Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3132392e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3132392e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          g4UHvdIDpM24NSG76YNRLHki6F1vj+cJ5rt52ZQhzdc=
Subject key identifier:   CD:AA:70:09:F7:85:72:F9:71:D8:B6:8C:60:C4:88:DC:31:6F:A1:AF
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       1776FBB8F04192ABB119C29FF27E40D9FFE3B1D9
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3132392e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:20 +0000
ROA not before:           Tue 05 Mar 2024 18:02:20 +0000
ROA not after:            Tue 04 Mar 2025 18:07:20 +0000
asID:                     52323
IP address blocks:        181.16.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:76:fb:b8:f0:41:92:ab:b1:19:c2:9f:f2:7e:40:d9:ff:e3:b1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:20 2024 GMT
            Not After : Mar  4 18:07:20 2025 GMT
        Subject: CN=CDAA7009F78572F971D8B68C60C488DC316FA1AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:f7:88:8d:2c:da:4e:51:c2:a5:9f:34:b4:
                    f3:e5:2c:ed:a9:04:f5:c5:e1:80:29:63:a3:99:20:
                    ab:14:41:d8:4a:f7:b7:f4:b3:22:ef:cf:8a:5a:ac:
                    8c:ae:71:16:4e:ae:f1:3c:ce:50:ce:d1:20:de:98:
                    ac:e8:b8:27:09:83:7a:60:40:f7:1f:7c:2f:b2:15:
                    67:b9:87:35:72:0e:a2:04:d5:f2:5a:a8:f1:01:4e:
                    14:47:92:c5:15:4e:88:86:6a:0e:e3:e3:db:9c:09:
                    a4:c0:14:27:44:d5:4e:66:8c:6f:1c:b8:c9:65:d2:
                    6e:95:4e:e1:74:75:c0:c2:77:10:7f:8d:a8:85:1f:
                    63:89:37:81:90:bf:53:38:85:fb:8b:06:de:b7:d6:
                    18:03:5f:3a:0b:b7:89:ec:67:56:48:82:5b:24:06:
                    d0:60:c4:3b:8c:a9:1b:60:d4:6c:ca:88:ac:30:30:
                    c1:88:37:db:57:18:8e:2a:cc:da:92:24:66:e6:9b:
                    06:ab:7d:91:8d:5c:f5:33:17:7a:b6:24:3c:a3:e9:
                    53:69:33:3f:5c:43:8f:f3:63:1f:3b:76:82:55:cc:
                    0b:f5:59:55:52:0b:64:07:0b:60:ca:69:e2:74:87:
                    20:0d:8c:86:f3:5e:41:58:23:57:d5:2a:2f:24:02:
                    04:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AA:70:09:F7:85:72:F9:71:D8:B6:8C:60:C4:88:DC:31:6F:A1:AF
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3132392e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:2c:98:89:c4:84:8a:b8:4f:c8:c5:7a:13:4a:f4:cf:01:
         0e:29:d6:3f:56:af:9c:6a:c8:e6:fb:d1:34:5d:2f:04:fe:e5:
         a4:fa:2c:a5:d0:36:c4:19:08:3a:cf:0a:c8:07:78:07:8f:37:
         b3:37:d5:da:4a:72:45:49:ae:93:59:9f:21:27:da:74:26:bd:
         3e:39:71:16:18:95:21:4c:65:b2:76:17:99:94:ac:f2:fb:ab:
         70:15:cb:4a:89:fe:16:e0:5f:0b:fa:bd:18:de:e2:dc:96:41:
         cf:8b:f9:7f:5a:1b:9b:4f:05:f3:c7:63:02:6f:ec:e0:12:f4:
         47:9b:dc:e2:a6:5c:23:e3:0c:cf:76:01:6d:ee:07:88:4e:3b:
         27:a0:db:a3:81:48:bc:d4:9c:cc:8a:65:71:f2:56:20:1e:59:
         84:1b:77:cc:fd:3a:ea:cb:d1:c6:9f:b6:48:ec:1d:fb:19:90:
         ef:b3:c3:04:7b:ab:c4:8a:26:15:f6:50:e0:5f:7e:c8:7a:15:
         10:89:f3:31:33:b4:5a:f4:c0:5c:ec:fc:01:87:62:45:6f:f9:
         80:dc:c5:e5:36:b4:fc:2b:4b:c9:25:0c:3a:a9:30:47:ec:f8:
         4a:17:fe:76:5e:af:92:f9:03:30:9d:76:34:f9:b9:2a:bc:1a:
         bf:8d:4a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:17 2024 by rpki-client on console-fra.rpki-client.org