Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133322e302f32322d3234203d3e203532333233.roa
File:                     3138312e31362e3133322e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier:          AkytFXpHxTCxkZ1lQY99/L21CHVkiTpPukdHRVUjav0=
Subject key identifier:   F4:17:D3:2D:D8:76:D9:4D:D3:8D:18:74:97:CE:86:09:C9:75:90:E0
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       3D8F65BDF0F6AD2E19B2E8728778DA13C78661FB
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133322e302f32322d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:38 +0000
ROA not before:           Tue 04 Feb 2025 18:32:38 +0000
ROA not after:            Tue 03 Feb 2026 18:37:38 +0000
asID:                     52323
IP address blocks:        181.16.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8f:65:bd:f0:f6:ad:2e:19:b2:e8:72:87:78:da:13:c7:86:61:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:38 2025 GMT
            Not After : Feb  3 18:37:38 2026 GMT
        Subject: CN=F417D32DD876D94DD38D187497CE8609C97590E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:1a:b3:d4:04:8c:f9:38:c5:42:7d:d2:67:
                    a3:67:31:3f:e1:1b:9a:34:0c:e9:36:26:d6:bf:dd:
                    ef:17:de:d2:37:35:ec:50:39:bf:64:bf:3b:db:ca:
                    20:64:e1:a1:81:54:37:55:af:16:8c:99:52:47:65:
                    ee:a8:f2:4a:92:3f:f1:d1:d6:e4:64:1e:4e:47:21:
                    15:aa:45:18:44:0a:58:90:b6:69:f3:03:e4:63:41:
                    ae:c9:45:da:62:dd:58:f5:bb:d5:04:2c:d0:5c:43:
                    d1:f3:ca:5d:0f:37:64:d0:9a:85:5c:06:18:19:90:
                    56:8c:de:21:8e:c5:4c:cc:0c:15:17:ab:2c:fd:01:
                    87:2d:b9:27:68:9a:9d:2c:af:18:e7:4e:ba:c3:ed:
                    2a:9c:86:bb:a1:91:d6:3f:03:b5:12:48:49:29:01:
                    05:6a:16:f4:cb:d7:29:dc:dd:72:66:c4:4a:21:93:
                    b0:e1:e8:a3:2b:b0:22:18:3c:f8:14:af:7b:7e:cf:
                    85:04:f4:5e:25:29:fe:1f:96:b5:d1:fa:fb:8c:17:
                    cb:24:ad:83:27:3e:ff:9d:70:0e:86:92:73:59:24:
                    20:be:2c:51:ba:0c:f5:d2:f5:2b:79:73:b8:e1:c8:
                    01:a4:f4:2f:57:d3:83:6b:17:d2:5b:1e:7a:47:e6:
                    85:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:17:D3:2D:D8:76:D9:4D:D3:8D:18:74:97:CE:86:09:C9:75:90:E0
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133322e302f32322d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:50:6a:28:57:20:34:b0:d0:4b:f6:b1:35:77:27:0a:a8:d7:
         92:d7:b8:fc:9e:37:e2:0a:ba:d1:cc:6c:3d:06:56:92:d6:78:
         cb:30:c1:bf:90:f9:7a:45:33:e7:ea:e3:0d:65:5c:42:c9:c9:
         34:0b:9e:de:0e:69:a2:f2:e6:7d:58:16:fb:e8:bf:92:78:d9:
         58:0b:c9:5c:ff:26:20:78:dc:1c:bf:56:4b:5b:03:05:37:40:
         19:0d:97:10:1c:c0:ab:82:eb:9a:0a:8b:ce:cf:38:6c:82:71:
         61:73:dc:b0:43:19:a0:ec:26:07:fe:94:67:2b:20:ee:f8:5a:
         b2:46:e2:28:84:19:62:fc:8b:c0:ce:54:ca:8d:ae:15:9c:b8:
         aa:53:69:5c:e8:4c:aa:e5:6a:c4:68:fb:5b:68:a2:d0:84:4a:
         0d:54:d0:25:50:34:cb:e6:65:b8:20:dd:34:39:99:03:8d:a4:
         a9:65:78:5f:2c:83:36:fc:cf:21:99:7f:93:b7:9e:09:43:1c:
         ba:09:d3:c7:6c:cd:3d:ff:21:8b:41:a4:73:cc:83:a5:ea:c2:
         bf:1d:b2:76:9f:39:ad:8b:7e:96:2f:59:12:49:06:b5:42:b9:
         82:ae:39:9c:2c:10:df:2a:d6:eb:80:d6:d6:a8:c9:f8:5e:2d:
         e0:c6:80:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:25 2025 by rpki-client