Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134392e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3134392e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          K3nUF7LnXP/SVI89ILEeDctWaNe2J/+Doi7iEWycJVQ=
Subject key identifier:   45:CF:69:E9:D3:08:6D:10:DD:22:D2:93:20:DA:82:B6:EB:9C:AB:1E
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       52F09EBF9865F562874DD85961FAB71D5C45D862
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134392e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:16 +0000
ROA not before:           Tue 05 Mar 2024 18:02:16 +0000
ROA not after:            Tue 04 Mar 2025 18:07:16 +0000
asID:                     52323
IP address blocks:        181.16.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f0:9e:bf:98:65:f5:62:87:4d:d8:59:61:fa:b7:1d:5c:45:d8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:16 2024 GMT
            Not After : Mar  4 18:07:16 2025 GMT
        Subject: CN=45CF69E9D3086D10DD22D29320DA82B6EB9CAB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d1:7d:cc:f1:c7:d7:aa:61:cf:72:79:d0:98:
                    d9:6f:8e:97:07:33:88:4b:5e:28:d6:92:d4:91:be:
                    e0:e6:42:90:1b:b4:9f:c6:90:1c:98:67:b5:b8:10:
                    00:fa:5e:81:85:c1:12:59:b9:79:49:67:69:e3:5b:
                    6b:bb:02:7c:52:b1:24:e3:17:18:3d:43:65:1c:d8:
                    46:3b:c0:fc:f1:c2:ba:01:03:94:40:03:61:56:b5:
                    29:41:aa:3e:59:77:61:8c:70:00:24:24:bd:df:97:
                    2d:aa:40:be:d1:b6:60:9f:c0:bb:6f:48:bf:a4:9d:
                    69:a1:eb:41:73:dc:a7:04:37:c0:e7:27:e2:21:3d:
                    42:b0:ef:3b:c5:40:db:4f:22:52:15:98:ca:ee:6d:
                    fc:35:b8:43:37:a9:2a:48:23:b6:e9:e7:39:cd:f5:
                    39:2b:d2:ba:78:d5:34:c6:ad:bd:87:42:28:ea:2e:
                    04:36:79:17:08:aa:22:58:08:72:75:06:d2:0e:c5:
                    da:dc:ad:94:b9:4e:13:37:5e:74:2a:78:7c:ed:90:
                    5c:a0:0d:0e:b1:09:c3:75:4e:8b:47:bc:42:1e:ee:
                    e7:f1:bf:cc:a9:8c:29:6e:68:1f:28:6e:32:b1:b4:
                    35:47:59:96:1e:cf:a9:38:af:3f:1d:93:ae:6c:9e:
                    70:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CF:69:E9:D3:08:6D:10:DD:22:D2:93:20:DA:82:B6:EB:9C:AB:1E
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134392e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:6b:ce:28:ce:4d:0e:6b:86:1f:5e:2a:d3:06:b6:08:d8:53:
         74:71:48:aa:63:b3:90:c4:41:38:a2:a3:8d:96:29:a9:97:65:
         db:cf:36:d9:42:17:05:2b:49:47:98:69:36:fc:92:4e:b7:6d:
         3b:9e:56:38:f0:c7:51:84:00:25:10:d7:cc:83:8c:96:36:76:
         6e:71:46:b3:09:93:9c:47:f3:91:2f:6f:65:37:c5:24:99:16:
         80:eb:94:12:b6:0e:62:e3:5e:63:a3:9d:07:7f:c6:28:38:86:
         1c:eb:7a:87:a0:5a:c6:5d:76:35:6b:85:ca:1b:4b:89:ba:ea:
         60:31:32:b7:22:f7:9a:3c:8e:05:ca:3a:df:26:9b:01:f6:18:
         7f:67:2b:57:0b:5f:3c:65:40:12:60:4b:3c:bc:0a:ce:7f:b4:
         b5:aa:3e:6d:95:a9:4d:38:38:28:48:5f:05:54:01:51:05:14:
         50:42:04:06:c8:6a:b5:32:28:0c:f0:46:8c:a5:6e:4a:f6:63:
         0d:db:2a:3b:3a:71:05:f9:76:58:b4:ec:e5:8a:34:d6:7b:5c:
         65:f0:ac:37:96:d0:c0:0f:67:9a:16:d2:99:09:82:bb:0f:a5:
         6b:4a:75:df:e2:22:87:eb:00:42:ab:14:a9:40:72:5b:64:b9:
         9f:9e:b4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:37 2024 by rpki-client on console-ams.rpki-client.org