Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133362e302f32312d3234203d3e203532333233.roa
File:                     3138312e31362e3133362e302f32312d3234203d3e203532333233.roa (raw, json)
Hash identifier:          H55K7odfY2o/G1Y8bcClw2uMmKjfpRtbr3570csOIGo=
Subject key identifier:   94:9C:B0:AD:9C:87:29:40:E6:96:4C:8A:70:33:6B:7D:A9:D9:7D:63
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       6A1CAF53111D0515B25B31730C3885BE5EC2BD1F
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133362e302f32312d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:43 +0000
ROA not before:           Tue 04 Feb 2025 18:32:43 +0000
ROA not after:            Tue 03 Feb 2026 18:37:43 +0000
asID:                     52323
IP address blocks:        181.16.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1c:af:53:11:1d:05:15:b2:5b:31:73:0c:38:85:be:5e:c2:bd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:43 2025 GMT
            Not After : Feb  3 18:37:43 2026 GMT
        Subject: CN=949CB0AD9C872940E6964C8A70336B7DA9D97D63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:16:ef:c4:c4:ec:f9:d7:2e:03:9c:f6:83:
                    b0:99:21:e5:47:59:b1:34:a4:1e:72:fe:63:dd:bd:
                    9b:2d:a3:15:6d:68:ed:f5:fb:d3:92:91:02:9b:cb:
                    ea:43:90:0e:5a:b7:c8:bd:5f:29:f6:19:21:c7:ae:
                    48:e0:3b:3b:83:23:ec:70:b3:ad:af:f0:4f:14:18:
                    b3:16:da:c1:c0:09:ca:be:41:1a:36:34:4a:b5:61:
                    73:26:87:66:c7:01:35:4d:41:9b:d0:e6:b6:a5:e0:
                    a9:c2:31:6a:6c:aa:00:9c:44:33:18:7c:c7:a6:7c:
                    17:d2:2b:b9:15:f0:b7:b3:3c:6b:b1:33:e5:f5:70:
                    69:6c:9c:e6:e1:41:05:ee:bb:21:ca:bb:5d:08:a9:
                    b8:91:da:3a:37:ff:ac:4a:e0:af:62:63:79:31:4c:
                    bc:0b:35:11:5e:0c:68:24:8a:a1:15:d3:33:2d:84:
                    a9:0a:92:3a:ff:2d:76:52:e7:77:43:a2:d0:c2:79:
                    68:60:d3:8f:aa:b2:62:bb:ed:ff:da:ad:81:ee:3b:
                    e2:df:40:26:85:bf:0a:ba:f7:c0:de:9e:28:c0:e1:
                    a6:4a:0d:1f:87:a1:2b:95:e3:ae:ff:30:95:a6:49:
                    94:aa:92:8e:26:c4:f6:2e:16:68:32:50:31:3d:b8:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9C:B0:AD:9C:87:29:40:E6:96:4C:8A:70:33:6B:7D:A9:D9:7D:63
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133362e302f32312d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:0f:33:ac:0f:5e:b0:23:6a:46:f2:cf:23:e7:df:43:23:0b:
         2b:a8:30:d3:ce:a0:d3:d9:ec:bb:ac:ab:e7:d3:93:e6:69:44:
         c9:a4:d0:fb:f1:c3:33:4b:0e:43:0c:49:e4:04:38:e1:fa:36:
         de:de:4a:e2:8e:2c:f3:40:18:53:fd:d8:9a:51:0f:92:b2:93:
         a6:20:a3:4c:f5:1b:2d:21:65:26:54:02:b4:41:69:c6:f2:74:
         b8:89:50:7f:37:7c:6a:8a:b5:26:56:53:a2:bf:08:e8:6f:59:
         87:c7:92:34:71:7c:3b:cf:44:1f:16:17:11:7e:ad:15:57:10:
         f0:5e:15:1d:77:53:53:a1:9e:47:69:db:af:74:a5:7c:62:94:
         2e:6d:69:dd:eb:49:8a:8c:d2:2e:b3:0a:25:75:9b:d3:3a:54:
         eb:5d:59:c1:52:c1:1f:68:48:27:58:82:c0:53:ea:fa:99:ff:
         4c:61:22:f7:6d:2d:65:7d:26:9e:c4:21:2c:d0:c6:db:39:9c:
         04:92:28:3f:a9:55:05:81:e3:f2:4b:e6:0e:85:f1:66:2b:b1:
         37:57:9d:d6:73:56:17:b1:23:be:8c:5c:6d:f3:46:c0:e6:b3:
         b0:d6:b4:ad:62:49:85:88:57:e8:11:39:c9:7a:dc:69:15:74:
         32:7c:f6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:55:05 2025 by rpki-client