Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87B93595D32256827695BB798ECCD9433FE511E0D568BDD612086F02D97E0712/0/AS11816.roa
File:                     AS11816.roa (raw, json)
Hash identifier:          zrXmlhCEMkku7WarO8OOfjM34dbAwRKSa3gdTxSjvPk=
Subject key identifier:   36:6D:8A:3D:E5:2D:5E:A0:9B:49:2E:03:8D:E5:8E:67:0D:7E:33:23
Certificate issuer:       /CN=FD2F3FEE841FE34AD95D1059730BC2666FD33DC4
Certificate serial:       1A59E8CBE65C631703906627E4439F47814CE2B5
Authority key identifier: FD:2F:3F:EE:84:1F:E3:4A:D9:5D:10:59:73:0B:C2:66:6F:D3:3D:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD2F3FEE841FE34AD95D1059730BC2666FD33DC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87B93595D32256827695BB798ECCD9433FE511E0D568BDD612086F02D97E0712/0/AS11816.roa
Signing time:             Thu 21 Mar 2024 19:35:00 +0000
ROA not before:           Thu 21 Mar 2024 19:30:00 +0000
ROA not after:            Thu 20 Mar 2025 19:35:00 +0000
asID:                     11816
IP address blocks:        181.41.0.0/23 maxlen: 23
                          181.41.2.0/23 maxlen: 23
                          181.41.4.0/23 maxlen: 23
                          181.41.6.0/23 maxlen: 23
                          181.41.20.0/23 maxlen: 23
                          181.41.22.0/23 maxlen: 23
                          181.41.24.0/23 maxlen: 23
                          181.41.26.0/23 maxlen: 23
                          181.41.28.0/23 maxlen: 23
                          181.41.30.0/23 maxlen: 23
                          181.41.32.0/23 maxlen: 23
                          181.41.34.0/23 maxlen: 23
                          181.41.36.0/22 maxlen: 22
                          181.41.40.0/22 maxlen: 22
                          181.41.44.0/23 maxlen: 23
                          181.41.46.0/23 maxlen: 23
                          181.41.50.0/23 maxlen: 23
                          181.41.52.0/23 maxlen: 23
                          181.41.54.0/23 maxlen: 23
                          181.41.56.0/23 maxlen: 23
                          181.41.60.0/23 maxlen: 23
                          181.41.62.0/23 maxlen: 23
                          186.189.0.0/23 maxlen: 23
                          186.189.2.0/23 maxlen: 23
                          186.189.4.0/23 maxlen: 23
                          186.189.6.0/23 maxlen: 23
                          186.189.8.0/23 maxlen: 23
                          186.189.12.0/23 maxlen: 23
                          186.189.14.0/23 maxlen: 23
                          186.189.16.0/23 maxlen: 23
                          186.189.18.0/23 maxlen: 23
                          186.189.22.0/23 maxlen: 23
                          186.189.26.0/23 maxlen: 23
                          186.189.32.0/23 maxlen: 23
                          186.189.34.0/23 maxlen: 23
                          186.189.36.0/23 maxlen: 23
                          186.189.38.0/23 maxlen: 23
                          186.189.42.0/23 maxlen: 23
                          186.189.44.0/23 maxlen: 23
                          186.189.46.0/23 maxlen: 23
                          186.189.48.0/22 maxlen: 23
                          186.189.56.0/23 maxlen: 23
                          186.189.58.0/23 maxlen: 23
                          186.189.60.0/23 maxlen: 23
                          186.189.62.0/23 maxlen: 23
                          186.189.128.0/23 maxlen: 23
                          186.189.130.0/23 maxlen: 23
                          186.189.132.0/23 maxlen: 23
                          186.189.134.0/23 maxlen: 23
                          186.189.136.0/23 maxlen: 23
                          186.189.138.0/23 maxlen: 23
                          186.189.140.0/23 maxlen: 23
                          186.189.142.0/23 maxlen: 23
                          186.189.144.0/23 maxlen: 23
                          186.189.146.0/23 maxlen: 23
                          186.189.148.0/23 maxlen: 23
