Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS272954.roa
File:                     AS272954.roa (raw, json)
Hash identifier:          fAAZR1M09dOC8QyioDmpI5WaZzXgpzcwPHud28eleqI=
Subject key identifier:   C6:83:13:6B:FE:40:16:28:B0:E8:6F:DE:7B:64:3C:6F:B7:34:B5:AA
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       1DF14BD726EB5ED0B08E50D9517F7DDF0D9536A2
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS272954.roa
Signing time:             Tue 24 Sep 2024 22:10:02 +0000
ROA not before:           Tue 24 Sep 2024 22:05:02 +0000
ROA not after:            Tue 23 Sep 2025 22:10:02 +0000
asID:                     272954
IP address blocks:        181.78.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f1:4b:d7:26:eb:5e:d0:b0:8e:50:d9:51:7f:7d:df:0d:95:36:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Sep 24 22:05:02 2024 GMT
            Not After : Sep 23 22:10:02 2025 GMT
        Subject: CN=C683136BFE401628B0E86FDE7B643C6FB734B5AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:12:44:74:f4:3e:61:4c:8b:4b:be:23:10:
                    d2:4a:41:5b:fa:f7:e4:9c:31:51:77:40:90:55:22:
                    0f:99:c8:8c:36:91:0d:92:94:8c:ff:ae:14:33:08:
                    cf:65:8d:68:c8:1f:9e:ce:88:58:ac:24:cc:3a:27:
                    fe:f2:02:18:c6:76:74:6b:e9:8d:0a:e9:2c:f6:2c:
                    cd:16:d9:33:79:1d:8b:02:2e:6f:17:e8:15:4d:44:
                    08:f4:17:d6:21:cf:8b:f6:a0:bc:3d:e6:07:ff:34:
                    fc:bb:a9:a3:e6:c8:27:99:25:7e:81:9a:c5:26:4d:
                    2d:4e:b1:cf:f6:ac:1c:d9:9d:94:af:f8:93:c6:87:
                    ab:f5:54:ea:42:35:24:df:c3:11:66:e4:b2:89:b0:
                    7e:c0:79:32:81:8e:ae:41:10:29:7b:b7:20:53:b0:
                    fe:86:48:d6:44:88:18:25:15:77:5a:66:3c:88:94:
                    2f:32:6b:80:e9:57:7c:e2:42:e3:b8:45:3e:06:70:
                    d9:82:3c:fd:f0:68:e8:02:55:8d:58:6b:4d:e8:c9:
                    0f:14:88:a4:07:bf:12:b9:35:18:be:e6:27:d7:4b:
                    9c:9e:9d:f5:2e:3e:9e:22:4f:a0:fc:7a:11:bd:2d:
                    9e:fc:b3:db:02:4b:33:60:61:d7:f0:2a:b7:78:d9:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:83:13:6B:FE:40:16:28:B0:E8:6F:DE:7B:64:3C:6F:B7:34:B5:AA
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS272954.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:cc:70:68:73:d0:bd:75:ae:93:1f:cf:71:75:38:46:4a:57:
         5f:23:be:3c:25:ea:7e:11:b1:51:38:a9:da:3b:3a:3f:67:8d:
         78:29:2c:98:ad:65:41:7f:c1:84:90:d1:0e:16:e6:77:62:8f:
         96:36:0e:1c:e8:13:c6:e7:59:2f:88:a1:15:04:95:ac:13:95:
         76:dd:35:c3:65:33:98:37:f9:80:98:30:95:18:f1:0e:42:b9:
         23:bc:a1:dc:4d:31:79:41:49:72:27:64:5d:7a:b0:d1:53:8c:
         3d:fb:1a:67:39:a8:c3:73:13:22:a1:76:9a:a4:41:90:3b:29:
         94:fa:51:7c:1a:ec:27:0d:69:68:47:1e:ae:9c:53:ef:48:38:
         b4:cd:ef:50:19:13:ba:dd:03:43:de:da:7a:a5:cb:74:d3:9d:
         8c:9c:a8:86:84:be:c1:66:bf:89:83:24:e2:98:26:4c:a7:05:
         bd:83:d1:52:79:10:d1:74:11:f6:70:a2:80:f8:45:20:c0:1e:
         49:d2:ee:96:d0:e5:ce:ea:99:99:dd:1a:ce:b3:81:41:ee:da:
         44:ae:b6:88:f7:ee:fd:e0:36:4d:1e:bb:0a:1e:eb:cb:62:40:
         7d:04:b7:e2:69:ea:23:29:b2:3c:5c:77:7e:7f:29:12:80:cc:
         de:cd:cf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org