Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3136342e302f32322d3234203d3e203532333233.roa
File:                     3138312e31362e3136342e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier:          CjeMTXrULWi3hLBUMLwzCYgbgakk6+O28fYM72xT8v0=
Subject key identifier:   28:65:CF:F0:26:3A:70:D2:8F:4E:AA:EB:41:1E:ED:A2:C4:13:57:7B
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       3B61D5EBE6CA4C63644323BA56BF16AAFD16A036
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3136342e302f32322d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:46 +0000
ROA not before:           Tue 04 Feb 2025 18:32:46 +0000
ROA not after:            Tue 03 Feb 2026 18:37:46 +0000
asID:                     52323
IP address blocks:        181.16.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:61:d5:eb:e6:ca:4c:63:64:43:23:ba:56:bf:16:aa:fd:16:a0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:46 2025 GMT
            Not After : Feb  3 18:37:46 2026 GMT
        Subject: CN=2865CFF0263A70D28F4EAAEB411EEDA2C413577B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:b3:0a:06:41:0c:0f:f4:13:ca:3a:a6:c2:
                    7d:88:ca:2b:a1:90:e9:7b:9e:1f:84:c9:a8:21:71:
                    5b:92:7b:ea:1d:f8:06:57:2b:38:a8:04:7c:f5:4d:
                    5f:51:a5:73:5a:58:1e:52:af:ac:70:11:40:62:6d:
                    6c:ab:0e:5c:68:7c:34:6e:09:55:09:ab:81:d5:cb:
                    d1:3c:3f:f9:07:fc:77:8d:62:2b:31:bc:b6:ad:27:
                    63:11:e0:11:32:70:e1:51:ec:87:8c:7f:d0:62:06:
                    eb:55:2a:0b:a1:53:73:fe:e0:35:09:e5:58:28:fd:
                    b6:b1:be:7a:27:81:62:40:a8:33:d2:25:8b:3c:d7:
                    31:13:d2:62:1a:ec:3a:cf:76:47:39:a4:29:03:f0:
                    67:01:1d:8b:e3:51:07:4c:8a:bd:be:85:d0:2f:a4:
                    58:ab:74:5d:56:5a:9a:e4:98:9a:22:5e:1f:8b:fb:
                    bd:ca:3a:76:5c:b2:5a:cd:ad:49:61:43:20:ca:d1:
                    41:f7:ba:3c:5f:9c:71:9c:b8:fe:c2:04:e7:5a:20:
                    69:5a:64:1e:14:ab:bd:0b:c7:00:c6:03:97:68:d4:
                    23:98:24:76:03:42:a5:88:2d:c6:82:28:59:14:84:
                    00:91:45:f1:6f:37:a1:20:7f:8d:38:87:bd:19:48:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:65:CF:F0:26:3A:70:D2:8F:4E:AA:EB:41:1E:ED:A2:C4:13:57:7B
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3136342e302f32322d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:c3:17:fb:82:fa:0b:e2:d3:4e:88:08:72:ae:ee:a0:05:b4:
         2a:c6:c6:50:4b:49:f2:34:44:a8:19:d0:c7:88:68:0f:83:2e:
         3c:c7:05:05:26:c7:b3:15:09:95:57:8f:14:2b:2b:80:e8:44:
         da:b5:ff:75:4c:04:aa:a7:69:4d:68:e4:dc:77:81:04:34:a8:
         c7:75:0b:e3:30:fc:2e:42:e7:57:c2:0b:eb:9c:d6:43:43:8f:
         d2:b1:12:9a:22:a1:47:c6:33:05:56:f7:a2:89:27:e4:03:88:
         67:ff:52:e6:6d:a3:3a:ea:6b:a1:ab:64:f5:b4:73:e2:ae:0e:
         ef:2a:05:0b:74:b5:a5:18:e1:ab:98:9d:87:0d:1b:8e:90:0b:
         ec:23:c9:36:a3:09:40:ba:bf:87:23:95:4f:91:23:94:2c:3c:
         2a:6b:e4:1a:61:16:3d:81:59:8a:80:7e:2e:21:8a:e4:16:37:
         ff:05:ec:c1:fe:33:a8:15:9c:ae:a2:70:78:02:51:63:ed:72:
         90:ec:56:33:69:aa:2e:75:2b:16:7b:da:8c:91:3b:a3:f2:8c:
         fa:36:71:f2:c9:e2:58:09:52:87:c0:a0:73:ef:6a:19:40:19:
         ed:ae:e2:28:26:d6:19:c2:51:54:0a:57:fb:51:bd:9a:22:e6:
         3e:92:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:54:14 2025 by rpki-client