Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134382e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3134382e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          AdKj7ncsq8qhfR6eKcTrciKcu2rUzA8HhnDESqzXX3A=
Subject key identifier:   CF:7A:4B:77:84:31:DE:09:1C:3B:08:CF:CB:9D:04:47:00:D9:55:DC
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       600799D2DAA165595BE6FFEBFE1534FAB55C270B
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134382e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:13 +0000
ROA not before:           Tue 05 Mar 2024 18:02:13 +0000
ROA not after:            Tue 04 Mar 2025 18:07:13 +0000
asID:                     52323
IP address blocks:        181.16.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:07:99:d2:da:a1:65:59:5b:e6:ff:eb:fe:15:34:fa:b5:5c:27:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:13 2024 GMT
            Not After : Mar  4 18:07:13 2025 GMT
        Subject: CN=CF7A4B778431DE091C3B08CFCB9D044700D955DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:51:9b:ac:07:8e:61:fe:3e:ad:d8:f0:dd:
                    ad:49:50:81:d5:aa:45:91:fb:f7:7f:38:0a:fc:71:
                    19:6d:80:98:9b:72:61:5e:17:8a:5e:1a:0c:83:d5:
                    a9:c3:34:f9:bf:0f:bc:a4:50:a6:42:be:a9:cc:35:
                    53:fd:bd:8f:b0:2d:31:e4:1c:3a:87:a1:2b:72:f4:
                    97:7f:2f:15:86:71:8e:5f:13:4c:40:fa:10:d1:65:
                    2a:e1:f8:82:05:83:74:29:2b:21:df:c0:4f:d1:6e:
                    e8:aa:73:ae:76:d2:fa:9f:4d:67:8d:4d:9a:0c:f3:
                    7e:fb:63:ba:49:5b:26:98:6c:85:49:1b:9d:6a:40:
                    9c:c3:a3:eb:fd:81:30:ad:44:5f:24:f8:63:af:85:
                    3c:4b:7b:1f:24:1f:0e:0a:6d:85:eb:7c:b9:cd:e3:
                    46:1c:b0:1d:42:b1:bc:9a:f8:24:e4:c1:82:15:4f:
                    b1:e3:64:bf:91:9f:84:47:68:a2:95:07:26:de:f4:
                    48:7a:cd:2d:fc:2f:ae:59:e6:5f:6a:c4:0f:8e:f4:
                    37:57:b1:89:09:31:74:f6:68:98:9f:c7:87:67:7c:
                    90:1b:7f:fa:05:00:2c:5c:ec:60:c4:c9:d1:ed:f0:
                    25:64:cd:cc:40:35:46:66:a9:90:b0:fc:7a:d0:e6:
                    68:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7A:4B:77:84:31:DE:09:1C:3B:08:CF:CB:9D:04:47:00:D9:55:DC
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134382e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:76:91:f2:e0:5c:b6:98:d7:1b:5e:f0:20:b3:66:74:ec:b8:
         91:ee:43:66:ce:6a:40:03:0a:02:34:6d:e5:14:6d:73:22:e2:
         53:2e:59:af:59:de:2c:7f:3a:da:11:9f:9d:a4:42:b8:d9:35:
         17:28:0a:ad:6c:b8:04:97:43:9d:3a:8c:4d:85:5d:1a:3e:79:
         07:54:bd:c8:f8:44:6a:e5:12:04:c2:87:e5:a3:75:55:84:54:
         23:53:3a:ea:8d:72:13:cc:3b:4e:6f:6b:7b:40:35:e0:ac:3f:
         9b:6a:b1:d5:82:d2:ec:24:7f:79:e0:3d:79:c1:f6:b4:6c:bc:
         af:6a:6a:15:d7:1b:4b:67:f4:61:28:9d:63:1b:6b:47:81:d4:
         66:51:07:68:41:3d:42:81:63:1d:b0:0a:33:26:51:e1:17:a1:
         96:21:74:f6:e9:09:af:7c:b5:cf:d1:3f:86:57:58:79:34:53:
         9e:d3:cf:bb:96:ef:9c:fb:56:98:8d:c0:2f:1b:77:1c:29:a1:
         45:dd:c2:30:b5:7f:1c:c1:b0:a0:25:46:3a:21:c2:bb:a0:9d:
         5e:dc:81:21:d4:d6:47:1b:4b:6e:d1:0e:79:e9:9a:19:20:26:
         ac:70:52:af:98:21:c2:ff:d3:46:b9:0a:97:4a:15:b9:c6:c4:
         8d:f4:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:23 2024 by rpki-client on console-ams.rpki-client.org