Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa
File:                     AS52468.roa (raw, json)
Hash identifier:          Ctb5fwVvsKkgjI4rHMjFp1BBT3fV043acu4/BVEqYFY=
Subject key identifier:   EE:D9:77:22:08:E4:1F:9B:0A:49:DE:96:D8:D1:CB:7D:68:79:35:1F
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       7F5012463750BA1BEFD224896D06931E655CFE90
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa
Signing time:             Tue 19 Nov 2024 21:30:00 +0000
ROA not before:           Tue 19 Nov 2024 21:25:00 +0000
ROA not after:            Tue 18 Nov 2025 21:30:00 +0000
asID:                     52468
IP address blocks:        181.78.0.0/19 maxlen: 24
                          181.78.40.0/23 maxlen: 24
                          181.78.42.0/23 maxlen: 24
                          181.78.44.0/23 maxlen: 24
                          181.78.48.0/21 maxlen: 24
                          181.78.56.0/22 maxlen: 24
                          181.78.60.0/23 maxlen: 24
                          181.78.62.0/23 maxlen: 24
                          181.78.64.0/19 maxlen: 24
                          181.78.64.0/20 maxlen: 24
                          181.78.75.160/29 maxlen: 29
                          181.78.75.240/28 maxlen: 28
                          181.78.80.0/21 maxlen: 24
                          181.78.88.0/22 maxlen: 24
                          181.78.92.0/22 maxlen: 24
                          181.78.96.0/23 maxlen: 24
                          181.78.98.0/23 maxlen: 24
                          181.78.100.0/22 maxlen: 24
                          181.78.104.0/21 maxlen: 24
                          181.78.112.0/21 maxlen: 24
                          181.78.120.0/21 maxlen: 24
                          181.78.120.0/24 maxlen: 24
                          181.78.121.0/24 maxlen: 24
                          181.78.122.0/24 maxlen: 24
                          181.78.123.0/24 maxlen: 24
                          181.78.124.0/24 maxlen: 24
                          181.78.125.0/24 maxlen: 24
                          181.78.126.0/24 maxlen: 24
                          181.78.127.0/24 maxlen: 24
                          181.78.192.0/20 maxlen: 24
                          181.78.208.0/21 maxlen: 24
                          181.78.216.0/23 maxlen: 24
                          181.78.218.0/24 maxlen: 24
                          181.78.219.0/24 maxlen: 24
                          181.79.80.0/20 maxlen: 24
                          181.79.192.0/24 maxlen: 24
                          181.79.193.0/24 maxlen: 24
                          181.79.194.0/24 maxlen: 24
                          181.79.195.0/24 maxlen: 24
                          181.79.196.0/24 maxlen: 24
                          181.79.197.0/24 maxlen: 24
                          181.79.198.0/24 maxlen: 24
                          181.79.199.0/24 maxlen: 24
                          181.79.200.0/24 maxlen: 24
                          181.79.202.0/23 maxlen: 24
                          181.79.204.0/23 maxlen: 24
                          181.79.206.0/23 maxlen: 24
                          181.79.208.0/22 maxlen: 24
                          181.79.217.0/24 maxlen: 24
                          181.79.220.0/24 maxlen: 24
                          181.79.221.0/24 maxlen: 24
                          181.119.64.0/24 maxlen: 24
                          181.119.66.0/23 maxlen: 24
                          181.119.68.0/23 maxlen: 24
                          181.119.70.0/24 maxlen: 24
                          181.119.82.0/23 maxlen: 24
