Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137312e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3137312e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          HyKAatSzYqbeJTTqcjOnpuURmH8Z52q+AO+R4X7snYw=
Subject key identifier:   C7:1B:73:B4:92:76:9F:8E:5D:A3:C8:CD:6C:A4:FB:7E:8E:6D:6D:0F
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       076438898FBAE31DDE2B196E9545D0AD5F0F4182
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137312e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:11 +0000
ROA not before:           Tue 05 Mar 2024 18:02:11 +0000
ROA not after:            Tue 04 Mar 2025 18:07:11 +0000
asID:                     52323
IP address blocks:        181.16.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:64:38:89:8f:ba:e3:1d:de:2b:19:6e:95:45:d0:ad:5f:0f:41:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:11 2024 GMT
            Not After : Mar  4 18:07:11 2025 GMT
        Subject: CN=C71B73B492769F8E5DA3C8CD6CA4FB7E8E6D6D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:c6:12:19:96:b4:d6:99:8b:9a:57:ef:f4:
                    a2:d0:85:e2:eb:88:bd:04:47:15:f7:66:01:29:5d:
                    a8:ec:67:fb:5f:25:21:81:37:c0:48:92:e1:c5:a7:
                    f8:e1:4d:6f:d1:ec:7f:9c:9e:4f:35:68:e7:87:e9:
                    ac:21:24:9c:3d:ab:f7:3e:da:81:f1:98:ec:d8:a4:
                    7d:21:1e:f1:24:c2:0b:3f:4f:3e:a2:ab:ad:b7:8c:
                    fe:6f:67:5d:62:a1:59:97:86:aa:fd:1f:52:c6:2a:
                    1e:e2:9d:0e:93:9b:ad:2a:20:f7:44:44:7f:60:93:
                    59:92:66:6d:75:b5:21:3b:ae:04:53:ec:d4:c4:89:
                    6c:b3:85:18:e0:1a:9e:9e:3a:9b:36:42:27:5f:43:
                    31:8d:ce:ce:bf:c7:d3:45:82:8f:35:fe:c9:f0:e7:
                    a5:21:3d:46:ef:db:6c:8e:06:3a:7d:27:fb:d2:3a:
                    cb:eb:8f:e5:6c:57:85:d5:77:91:36:c7:09:82:7c:
                    a4:08:a0:c7:c8:07:9c:ed:fc:35:1a:96:7c:7c:11:
                    36:a4:c2:57:81:99:ee:d3:30:2d:20:ad:2f:22:ae:
                    05:7d:2f:3d:ed:d5:19:fd:4e:f8:f9:1d:4d:a7:58:
                    ab:77:15:19:ed:64:46:cf:76:b5:60:55:d0:96:bb:
                    09:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1B:73:B4:92:76:9F:8E:5D:A3:C8:CD:6C:A4:FB:7E:8E:6D:6D:0F
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137312e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:a5:51:71:cb:fe:f9:b8:0c:99:7e:72:f0:03:49:54:36:16:
         1e:89:ad:b4:98:f7:3a:b2:b6:80:ba:fb:34:c8:59:29:03:9c:
         23:af:e6:9f:47:d4:d9:9c:34:1a:48:cd:f7:5c:5c:8e:f8:e2:
         d0:68:3f:4d:17:16:f8:d0:50:88:61:a3:57:5b:4b:82:b8:6c:
         66:58:51:95:e5:d1:de:43:fc:d5:90:ea:cb:41:b9:f5:2a:ae:
         2b:4c:3c:cc:8e:5c:68:59:92:be:1d:89:3d:cd:4a:44:cc:d7:
         0e:2b:09:43:00:4a:1b:aa:f9:d8:91:56:7c:b1:cb:31:81:ae:
         94:a5:6f:f6:1d:c9:c6:a2:65:ce:82:7c:0b:98:58:75:8e:92:
         58:31:b5:92:9b:46:14:6c:13:81:e3:f4:a9:70:0a:c6:12:23:
         35:3b:f7:0f:78:43:50:b7:7b:94:8f:3c:45:e7:65:14:ca:14:
         50:8d:3e:77:95:78:15:b5:cc:18:57:43:d7:f1:6c:26:a5:da:
         28:6d:48:b1:00:93:1a:63:76:f7:4d:37:4c:58:fa:85:ab:d4:
         61:08:7b:94:49:58:d1:de:23:48:d7:56:43:b8:5f:8f:51:8f:
         34:21:77:f4:e2:5f:97:a9:4e:01:b5:e1:62:e2:73:f4:42:e8:
         93:27:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:23 2024 by rpki-client on console-ams.rpki-client.org