Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS18747.roa
File:                     AS18747.roa (raw, json)
Hash identifier:          DkuMHNPgEAduLRSFY6npKzlMOGvExyFMicxKewL6tI0=
Subject key identifier:   AE:C6:1F:FC:FB:24:4C:24:B9:65:77:18:9A:E8:B7:AF:9C:DE:74:F6
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       623BF8300D737955F1C66475BEA6F679F6304A96
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS18747.roa
Signing time:             Tue 24 Sep 2024 22:10:00 +0000
ROA not before:           Tue 24 Sep 2024 22:05:00 +0000
ROA not after:            Tue 23 Sep 2025 22:10:00 +0000
asID:                     18747
IP address blocks:        181.78.0.0/15 maxlen: 24
                          181.78.32.0/24 maxlen: 24
                          181.78.64.0/18 maxlen: 24
                          181.78.64.0/19 maxlen: 19
                          181.78.96.0/21 maxlen: 21
                          181.78.128.0/17 maxlen: 24
                          181.78.128.0/19 maxlen: 19
                          181.78.160.0/19 maxlen: 24
                          181.78.160.0/21 maxlen: 24
                          181.78.192.0/19 maxlen: 19
                          181.78.224.0/21 maxlen: 21
                          181.79.0.0/19 maxlen: 24
                          181.79.64.0/21 maxlen: 21
                          181.79.72.0/23 maxlen: 23
                          181.79.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3b:f8:30:0d:73:79:55:f1:c6:64:75:be:a6:f6:79:f6:30:4a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Sep 24 22:05:00 2024 GMT
            Not After : Sep 23 22:10:00 2025 GMT
        Subject: CN=AEC61FFCFB244C24B96577189AE8B7AF9CDE74F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:47:c8:a8:65:9c:16:58:95:58:8b:7d:ad:
                    bd:2c:5b:b2:56:bc:36:08:57:87:7f:d5:7f:0f:67:
                    38:8d:81:dc:db:d0:e9:66:96:4e:a2:8e:76:e5:c9:
                    23:87:d4:c7:e2:5c:11:34:66:60:a1:2a:0e:29:c9:
                    92:84:06:d7:ac:02:97:c4:7c:dd:cd:69:2c:57:a2:
                    30:82:6b:4e:ba:32:49:20:be:8a:03:3c:c4:f2:45:
                    90:da:1f:42:a4:3b:86:2d:cc:4d:6f:67:ce:29:9d:
                    c3:b6:31:49:78:77:43:1b:e9:88:89:b9:38:3f:97:
                    6f:72:3e:0d:47:9c:44:79:bd:10:d6:9b:df:0d:5a:
                    14:0a:29:ef:6c:ab:08:a7:22:d0:2b:8b:47:98:44:
                    c3:72:d5:18:1f:ca:98:4d:16:e2:57:67:db:af:fa:
                    93:c1:d9:97:46:98:31:62:36:e6:8d:62:f2:c9:bf:
                    a0:ac:73:bf:47:71:9d:1b:cf:34:f6:a5:dc:1b:d4:
                    e2:fe:a5:51:18:64:be:20:53:4c:11:6b:14:d2:d8:
                    eb:0d:ae:d5:91:be:d1:ab:45:72:3d:af:5c:93:9f:
                    18:09:d2:18:cc:3c:45:b1:35:2d:a5:a7:73:69:38:
                    9c:92:58:ab:7b:cd:bf:e4:b1:d6:96:f3:d8:06:11:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C6:1F:FC:FB:24:4C:24:B9:65:77:18:9A:E8:B7:AF:9C:DE:74:F6
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS18747.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         43:de:dd:a1:f0:75:5a:a2:c2:5c:87:a6:a1:fa:30:c9:91:cd:
         c8:a6:9c:1b:27:92:2a:11:83:1a:5d:ac:20:8e:6a:1b:d2:c6:
         f2:af:e4:d7:b2:60:db:ba:08:0e:09:63:fc:5c:3f:20:44:e1:
         f1:f5:ba:f4:f4:31:d1:2d:13:29:a2:ae:bd:8c:82:a6:0e:0c:
         fa:5c:2d:87:02:97:ac:1c:99:93:84:d4:3b:eb:1a:f5:93:e0:
         94:b9:2b:a7:a4:16:11:bb:9c:2f:b7:b9:be:63:a1:7b:4c:a3:
         0a:72:2c:43:d0:a4:ab:c4:4a:74:fd:a4:8d:1f:23:74:8d:16:
         a1:a0:15:d9:91:f6:56:32:63:5e:06:33:4a:0e:7d:ac:80:f1:
         b3:7b:f8:37:96:45:bc:c6:3d:74:e6:ad:e5:c5:70:a7:d3:d8:
         e3:29:f8:a3:c0:40:22:69:b3:93:fa:dc:b8:6c:69:55:21:10:
         b5:ba:e8:c8:59:ee:16:55:41:aa:1a:ba:35:c2:3d:98:ca:65:
         6c:6b:46:22:f3:95:08:5a:d7:ee:01:ed:df:cc:04:6d:e1:2a:
         7d:02:5f:3c:b0:64:56:54:40:bf:29:3a:70:40:25:66:c4:a3:
         b8:36:cd:d3:06:66:30:62:ca:4d:81:87:c6:1f:38:7e:e9:c0:
         ce:3d:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:57 2024 by rpki-client on console-fra.rpki-client.org