Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134342e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3134342e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          8qcunW2Lzbk2yWK13yjsZP02llu3dlk3kCY93BDLn6A=
Subject key identifier:   9C:46:AC:E7:DD:26:9F:D4:65:94:34:69:FD:98:CF:17:0C:30:F6:7F
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       3B369B972BE86A73738ACE7AF450705A97EEA32A
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134342e302f32342d3234203d3e203532333233.roa
Signing time:             Mon 24 Jun 2024 17:35:00 +0000
ROA not before:           Mon 24 Jun 2024 17:30:00 +0000
ROA not after:            Mon 23 Jun 2025 17:35:00 +0000
asID:                     52323
IP address blocks:        181.16.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:36:9b:97:2b:e8:6a:73:73:8a:ce:7a:f4:50:70:5a:97:ee:a3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jun 24 17:30:00 2024 GMT
            Not After : Jun 23 17:35:00 2025 GMT
        Subject: CN=9C46ACE7DD269FD465943469FD98CF170C30F67F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:11:11:bb:63:d5:90:5d:b5:7d:39:a4:cc:
                    0b:ee:e4:69:47:83:d3:ad:9a:09:f5:62:84:59:19:
                    7f:1f:b8:01:33:4b:14:6e:68:d9:4c:b2:79:c6:13:
                    3b:05:c9:af:54:e5:cf:53:16:b8:a2:0a:3c:f9:b9:
                    68:24:31:29:92:30:e6:4f:26:04:86:ad:3d:05:39:
                    5d:a1:87:17:46:da:90:69:fd:2e:d6:35:9e:1c:30:
                    71:af:ee:55:40:9d:18:2e:dc:ff:56:22:72:d5:d2:
                    2f:8f:fe:2c:70:25:04:a4:0c:ea:ff:c2:28:be:3a:
                    73:8f:db:32:eb:f6:dd:b4:bf:a3:b6:0b:48:91:0f:
                    38:d4:bf:8a:e1:d1:0d:8b:f4:7f:b9:1e:74:52:e0:
                    e6:e5:16:b5:34:b8:1a:cb:52:9a:c7:30:48:42:4e:
                    b1:ae:d5:ae:04:5e:81:36:66:a5:95:a7:11:fa:17:
                    d7:7a:a0:60:ff:90:29:a7:e2:23:d3:88:35:33:57:
                    d5:be:b6:82:44:1f:40:06:be:2e:f4:97:72:45:9b:
                    90:2d:60:ca:24:c4:10:e4:39:d5:c5:17:1e:7f:c1:
                    7b:da:83:c7:97:62:40:bc:b5:72:1a:f0:11:e4:6a:
                    84:40:2e:20:2b:50:e7:05:3e:cf:d1:f5:f3:b0:d3:
                    c6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:46:AC:E7:DD:26:9F:D4:65:94:34:69:FD:98:CF:17:0C:30:F6:7F
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134342e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ca:c0:8c:39:1f:1a:25:86:d9:13:0c:8d:f8:d1:ea:77:bc:
         11:26:9c:a7:33:68:52:ee:6a:8a:ae:33:9e:54:cc:cf:92:ad:
         b2:f8:df:d9:17:53:42:03:3f:a8:6a:29:52:e6:ad:02:a9:27:
         ef:ca:29:3a:ad:bc:bb:c5:70:e5:d3:07:88:cc:44:f8:c1:f0:
         0a:16:b5:14:66:26:9c:8b:ec:33:f4:44:d7:28:f0:fb:ad:68:
         f1:f8:61:7f:c2:e6:2a:d3:77:cb:4d:30:63:09:62:9e:34:b8:
         9f:c7:8f:2d:2e:92:b2:62:d9:53:89:e8:70:93:26:46:9f:8d:
         ac:a9:2b:17:66:f1:e2:38:3d:89:b7:2d:1a:4f:c8:b7:17:63:
         f4:d5:df:b8:d4:bf:d5:0d:57:8e:8c:50:e3:0c:ae:d2:65:44:
         a3:d0:6e:68:72:75:2d:48:86:dd:de:3e:53:f3:60:e4:56:3a:
         2f:5b:70:f7:16:2a:23:20:75:23:f0:09:d7:40:91:70:41:ca:
         3c:26:cc:f0:17:63:c4:66:29:e8:d4:6f:10:c3:9e:28:72:c2:
         22:e6:6d:4a:32:c8:5a:8f:56:5d:ec:ba:c9:f5:87:b8:e5:85:
         27:bc:ee:92:f8:ca:8c:82:d5:f1:55:0d:44:82:c9:80:3f:32:
         0d:69:95:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:37 2024 by rpki-client on console-ams.rpki-client.org