Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS265620.roa
File:                     AS265620.roa (raw, json)
Hash identifier:          Kb0EnliWUciT+inbKRL/LQPjj0ffdVv2AazgO2LNjDg=
Subject key identifier:   6E:F6:A1:29:A4:52:56:05:39:10:E1:79:B7:B8:54:5D:45:9A:34:BF
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       23A0876E2B035DB52BE8B444DE3FC44AA1545A45
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS265620.roa
Signing time:             Wed 16 Oct 2024 22:30:00 +0000
ROA not before:           Wed 16 Oct 2024 22:25:00 +0000
ROA not after:            Wed 15 Oct 2025 22:30:00 +0000
asID:                     265620
IP address blocks:        181.78.46.0/23 maxlen: 24
                          181.78.220.0/22 maxlen: 24
                          181.78.220.0/24 maxlen: 24
                          181.78.221.0/24 maxlen: 24
                          181.78.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a0:87:6e:2b:03:5d:b5:2b:e8:b4:44:de:3f:c4:4a:a1:54:5a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Oct 16 22:25:00 2024 GMT
            Not After : Oct 15 22:30:00 2025 GMT
        Subject: CN=6EF6A129A45256053910E179B7B8545D459A34BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:2c:1c:91:6b:a0:1c:0a:a7:a9:23:a8:3d:
                    87:2c:3d:ea:5a:4e:a3:75:a5:37:3c:1e:1b:d6:ea:
                    44:00:9f:aa:aa:19:26:59:f5:59:9d:50:c1:5d:50:
                    aa:ff:ec:bd:25:fa:42:4c:e9:e9:66:eb:48:b9:9b:
                    c8:c0:78:7b:d5:83:d4:ea:72:86:02:65:8a:c2:be:
                    2d:2c:88:3a:bd:e3:73:14:f4:bc:b1:85:d5:4b:02:
                    ad:b8:ff:64:c6:95:6e:ba:98:f2:37:15:12:46:3b:
                    1e:38:b2:19:49:06:7a:b5:b1:af:d8:79:ba:50:8c:
                    83:5a:1a:33:df:da:80:39:ad:36:e9:ce:b9:b4:32:
                    30:35:d4:92:09:b2:f3:80:7a:8b:1b:da:47:a5:f1:
                    c6:5f:0d:3c:60:f6:7a:d1:5b:9c:03:e6:97:95:fd:
                    7a:10:9b:7d:c9:b8:b9:e8:c9:69:24:aa:ee:f1:40:
                    41:fa:0c:65:26:7f:6f:c9:3c:77:8b:10:15:65:c6:
                    da:69:9b:68:69:64:de:f3:2a:d5:ae:93:82:9f:4a:
                    eb:49:c6:5a:73:75:fb:59:ea:ce:8b:13:92:b2:5b:
                    d7:06:c6:98:8e:14:68:6c:68:9e:67:96:cd:99:fc:
                    2e:e2:8c:82:c4:21:bd:e4:a6:10:3c:07:3a:57:4f:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F6:A1:29:A4:52:56:05:39:10:E1:79:B7:B8:54:5D:45:9A:34:BF
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS265620.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.46.0/23
                  181.78.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:c1:47:fa:f1:86:71:b9:f9:50:6b:6c:5e:fd:00:30:d7:08:
         20:0f:f7:54:6e:86:ed:dc:04:a1:70:3b:c0:d8:04:86:b8:d3:
         c2:2f:7e:57:28:c9:1c:1c:c7:bf:bd:2d:78:f9:f2:86:8f:ea:
         ce:ed:b8:9a:63:e7:fd:f7:fa:c3:03:f0:6b:d8:f4:37:c0:9a:
         da:17:75:2c:4d:30:c5:0b:08:b4:03:e3:e8:57:96:00:2e:4b:
         69:0c:8b:e8:9f:4e:5f:3a:78:04:2f:30:10:af:f8:a9:ea:f3:
         79:23:de:59:35:9c:3e:2a:5e:96:e2:0d:27:46:de:b1:d5:7a:
         dc:02:75:65:39:2a:50:44:8d:8f:da:31:51:66:96:f6:aa:d1:
         44:69:6b:6a:42:13:bf:3c:86:32:93:e6:96:bc:df:75:89:1a:
         51:98:68:dc:e4:8f:ca:f7:18:ec:28:70:2e:61:58:bf:51:a3:
         df:25:93:1d:ba:b4:14:28:a7:07:3d:f4:d1:66:ce:f5:77:89:
         cc:f2:50:4e:8a:18:a8:7f:51:8f:c7:ea:34:1a:53:6d:aa:e1:
         88:57:64:b5:91:f5:ac:f9:e0:75:d2:ea:75:8d:eb:41:ee:d6:
         29:5b:08:82:63:52:21:61:81:5e:94:b9:58:f6:38:06:b2:fc:
         4c:7c:89:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org