Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137322e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3137322e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          0RhSR4Xz5RiYIEDyAu6jf4hlcBaFJuYTjMbvx9X4wpM=
Subject key identifier:   87:57:61:00:99:D8:0E:53:65:FC:1C:B5:78:49:FF:60:BE:B6:E1:91
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       3169DF167BE6235648A3DDC3384A08D9C1CA597F
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137322e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:44 +0000
ROA not before:           Tue 04 Feb 2025 18:32:44 +0000
ROA not after:            Tue 03 Feb 2026 18:37:44 +0000
asID:                     52323
IP address blocks:        181.16.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:69:df:16:7b:e6:23:56:48:a3:dd:c3:38:4a:08:d9:c1:ca:59:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:44 2025 GMT
            Not After : Feb  3 18:37:44 2026 GMT
        Subject: CN=8757610099D80E5365FC1CB57849FF60BEB6E191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:a6:7a:85:b9:cd:0f:ca:49:33:08:e2:67:
                    6d:d2:dc:46:91:37:8a:23:83:25:f2:cb:1f:56:15:
                    4f:a2:31:85:d2:b5:8d:5e:eb:df:23:43:fb:0d:4c:
                    9b:68:a3:24:17:41:da:e9:cf:e5:60:c9:e9:82:40:
                    31:f3:4c:4b:4f:8b:73:fd:67:a6:c0:de:a8:62:1a:
                    48:e0:61:c0:49:e6:b6:1c:f6:0a:81:f2:1f:76:c9:
                    70:a0:77:98:9e:73:7a:1b:af:e6:af:b2:da:57:46:
                    81:d9:ef:57:67:7b:f2:85:c1:5c:5c:9d:5a:a9:bd:
                    15:ac:95:42:52:c8:b6:79:64:29:b7:30:50:6f:26:
                    5c:5d:e4:79:da:0e:ac:7c:6d:7f:cd:cc:0e:ff:e4:
                    7e:54:28:3d:61:15:e1:35:57:6e:b1:75:50:1e:c9:
                    25:4b:dd:25:ce:42:4a:df:cb:2d:c2:0c:2a:43:71:
                    01:d4:b2:48:b4:7c:07:7b:7a:80:96:e1:fd:a7:89:
                    54:8c:c2:a2:d4:2c:ff:0f:3b:53:81:d2:26:27:16:
                    0f:85:7b:5b:dc:bd:cf:0c:cb:f4:09:fe:d9:1f:1a:
                    3f:d0:d3:ce:38:08:77:19:dc:48:51:dc:69:16:38:
                    56:07:47:32:6c:2b:bf:8c:11:ff:09:ff:5c:94:a5:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:57:61:00:99:D8:0E:53:65:FC:1C:B5:78:49:FF:60:BE:B6:E1:91
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137322e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:73:b8:c1:7e:ef:75:e3:58:e7:4b:9a:eb:a2:56:b3:fb:00:
         da:2f:f3:df:22:51:04:af:08:e3:78:99:8c:16:76:86:c0:52:
         80:05:56:a1:a4:0c:ff:b1:c4:cf:33:cd:1c:cb:ec:81:29:b0:
         11:1b:c7:9a:9c:6e:bd:97:36:b0:6c:99:e1:85:06:a5:2f:f7:
         a0:9b:61:f1:08:66:fe:64:b4:9b:e6:20:26:a3:c3:33:2f:7f:
         d8:8e:b5:d6:a5:31:d6:13:c9:35:e9:68:44:70:bb:52:5b:82:
         49:7c:5d:7a:02:68:6b:a4:c0:9a:cf:6d:58:fe:8c:39:ea:84:
         1a:75:ef:a9:62:f3:42:47:05:2b:a1:79:a1:ec:4e:a8:7b:ba:
         70:9b:b5:0d:f4:d5:eb:40:9a:03:bc:16:a5:c1:42:71:f8:f0:
         a0:a5:9b:78:72:e3:a7:ba:f4:ea:27:2e:48:d9:0c:96:70:d6:
         e3:38:af:e0:ee:00:f9:b9:ef:6b:8a:07:f3:2b:23:27:9f:4d:
         88:ef:10:6a:1b:be:bf:d8:93:03:1d:da:79:a3:1c:4d:14:1e:
         25:51:de:bd:7f:db:85:21:76:0e:be:ed:42:0b:48:d6:b4:24:
         3e:26:6d:bd:ae:ab:8f:87:ed:1a:30:69:85:48:b7:e2:34:b3:
         d4:ec:6c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:45 2025 by rpki-client