Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3136302e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3136302e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          lE4o16VuwrnLMxFm6nC8UDTIBfTHyxMw2BONqozAglA=
Subject key identifier:   5F:24:11:61:AF:42:C1:EF:0F:C6:B8:DF:84:DC:46:41:66:24:D4:23
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       5E504F257BBD4E8E6781C17BA150B3721BEE1814
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3136302e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:48 +0000
ROA not before:           Tue 04 Feb 2025 18:32:48 +0000
ROA not after:            Tue 03 Feb 2026 18:37:48 +0000
asID:                     52323
IP address blocks:        181.16.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:50:4f:25:7b:bd:4e:8e:67:81:c1:7b:a1:50:b3:72:1b:ee:18:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:48 2025 GMT
            Not After : Feb  3 18:37:48 2026 GMT
        Subject: CN=5F241161AF42C1EF0FC6B8DF84DC46416624D423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:19:e2:15:14:25:35:d2:1f:d5:18:7d:1a:70:
                    64:d4:99:1f:6c:e9:35:7a:74:7b:0b:1a:e8:66:92:
                    14:55:47:76:9d:e7:37:8a:a2:92:b8:48:9e:1b:50:
                    ca:8f:5e:9f:08:9d:c8:b9:09:c2:40:21:a4:d4:ad:
                    0f:dd:07:3b:7a:da:31:52:88:04:2c:3d:98:a6:b2:
                    9b:99:6d:22:38:69:29:3f:ff:b0:07:54:75:69:67:
                    2c:39:69:9a:fe:be:52:ac:11:d0:ce:c0:02:f2:40:
                    e3:55:8a:8a:75:cb:f3:aa:2d:e5:1d:d8:2a:fa:85:
                    d3:49:c6:ec:57:63:be:e9:35:4b:bf:c5:bb:1f:bc:
                    94:e0:8c:21:c6:95:02:f7:5c:54:97:da:af:6f:90:
                    06:44:b2:12:e9:26:13:9e:75:e2:0f:4e:52:e8:a6:
                    dc:98:17:46:5f:29:9b:a0:80:6e:77:cb:9f:cf:f1:
                    f6:f7:d5:ba:38:94:64:0b:ad:2a:5b:62:34:69:01:
                    48:89:b9:e3:14:ea:15:c6:51:b0:1f:88:a4:4c:4b:
                    49:6b:d0:a2:e4:17:c8:2a:c1:ec:cb:d6:8d:3c:6a:
                    31:f9:18:7e:92:80:8a:be:83:4d:1b:23:2e:77:96:
                    80:bc:f8:93:10:e4:92:c5:59:cf:39:12:45:ce:f3:
                    33:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:24:11:61:AF:42:C1:EF:0F:C6:B8:DF:84:DC:46:41:66:24:D4:23
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3136302e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:9f:9f:2c:2c:69:aa:f1:54:e5:b7:92:83:b3:90:dd:da:f9:
         71:13:c8:c4:2f:3e:b5:e7:9d:b2:3c:c4:3d:5e:d9:f5:05:93:
         ad:b0:48:89:f4:84:0f:48:e9:aa:1a:ab:f3:3b:aa:2e:29:16:
         c2:fb:ec:8c:30:c3:43:df:41:44:4a:cf:44:c7:3b:a7:25:1a:
         ee:c3:5f:52:c3:99:a3:35:c8:ed:ec:5e:c0:12:9f:34:31:7e:
         34:ad:a3:5e:06:68:cb:8e:53:e1:4c:67:ef:a3:c5:4b:bb:44:
         9e:e0:fd:db:79:74:32:e2:e6:e5:21:32:92:cf:d7:3f:5b:fb:
         81:36:cb:9d:e6:c6:07:74:9d:e1:f7:23:28:22:81:15:f6:a0:
         04:e9:78:a5:d3:a4:5a:e8:79:36:c5:d3:87:2c:fa:b5:5e:09:
         4a:28:ec:7b:87:1f:5a:88:3c:ae:96:26:77:f9:8a:98:a2:20:
         c2:82:d7:6b:f8:61:7f:ea:39:2f:6c:f9:6b:0c:19:73:d4:e2:
         36:32:ac:4b:eb:f0:be:a1:2b:17:fe:7c:16:3b:ac:99:57:ce:
         73:61:b7:16:d9:b8:76:a8:6f:e0:45:db:16:15:cf:b5:e4:6d:
         3b:60:f7:94:3f:2f:5b:60:71:5e:2a:a8:fa:b1:ce:20:1e:cd:
         d7:41:c2:e6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXlBPJXu9To5ngcF7oVCzchvuGBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNTAyMDQxODMyNDhaFw0yNjAyMDMxODM3NDhaMDMxMTAvBgNV
BAMTKDVGMjQxMTYxQUY0MkMxRUYwRkM2QjhERjg0REM0NjQxNjYyNEQ0MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGeIVFCU10h/VGH0acGTUmR9s
6TV6dHsLGuhmkhRVR3ad5zeKopK4SJ4bUMqPXp8Inci5CcJAIaTUrQ/dBzt62jFS
iAQsPZimspuZbSI4aSk//7AHVHVpZyw5aZr+vlKsEdDOwALyQONViop1y/OqLeUd
2Cr6hdNJxuxXY77pNUu/xbsfvJTgjCHGlQL3XFSX2q9vkAZEshLpJhOedeIPTlLo
ptyYF0ZfKZuggG53y5/P8fb31bo4lGQLrSpbYjRpAUiJueMU6hXGUbAfiKRMS0lr
0KLkF8gqwezL1o08ajH5GH6SgIq+g00bIy53loC8+JMQ5JLFWc85EkXO8zMnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUXyQRYa9Cwe8PxrjfhNxGQWYk1CMwHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzEzNjMwMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbUQoDAN
BgkqhkiG9w0BAQsFAAOCAQEAn5+fLCxpqvFU5beSg7OQ3dr5cRPIxC8+teedsjzE
PV7Z9QWTrbBIifSED0jpqhqr8zuqLikWwvvsjDDDQ99BRErPRMc7pyUa7sNfUsOZ
ozXI7exewBKfNDF+NK2jXgZoy45T4Uxn76PFS7tEnuD923l0MuLm5SEyks/XP1v7
gTbLnebGB3Sd4fcjKCKBFfagBOl4pdOkWuh5NsXThyz6tV4JSijse4cfWog8rpYm
d/mKmKIgwoLXa/hhf+o5L2z5awwZc9TiNjKsS+vwvqErF/58FjusmVfOc2G3Ftm4
dqhv4EXbFhXPteRtO2D3lD8vW2BxXiqo+rHOIB7N10HC5g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:42 2025 by rpki-client