                          181.119.84.0/22 maxlen: 24
                          181.119.88.0/21 maxlen: 24
                          181.119.96.0/20 maxlen: 24
                          181.119.113.0/24 maxlen: 24
                          181.119.114.0/23 maxlen: 24
                          181.119.122.0/24 maxlen: 24
                          181.119.124.0/23 maxlen: 24
                          181.119.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:50:12:46:37:50:ba:1b:ef:d2:24:89:6d:06:93:1e:65:5c:fe:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Nov 19 21:25:00 2024 GMT
            Not After : Nov 18 21:30:00 2025 GMT
        Subject: CN=EED9772208E41F9B0A49DE96D8D1CB7D6879351F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:f8:45:54:18:3c:e0:19:41:2a:17:37:ad:
                    8d:8c:ee:4d:2b:ac:e6:df:c8:04:cb:6d:ed:2a:d4:
                    4a:27:2c:30:f0:0f:f3:94:bb:e2:93:c2:13:07:ca:
                    0e:83:15:a3:cd:ee:8d:1d:b6:7b:ce:9d:e5:45:82:
                    59:91:41:9f:a7:e0:2f:8b:c4:e0:ee:bb:60:97:f2:
                    ef:05:51:2d:9b:36:e2:9e:49:6e:f8:74:fb:c1:b4:
                    ca:ec:24:a9:02:0c:b6:dd:13:ba:7d:fa:c1:62:e8:
                    b0:b7:23:ef:e6:28:7d:e8:b0:ce:34:bb:01:f8:c4:
                    54:d7:15:73:d8:32:91:f9:d1:53:d5:8c:09:df:04:
                    76:fb:e0:d8:49:55:c6:08:a1:eb:21:ab:d1:f6:79:
                    e7:2f:d1:73:69:05:45:98:51:cf:94:8f:ef:54:da:
                    77:c2:bd:84:4a:ac:c5:f0:b5:cf:6d:00:2a:b8:03:
                    93:d9:ba:b7:94:8e:17:3d:f8:e6:60:0b:00:c8:26:
                    56:8b:d4:a4:72:f5:bc:0d:88:1b:04:db:5e:54:b3:
                    d9:54:a8:8e:18:fe:06:89:61:70:25:5d:25:a1:85:
                    47:2d:57:1b:0a:ee:38:2f:c2:b8:8b:22:68:58:d7:
                    69:a4:98:30:50:14:b0:17:71:76:34:2f:31:a7:fc:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D9:77:22:08:E4:1F:9B:0A:49:DE:96:D8:D1:CB:7D:68:79:35:1F
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.0.0/19
                  181.78.40.0-181.78.45.255
                  181.78.48.0-181.78.127.255
                  181.78.192.0-181.78.219.255
                  181.79.80.0/20
                  181.79.192.0-181.79.200.255
                  181.79.202.0-181.79.211.255
                  181.79.217.0/24
                  181.79.220.0/23
                  181.119.64.0/24
                  181.119.66.0-181.119.70.255
                  181.119.82.0-181.119.111.255
                  181.119.113.0-181.119.115.255
                  181.119.122.0/24
                  181.119.124.0-181.119.126.255

    Signature Algorithm: sha256WithRSAEncryption
         18:6e:25:d8:04:f6:91:4b:2e:86:52:d4:7a:95:4d:d0:d9:90:
         d0:de:4b:d5:4a:d3:c1:c3:3b:5a:0f:31:67:14:a5:5b:ed:01:
         5c:60:69:9d:96:c9:e8:ed:8c:2a:d2:5d:dd:56:ef:d4:81:6e:
         54:e7:4a:54:ae:5e:f4:8f:32:f3:16:3d:b7:99:54:2d:cf:d9:
         19:11:fc:1b:2c:4f:1d:30:13:d4:75:eb:c8:b2:3b:37:4f:c3:
         a6:03:d8:3d:b5:cc:60:f6:cc:f5:46:80:ab:de:0e:46:b4:c3:
         d0:af:2e:a9:14:bb:44:a5:b0:9e:ce:55:fa:d8:c1:83:ff:ab:
         4b:52:3b:6a:da:21:5b:6b:66:19:27:80:8b:d6:cf:c4:86:e5:
         a6:da:6a:76:fa:33:39:48:5a:8c:bf:93:4f:2e:a7:29:bb:12:
         86:b4:a3:de:48:04:cc:32:e9:c5:4c:97:86:c8:47:04:5b:17:
         06:60:0a:19:b4:28:64:9f:c6:ee:80:d6:62:e8:8c:a9:dc:1c:
         15:5d:50:44:3a:2c:a5:b2:3a:1d:55:61:f2:58:61:47:60:ce:
         65:45:70:b0:90:22:08:81:88:ce:19:a7:30:87:8b:55:b8:cc:
         e6:86:07:7e:61:db:3a:8d:7f:1a:9c:42:68:41:22:bb:68:ff:
         e0:2e:9f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org