                          186.189.150.0/23 maxlen: 23
                          186.189.152.0/23 maxlen: 23
                          186.189.154.0/23 maxlen: 23
                          186.189.156.0/23 maxlen: 23
                          186.189.158.0/23 maxlen: 23
                          186.189.160.0/23 maxlen: 23
                          186.189.162.0/23 maxlen: 23
                          186.189.164.0/23 maxlen: 23
                          186.189.166.0/23 maxlen: 23
                          186.189.168.0/23 maxlen: 23
                          186.189.172.0/23 maxlen: 23
                          186.189.174.0/23 maxlen: 23
                          186.189.176.0/23 maxlen: 23
                          186.189.178.0/23 maxlen: 23
                          186.189.180.0/23 maxlen: 23
                          186.189.182.0/23 maxlen: 23
                          186.189.184.0/23 maxlen: 23
                          186.189.186.0/23 maxlen: 23
                          186.189.188.0/23 maxlen: 23
                          186.189.190.0/23 maxlen: 23
                          201.229.0.0/23 maxlen: 23
                          201.229.4.0/23 maxlen: 23
                          201.229.6.0/23 maxlen: 23
                          201.229.8.0/23 maxlen: 23
                          201.229.10.0/23 maxlen: 23
                          201.229.12.0/23 maxlen: 23
                          201.229.14.0/23 maxlen: 23
                          201.229.16.0/21 maxlen: 21
                          201.229.32.0/21 maxlen: 21
                          201.229.40.0/21 maxlen: 21
                          201.229.48.0/23 maxlen: 23
                          201.229.50.0/23 maxlen: 23
                          201.229.52.0/23 maxlen: 23
                          201.229.54.0/23 maxlen: 23
                          201.229.60.0/23 maxlen: 23
                          201.229.62.0/23 maxlen: 23
                          201.229.64.0/23 maxlen: 23
                          201.229.68.0/23 maxlen: 23
                          201.229.72.0/23 maxlen: 23
                          201.229.74.0/23 maxlen: 23
                          201.229.80.0/23 maxlen: 23
                          201.229.82.0/23 maxlen: 23
                          201.229.84.0/23 maxlen: 23
                          201.229.86.0/23 maxlen: 23
                          201.229.90.0/23 maxlen: 23
                          201.229.92.0/23 maxlen: 23
                          201.229.94.0/23 maxlen: 23
                          201.229.96.0/23 maxlen: 23
                          201.229.98.0/23 maxlen: 23
                          201.229.100.0/23 maxlen: 23
                          201.229.102.0/23 maxlen: 23
                          201.229.104.0/23 maxlen: 23
                          201.229.106.0/23 maxlen: 23
                          201.229.108.0/23 maxlen: 23
                          201.229.110.0/23 maxlen: 23
                          201.229.112.0/23 maxlen: 23
                          201.229.114.0/23 maxlen: 23
                          201.229.118.0/23 maxlen: 23
                          201.229.120.0/23 maxlen: 23
                          201.229.122.0/23 maxlen: 23
                          201.229.124.0/23 maxlen: 23
                          201.229.126.0/23 maxlen: 23
                          2800:ad0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87B93595D32256827695BB798ECCD9433FE511E0D568BDD612086F02D97E0712/0/FD2F3FEE841FE34AD95D1059730BC2666FD33DC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87B93595D32256827695BB798ECCD9433FE511E0D568BDD612086F02D97E0712/0/FD2F3FEE841FE34AD95D1059730BC2666FD33DC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD2F3FEE841FE34AD95D1059730BC2666FD33DC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:59:e8:cb:e6:5c:63:17:03:90:66:27:e4:43:9f:47:81:4c:e2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD2F3FEE841FE34AD95D1059730BC2666FD33DC4
