Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134352e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3134352e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          Hn4BI3KTtiltuh6gIGzmWwskYofASZDfUlW9EcQfJ2w=
Subject key identifier:   31:BF:2D:EB:A6:FE:55:51:84:41:0E:E0:76:3C:F6:FA:9D:E0:29:C8
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       04B02EED838553D1C4FDCEE2CF16AAD7E5FC18C0
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134352e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:50 +0000
ROA not before:           Tue 04 Feb 2025 18:32:50 +0000
ROA not after:            Tue 03 Feb 2026 18:37:50 +0000
asID:                     52323
IP address blocks:        181.16.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b0:2e:ed:83:85:53:d1:c4:fd:ce:e2:cf:16:aa:d7:e5:fc:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:50 2025 GMT
            Not After : Feb  3 18:37:50 2026 GMT
        Subject: CN=31BF2DEBA6FE555184410EE0763CF6FA9DE029C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:66:aa:38:a0:d7:3c:c9:10:1b:2e:65:21:31:
                    1f:a2:3b:34:0a:63:55:fe:59:0f:e6:14:a0:eb:94:
                    2a:07:dd:58:08:6e:de:13:54:2b:37:92:0e:07:5a:
                    c7:04:be:ed:35:bf:f6:bb:62:ba:57:37:f0:10:2d:
                    ed:6d:07:a0:19:3d:fb:c1:ab:d9:44:c8:78:ff:bf:
                    a4:95:0f:5e:55:f1:ff:1a:ee:c5:b6:53:00:35:5e:
                    4a:d5:1e:8b:3d:31:56:87:ab:92:d7:9c:44:34:76:
                    c4:e9:e1:7f:fa:5e:21:5b:a7:7d:fb:cf:09:91:f7:
                    a9:f7:79:11:fb:1f:54:81:6b:c3:ac:9e:43:ee:f4:
                    27:16:1d:be:b7:17:e5:92:4f:7e:ba:1f:4b:ff:ea:
                    72:a5:ee:35:42:c3:15:0e:e5:01:f8:87:74:b6:50:
                    bd:05:2b:ae:40:51:79:2c:7d:84:98:71:8c:bb:b7:
                    1e:d1:1b:c0:31:26:c9:7a:8c:66:23:40:2b:8a:44:
                    df:bd:1d:30:80:29:bc:05:0c:f0:17:5c:63:bd:b4:
                    94:d2:96:47:b6:03:50:e1:77:ac:d0:25:e7:7d:79:
                    43:a9:a0:f2:c7:e7:dd:52:64:c0:34:fc:dd:ae:df:
                    b3:7a:c4:99:be:90:9b:bb:4f:39:9e:5f:3b:d9:e8:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BF:2D:EB:A6:FE:55:51:84:41:0E:E0:76:3C:F6:FA:9D:E0:29:C8
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134352e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ce:bb:4e:c0:a6:b2:97:4b:4c:32:5b:35:11:fc:a8:42:a2:
         c2:8e:d4:71:9d:cb:0b:45:4b:41:bd:e7:9a:b0:e0:93:91:b9:
         d4:5c:43:a1:2a:8f:43:b1:6a:f6:78:eb:b8:37:8f:59:21:fd:
         d6:d4:68:57:65:7a:e0:f5:35:a7:21:49:f3:e7:1f:b6:29:d8:
         8a:00:8f:de:87:06:c1:cd:6c:e0:87:d5:af:bd:49:b9:6c:f0:
         ec:3c:42:b0:76:89:6b:b9:a1:73:40:74:5a:2b:81:98:53:77:
         39:c6:e1:0c:30:b9:4e:08:ad:11:10:df:da:55:12:05:3e:54:
         c8:61:f3:9b:e8:7d:72:92:a1:d0:a8:69:68:fe:38:27:29:8f:
         46:7e:9b:d2:5b:de:b0:bb:28:bc:0c:5c:53:6b:73:e9:a7:3d:
         60:61:2a:41:b3:73:d4:54:59:ac:06:94:39:cb:2e:b4:71:b4:
         32:3d:a1:b5:d8:c9:24:c7:12:3d:ef:1e:9d:14:74:dc:48:d3:
         bd:66:19:a8:f7:e6:1b:60:88:e7:13:e4:39:0b:75:dd:53:26:
         46:a2:48:cc:80:c1:27:e6:3b:81:e9:c3:cb:53:b2:9c:a9:53:
         66:7f:75:a7:2a:34:73:fc:cf:46:71:dd:7d:5d:b6:2c:97:5e:
         f9:d3:02:43
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBLAu7YOFU9HE/c7izxaq1+X8GMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNTAyMDQxODMyNTBaFw0yNjAyMDMxODM3NTBaMDMxMTAvBgNV
BAMTKDMxQkYyREVCQTZGRTU1NTE4NDQxMEVFMDc2M0NGNkZBOURFMDI5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcZqo4oNc8yRAbLmUhMR+iOzQK
Y1X+WQ/mFKDrlCoH3VgIbt4TVCs3kg4HWscEvu01v/a7YrpXN/AQLe1tB6AZPfvB
q9lEyHj/v6SVD15V8f8a7sW2UwA1XkrVHos9MVaHq5LXnEQ0dsTp4X/6XiFbp337
zwmR96n3eRH7H1SBa8OsnkPu9CcWHb63F+WST366H0v/6nKl7jVCwxUO5QH4h3S2
UL0FK65AUXksfYSYcYy7tx7RG8AxJsl6jGYjQCuKRN+9HTCAKbwFDPAXXGO9tJTS
lke2A1Dhd6zQJed9eUOpoPLH591SZMA0/N2u37N6xJm+kJu7TzmeXzvZ6EoRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUMb8t66b+VVGEQQ7gdjz2+p3gKcgwHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzEzNDM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALUQkTAN
BgkqhkiG9w0BAQsFAAOCAQEAFs67TsCmspdLTDJbNRH8qEKiwo7UcZ3LC0VLQb3n
mrDgk5G51FxDoSqPQ7Fq9njruDePWSH91tRoV2V64PU1pyFJ8+cftinYigCP3ocG
wc1s4IfVr71JuWzw7DxCsHaJa7mhc0B0WiuBmFN3OcbhDDC5TgitERDf2lUSBT5U
yGHzm+h9cpKh0KhpaP44JymPRn6b0lvesLsovAxcU2tz6ac9YGEqQbNz1FRZrAaU
OcsutHG0Mj2htdjJJMcSPe8enRR03EjTvWYZqPfmG2CI5xPkOQt13VMmRqJIzIDB
J+Y7genDy1OynKlTZn91pyo0c/zPRnHdfV22LJde+dMCQw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:02 2025 by rpki-client