Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135362e302f32322d3234203d3e203532333233.roa
File:                     3138312e31362e3135362e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier:          1vBT7U62jMDwkbkkjkrxhpyA+DlergIoluSD0O6bLhw=
Subject key identifier:   8F:F7:A0:DE:73:6D:9C:25:E6:22:B7:60:98:EC:91:9F:72:18:A0:94
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       224E17176293B572497D601430E82007FC647319
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135362e302f32322d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:17 +0000
ROA not before:           Tue 05 Mar 2024 18:02:17 +0000
ROA not after:            Tue 04 Mar 2025 18:07:17 +0000
asID:                     52323
IP address blocks:        181.16.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4e:17:17:62:93:b5:72:49:7d:60:14:30:e8:20:07:fc:64:73:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:17 2024 GMT
            Not After : Mar  4 18:07:17 2025 GMT
        Subject: CN=8FF7A0DE736D9C25E622B76098EC919F7218A094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:df:ac:d1:52:f9:5c:80:a6:40:3e:9d:d8:ab:
                    e2:4c:cf:0f:60:67:17:8b:7a:b7:ee:97:4f:99:4a:
                    3d:4f:e8:c6:ae:58:f6:03:9e:6e:db:87:ea:2a:f4:
                    04:17:48:94:77:0c:a1:64:72:5f:07:71:93:bd:7d:
                    6a:ea:44:bd:ff:97:5c:6a:60:07:70:91:0c:54:b3:
                    fd:a7:c4:50:91:75:5a:5c:6f:bc:34:d1:49:d8:ee:
                    c8:93:f1:91:29:f6:02:04:06:bd:30:62:f5:cd:f4:
                    db:5f:97:54:7f:52:00:ec:5d:b6:17:01:6f:68:39:
                    d7:f8:36:63:f5:d7:6c:05:dc:d8:12:7f:5c:cb:d0:
                    a0:3f:d1:ed:cd:e8:1a:f1:aa:93:f3:41:de:9e:38:
                    12:02:94:0f:62:46:91:d0:bd:a3:7f:6d:c6:f9:0f:
                    49:3b:18:7b:c2:9a:60:dd:73:9b:66:b3:77:c4:2d:
                    fc:12:34:60:bc:93:a2:43:45:49:79:42:bb:30:99:
                    bd:ca:1e:6c:da:0d:8c:4e:f4:e2:35:f4:23:29:2b:
                    02:3c:8e:ac:7b:e9:7d:3d:17:a7:51:f5:33:58:11:
                    fb:a5:74:09:ff:81:54:c1:e4:22:72:a9:e6:a5:58:
                    d4:ec:07:e9:37:24:b2:d8:6f:92:30:fa:8d:17:cf:
                    24:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F7:A0:DE:73:6D:9C:25:E6:22:B7:60:98:EC:91:9F:72:18:A0:94
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135362e302f32322d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:29:c2:6c:1b:0b:a4:94:f2:81:71:f1:0f:a1:76:b7:1b:4a:
         6b:bc:00:9c:d5:76:59:c5:41:51:4f:50:51:e6:ed:49:b5:d8:
         69:69:71:74:15:f2:43:f6:a3:53:d7:8b:2c:65:29:f9:ff:21:
         cd:20:39:fb:6b:3a:48:83:a9:de:a5:1c:e0:33:10:b8:5d:7b:
         a1:e0:55:fa:c4:e0:b8:e3:de:8b:3d:3e:4b:ae:ca:0e:c7:2d:
         c8:eb:0f:61:16:51:f2:cf:ae:27:2b:82:1b:37:8b:00:4d:5a:
         55:e9:2d:3a:1f:9a:71:04:e0:9e:f0:35:89:98:39:3f:dc:31:
         12:92:e7:49:f2:25:3a:5f:11:45:a7:b5:ef:60:57:69:17:bf:
         8a:c8:b7:08:46:a9:c8:fc:66:5f:b1:d8:17:75:a7:21:0b:a1:
         af:07:2c:74:59:3c:d4:5e:94:43:65:bb:8d:b0:73:cc:09:e4:
         79:fd:71:63:c1:51:1e:54:49:ee:35:ae:c9:2d:97:7a:cb:22:
         3b:e5:fa:62:30:a1:29:a3:5b:08:2a:32:4c:3e:e4:a6:6a:27:
         87:ab:27:5a:1b:40:18:ac:ad:1f:33:8a:8c:0f:37:de:07:33:
         b7:2b:ab:5d:82:6a:71:ee:0f:cd:84:6b:75:2f:5a:69:7a:a1:
         9e:17:75:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:54 2024 by rpki-client on console-fra.rpki-client.org