        Validity
            Not Before: Mar 21 19:30:00 2024 GMT
            Not After : Mar 20 19:35:00 2025 GMT
        Subject: CN=366D8A3DE52D5EA09B492E038DE58E670D7E3323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:9f:2c:7c:69:1f:35:55:d9:51:04:b3:23:
                    8b:d0:41:d9:c4:21:f9:53:90:f3:b2:1c:14:d1:c2:
                    ae:97:32:2f:0c:8f:2c:eb:6e:22:7d:79:87:e8:b5:
                    36:06:58:75:5c:27:a9:1c:c4:b2:11:d6:8b:51:de:
                    be:8a:0e:41:1b:5b:9f:3c:6d:0c:ba:7e:48:62:1c:
                    36:c4:2b:07:11:03:df:b6:db:8b:a0:91:95:de:f3:
                    c1:0a:e5:66:ae:de:a6:ff:64:92:62:a8:a6:c4:15:
                    86:61:75:d8:ce:f1:23:77:2d:24:01:f3:99:e0:ed:
                    e7:15:59:b3:eb:de:35:d7:b1:e4:23:01:ab:3d:9c:
                    c4:79:db:ff:fc:63:47:0f:f3:e5:df:c5:7c:91:13:
                    30:87:36:d1:66:d5:f7:b5:f0:5c:3f:27:96:c8:2e:
                    fd:86:ba:85:17:e2:da:aa:fa:e4:fe:b1:34:fd:72:
                    82:d0:30:a2:1b:9d:d7:aa:26:f0:27:fc:c2:d0:d4:
                    79:a0:16:2e:eb:d8:9a:6c:24:48:8d:e0:90:9f:21:
                    0e:7e:0d:26:62:5d:fd:8b:1f:e3:73:60:07:ab:62:
                    44:a9:60:f0:80:4f:b5:7e:99:ce:ce:fb:9a:f1:90:
                    b3:1d:8a:8f:84:e7:29:4f:a1:65:e6:ee:b4:be:8c:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6D:8A:3D:E5:2D:5E:A0:9B:49:2E:03:8D:E5:8E:67:0D:7E:33:23
            X509v3 Authority Key Identifier:
                keyid:FD:2F:3F:EE:84:1F:E3:4A:D9:5D:10:59:73:0B:C2:66:6F:D3:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87B93595D32256827695BB798ECCD9433FE511E0D568BDD612086F02D97E0712/0/FD2F3FEE841FE34AD95D1059730BC2666FD33DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD2F3FEE841FE34AD95D1059730BC2666FD33DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87B93595D32256827695BB798ECCD9433FE511E0D568BDD612086F02D97E0712/0/AS11816.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.0.0/21
                  181.41.20.0-181.41.47.255
                  181.41.50.0-181.41.57.255
                  181.41.60.0/22
                  186.189.0.0-186.189.9.255
                  186.189.12.0-186.189.19.255
                  186.189.22.0/23
                  186.189.26.0/23
                  186.189.32.0/21
                  186.189.42.0-186.189.51.255
                  186.189.56.0/21
                  186.189.128.0-186.189.169.255
                  186.189.172.0-186.189.191.255
                  201.229.0.0/23
                  201.229.4.0-201.229.23.255
                  201.229.32.0-201.229.55.255
                  201.229.60.0-201.229.65.255
                  201.229.68.0/23
                  201.229.72.0/22
                  201.229.80.0/21
                  201.229.90.0-201.229.115.255
                  201.229.118.0-201.229.127.255
                IPv6:
                  2800:ad0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:d5:f7:cd:6e:8c:7e:6e:22:c3:85:c8:5d:f9:df:99:2f:89:
         97:23:4e:d3:66:b0:83:99:7e:45:fe:15:76:c1:38:0e:5e:a0:
         49:69:76:8f:a6:7c:dc:35:ba:dd:e1:3e:a6:c7:e1:23:2b:dc:
         f6:cd:46:9c:ce:d4:27:a0:a2:fb:a4:ba:ff:d8:d4:19:b0:8f:
         b8:8d:06:be:ae:98:19:fc:62:34:d1:d4:7f:33:a9:cf:a9:1d:
         af:62:92:b9:5d:3f:09:5e:25:32:e0:ba:48:cc:e4:67:c9:0c:
         76:7f:ee:91:99:d7:85:24:2d:97:8d:21:24:e9:11:c9:a2:4a:
         fa:7e:df:98:bf:38:2c:77:b8:21:d5:d0:02:a0:0f:26:1f:ce:
         60:a0:45:15:d0:d6:a0:8a:ef:3d:38:3a:cb:82:53:80:33:41:
         8e:86:8f:37:6c:d0:16:4d:70:7f:9c:8d:82:93:4f:71:55:52:
         92:b0:c0:17:ba:3c:f2:d5:29:12:9b:05:56:8c:fa:52:a5:1b:
         0c:48:3a:50:49:20:c5:d7:79:20:d1:69:cc:c9:29:5f:a6:40:
         31:cf:3f:d0:c6:8b:c3:4c:ce:00:e9:14:0d:51:e5:da:0a:c9:
         d5:09:7e:1e:ec:b0:1c:01:61:d5:f9:36:ee:05:0c:cc:95:17:
         a9:62:34:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:20 2024 by rpki-client on console-fra.rpki-client.org