:b9:ad:a2:e7:8e:e9:
                    6f:a4:b5:dd:e2:79:ee:6f:93:39:15:5e:d5:fa:06:
                    c8:4a:21:26:28:3f:26:6c:1f:4c:a0:95:79:65:93:
                    dc:fc:d4:16:7f:57:ed:3b:b4:86:e7:b6:4a:c0:63:
                    a3:df:49:6b:47:df:65:d6:bd:ae:a7:d1:1f:ea:b1:
                    3b:0d:71:ce:8b:75:eb:fe:f2:41:18:5f:7f:56:d7:
                    68:c3:26:a5:3e:22:22:2e:34:7c:a6:f4:38:28:5c:
                    c6:78:53:40:f1:6f:cd:c6:36:cc:35:1f:a7:1f:f4:
                    02:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D5:6C:BB:04:8E:0B:AE:AE:AB:24:FB:75:57:D6:5D:42:1B:9C:3A
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS16973.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:29:15:0a:48:a6:ac:0f:1e:8b:97:7d:48:e6:da:b0:2e:f8:
         92:db:a1:a3:78:99:b2:d4:26:6e:88:94:b9:b5:c1:3c:aa:07:
         0f:53:fb:2d:97:7b:c3:c7:6e:1b:ce:0f:27:b9:42:8e:9f:84:
         00:42:37:2e:8b:e9:d7:3e:e3:bd:b1:5a:a2:5d:bb:3e:c9:6d:
         dc:f6:61:b3:44:fa:4d:89:4e:a7:0b:11:dc:8a:98:38:b6:9c:
         53:52:38:71:ea:a9:3d:ca:29:eb:e6:a0:e3:89:67:42:07:7e:
         49:9f:a5:fe:da:fa:63:f1:1f:0e:86:df:76:81:05:f1:71:9e:
         1a:4a:1f:bc:fe:a5:e2:a9:fb:80:a6:46:e2:cb:b3:f0:29:07:
         50:b9:87:6f:fb:0a:4d:f1:01:de:5f:7b:f2:3e:dc:8f:86:04:
         59:46:44:a0:de:23:d2:67:ec:f9:6f:7e:a3:b3:3f:26:48:ec:
         41:62:33:54:a3:eb:91:4f:e2:6d:e5:52:7f:bb:89:ba:4c:e7:
         4b:f5:26:01:56:b4:2d:08:0f:58:39:40:b4:5a:6b:6d:14:93:
         bd:7f:0b:e2:43:32:54:0e:71:f1:fd:f5:49:73:7a:cf:ad:4f:
         21:bd:0a:85:85:ae:e4:b2:68:2f:37:b5:0d:82:6b:5f:18:50:
         7a:70:74:1f
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUZav6YsS8Ooc5cGiE/MRu3OIIwVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNTAzMTAyMDQ1MDBaFw0yNjAzMDkyMDUwMDBaMDMxMTAvBgNV
BAMTKDdCRDU2Q0JCMDQ4RTBCQUVBRUFCMjRGQjc1NTdENjVENDIxQjlDM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1iP78fS1QDnO/j3zEab4OCtHZ
2IVPGbFLtavORodnBBqoqHT/EXqFIXrbBMT+xnbQFK2ZW3rVDocS24uCkdrInHoC
bvrwjCZXJRL1a3ToPq4FDv/DVrRqK9IMQ+uu6//BGcUkzs1dfDS4AhN9MtOTfc1r
/l6N2o0NSiCDdA5/fcI1pCtPWMEHlp/9n5EEdrmtoueO6W+ktd3iee5vkzkVXtX6
BshKISYoPyZsH0yglXllk9z81BZ/V+07tIbntkrAY6PfSWtH32XWva6n0R/qsTsN
cc6Ldev+8kEYX39W12jDJqU+IiIuNHym9DgoXMZ4U0Dxb83GNsw1H6cf9AJ7AgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUe9VsuwSOC66uqyT7dVfWXUIbnDowHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4MUMwRjlFNjJD
NkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvQVMxNjk3My5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALV3/DAN
BgkqhkiG9w0BAQsFAAOCAQEAKSkVCkimrA8ei5d9SObasC74ktuho3iZstQmboiU
ubXBPKoHD1P7LZd7w8duG84PJ7lCjp+EAEI3Lovp1z7jvbFaol27Pslt3PZhs0T6
TYlOpwsR3IqYOLacU1I4ceqpPcop6+ag44lnQgd+SZ+l/tr6Y/EfDobfdoEF8XGe
GkofvP6l4qn7gKZG4suz8CkHULmHb/sKTfEB3l978j7cj4YEWUZEoN4j0mfs+W9+
o7M/JkjsQWIzVKPrkU/ibeVSf7uJukznS/UmAVa0LQgPWDlAtFprbRSTvX8L4kMy
VA5x8f31SXN6z61PIb0KhYWu5LJoLze1DYJrXxhQenB0Hw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:22:30 2025 by rpki-client