Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135302e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3135302e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          +OtLApZO2ZloClLHo3RMCgLaUNFTfX1E8rdiQ4zdewM=
Subject key identifier:   B5:24:74:B2:E5:52:1A:16:E8:BA:63:E8:68:08:9F:01:AA:75:3F:C6
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       3B72345364ED04D7BD2123FBE9EE8ABF1F0442C9
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135302e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:09 +0000
ROA not before:           Tue 05 Mar 2024 18:02:09 +0000
ROA not after:            Tue 04 Mar 2025 18:07:09 +0000
asID:                     52323
IP address blocks:        181.16.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:72:34:53:64:ed:04:d7:bd:21:23:fb:e9:ee:8a:bf:1f:04:42:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:09 2024 GMT
            Not After : Mar  4 18:07:09 2025 GMT
        Subject: CN=B52474B2E5521A16E8BA63E868089F01AA753FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:12:7e:a8:a4:44:cf:92:75:a1:43:72:77:5b:
                    61:81:27:ad:6c:f1:d4:ab:b6:61:6a:54:03:5b:94:
                    56:03:6c:b3:30:a0:4f:1f:12:c3:04:ed:d2:31:13:
                    8b:19:2d:82:9c:bf:97:4e:90:a9:97:8e:0a:cd:0e:
                    f5:55:a5:cf:17:e0:64:2c:54:85:80:95:68:e0:78:
                    94:9f:cc:eb:cd:f7:78:07:3d:4f:8b:53:1d:df:1a:
                    67:b9:59:13:de:57:eb:4c:37:98:16:fe:36:7c:8a:
                    7f:e3:48:9c:0a:57:d9:3b:3a:68:80:61:2e:50:b7:
                    f9:5a:22:a8:32:43:a7:71:c9:85:16:d7:b8:5e:dc:
                    a3:69:9d:8f:00:08:a5:74:43:a6:cc:b3:f7:40:e6:
                    0b:85:6f:fa:99:72:eb:b9:10:97:65:c5:72:8d:76:
                    18:ea:10:3f:3e:53:96:1c:04:47:fe:ab:93:5a:d0:
                    74:7e:da:ff:53:21:65:13:f2:e6:94:c9:40:6f:1c:
                    4f:0f:c2:e3:08:be:e6:e1:9c:b8:5d:5a:48:95:0e:
                    04:01:81:a6:6a:bc:3f:9f:c0:d6:ed:a4:58:15:e0:
                    50:35:45:26:e9:ee:6d:e4:86:ab:23:4e:88:59:e9:
                    39:c4:46:ef:a7:ab:52:e7:01:e7:e6:1d:6b:ef:66:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:24:74:B2:E5:52:1A:16:E8:BA:63:E8:68:08:9F:01:AA:75:3F:C6
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135302e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:79:e0:43:f9:a0:d9:59:e5:ab:13:71:5b:65:2a:ba:9f:3c:
         8c:55:75:2f:48:64:b1:b4:9d:71:89:6f:36:04:0b:d9:19:13:
         c5:01:a2:14:f9:75:c6:9e:57:d2:aa:7f:98:60:be:94:2e:47:
         31:ad:73:93:96:08:f8:ca:f6:eb:ff:31:9f:a3:84:62:a8:86:
         9d:84:64:fc:bd:bc:1a:f9:95:e3:c6:98:e8:01:8f:69:25:3f:
         fe:d0:eb:51:3a:8e:93:17:bc:44:f2:1e:a6:c2:ca:fc:51:c5:
         bb:0a:13:5b:e7:e5:46:f6:cc:03:b2:eb:4d:26:f6:ae:7c:bd:
         8d:f8:da:84:0c:f4:64:4b:8a:7a:7e:68:ad:e0:9f:ed:db:57:
         84:e7:6a:18:28:ed:43:43:ab:4c:95:86:99:94:91:bc:2b:87:
         fc:ee:a1:66:f6:3e:2e:00:f3:09:a3:7d:06:db:e2:ef:b6:35:
         3f:d4:18:fd:58:a8:3d:e2:d7:5f:05:6d:49:36:80:8c:e7:44:
         7e:53:e3:6e:88:b8:e9:7c:9a:ac:42:fe:33:0f:69:9a:76:8e:
         94:30:8c:ed:9f:ad:7d:e7:2b:f9:cb:09:d8:8e:40:7a:87:c0:
         2e:e3:16:00:e9:41:cb:de:c2:29:02:97:cd:59:76:ec:8f:39:
         8a:84:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:17 2024 by rpki-client on console-fra.rpki-client.org