Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS264668.roa
File:                     AS264668.roa (raw, json)
Hash identifier:          j35Yay5SieCPUtT++xomVBQIDwWnqySYIAFbtkLyWTc=
Subject key identifier:   08:46:BC:38:C4:B8:F0:D6:4C:57:3F:EE:02:83:3F:6B:84:4B:9D:A3
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       460410A0EFE37EFB55DD04A2AC9C7CD0A0A12FCD
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS264668.roa
Signing time:             Tue 24 Sep 2024 22:10:01 +0000
ROA not before:           Tue 24 Sep 2024 22:05:01 +0000
ROA not after:            Tue 23 Sep 2025 22:10:01 +0000
asID:                     264668
IP address blocks:        181.78.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:04:10:a0:ef:e3:7e:fb:55:dd:04:a2:ac:9c:7c:d0:a0:a1:2f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Sep 24 22:05:01 2024 GMT
            Not After : Sep 23 22:10:01 2025 GMT
        Subject: CN=0846BC38C4B8F0D64C573FEE02833F6B844B9DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:58:54:a6:a8:35:7a:1b:6c:0c:97:3c:b9:98:
                    e6:50:c5:d0:f9:af:0f:b5:c4:7c:15:9c:ba:31:c0:
                    de:db:3a:8b:60:ac:ca:3e:3d:bf:2f:5c:4c:74:f9:
                    9c:ff:28:71:a7:25:ac:1e:11:f8:82:60:31:6e:80:
                    cb:3c:b2:88:15:9d:0a:ce:dc:92:2b:9a:9d:eb:f6:
                    1e:c8:6e:93:71:e5:c4:28:17:33:b5:f5:c4:47:a3:
                    6c:ca:59:15:de:23:09:ba:0b:37:c9:72:7f:9a:44:
                    b6:66:87:df:d7:08:38:62:af:4d:62:82:65:9c:df:
                    71:5a:4c:7f:94:df:dd:95:5e:dd:3b:77:03:1f:03:
                    9a:9a:b9:48:7a:de:ab:d1:80:df:f0:ee:e9:96:26:
                    14:cb:65:18:fd:41:48:27:bc:e8:6c:45:af:29:2c:
                    1b:27:e6:fd:3e:5e:6a:d9:a9:6b:24:db:ae:f4:f3:
                    e0:03:bc:97:4d:e7:c2:d6:b5:63:2c:f4:4e:df:6e:
                    91:72:53:20:88:df:5c:bf:3f:16:34:3a:7b:6f:bf:
                    10:25:90:16:7f:1f:bd:3d:1d:28:40:a7:c0:a7:73:
                    47:19:a5:4a:b8:08:e2:fc:f4:7e:1e:c1:a0:b2:b9:
                    a5:0a:13:69:65:02:14:5d:64:6a:72:2c:46:c7:f9:
                    b3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:46:BC:38:C4:B8:F0:D6:4C:57:3F:EE:02:83:3F:6B:84:4B:9D:A3
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS264668.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:07:22:54:bc:c2:86:2a:92:a4:15:09:4c:b3:85:08:33:92:
         d1:d0:39:df:55:19:f4:be:08:77:05:bb:80:69:c4:03:7b:03:
         fa:81:ad:0e:b1:cb:63:be:fe:f6:46:83:f0:55:82:94:ec:91:
         18:c1:04:5b:59:11:14:48:7a:c0:b4:7e:22:00:d4:e6:2b:c5:
         8b:73:fb:c9:d0:ce:eb:63:dc:d8:ab:d6:d6:05:df:ba:2f:a8:
         4d:da:79:75:36:63:7c:be:5b:53:93:79:dd:7c:82:e4:0c:87:
         a9:2b:81:e8:8a:14:b3:a1:99:9e:53:85:bd:73:32:98:93:0e:
         f5:8e:b6:42:71:00:19:e9:44:0b:b9:bb:ed:67:3f:06:4c:26:
         a7:78:05:11:c9:b7:a1:9e:2e:f9:6e:c1:3e:d2:ad:2f:bd:49:
         d3:53:84:cd:2f:c7:7a:b1:ea:c1:b0:99:81:7c:0a:df:54:bd:
         89:fb:b5:00:4a:7a:b2:54:97:d6:59:ff:b5:a6:37:1b:eb:82:
         8b:97:95:0a:fb:01:bd:94:bc:41:5c:a6:51:4d:a8:6a:29:4b:
         e5:16:df:f0:49:df:5c:0c:8d:ea:56:c6:0f:a1:d1:fd:b4:c1:
         0c:2b:3c:fa:d8:dd:82:98:eb:54:55:61:51:cb:ac:45:ae:1d:
         e2:c1:09:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org