Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137342e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3137342e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          zAxsG6JsfLyK6GGtGYraY8HI9jxvDcNXRjXxuf9TOjY=
Subject key identifier:   24:A5:19:40:AD:8F:B5:F7:E2:B7:1D:F4:65:18:66:2B:74:56:7C:48
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       60F0CFE6CC4CFD3301D91C00012395150107881C
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137342e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:13 +0000
ROA not before:           Tue 05 Mar 2024 18:02:13 +0000
ROA not after:            Tue 04 Mar 2025 18:07:13 +0000
asID:                     52323
IP address blocks:        181.16.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f0:cf:e6:cc:4c:fd:33:01:d9:1c:00:01:23:95:15:01:07:88:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:13 2024 GMT
            Not After : Mar  4 18:07:13 2025 GMT
        Subject: CN=24A51940AD8FB5F7E2B71DF46518662B74567C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:a3:66:51:35:40:56:11:59:30:ec:fb:f1:
                    55:37:a9:e0:6a:b3:1e:16:24:9a:fc:c8:b6:64:32:
                    bd:b6:bb:2a:da:60:d6:b7:8a:68:e3:56:e1:e5:39:
                    38:c0:54:52:72:09:a2:3a:a9:8e:6b:0e:d6:e6:02:
                    a3:22:e6:9b:7d:62:49:15:44:38:36:62:97:57:76:
                    5c:a7:1a:79:d8:b8:15:15:4c:f7:ae:1a:0b:1a:77:
                    e3:da:e8:3b:d7:1e:53:09:81:76:2c:d3:48:cc:5f:
                    ac:c5:8c:8c:26:67:94:81:50:15:63:14:1d:c1:54:
                    b5:c2:c3:f8:ca:f0:1b:7b:fa:4d:11:ce:fd:8d:a2:
                    94:f1:74:74:58:00:0c:e8:ed:2d:2d:6c:de:73:86:
                    e1:e3:57:0d:44:75:10:ff:51:88:2c:cf:ba:1e:ac:
                    0b:47:23:4d:29:1d:a9:a3:9e:45:12:de:f0:22:3d:
                    20:3a:62:0c:d4:f9:b9:f9:43:c8:60:06:a3:84:13:
                    df:25:d0:f5:1b:24:29:00:fb:4d:71:b2:26:03:fa:
                    84:20:73:20:08:e7:e9:79:90:c6:96:b8:d9:b6:00:
                    ad:c5:8b:8f:37:2b:db:d2:21:09:ef:0c:0a:e5:79:
                    a3:aa:5b:95:84:4e:82:95:bf:84:91:61:02:a9:98:
                    6b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A5:19:40:AD:8F:B5:F7:E2:B7:1D:F4:65:18:66:2B:74:56:7C:48
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137342e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:a8:13:f9:41:32:d3:85:de:d8:44:73:0a:15:4b:1d:4d:6c:
         5b:78:66:c1:7a:1c:1b:29:bb:13:75:e0:3e:51:cc:25:f5:64:
         ea:d4:c1:22:85:6f:45:97:2f:3c:03:bc:34:ad:be:1d:ab:cb:
         b2:51:17:5b:ca:b0:3e:06:ce:59:52:bd:33:4a:ff:a3:7f:fd:
         a4:0c:1b:0c:a9:f0:5f:4c:30:70:57:67:08:9c:03:4b:79:fa:
         2b:f2:d7:4f:22:fb:a1:f2:45:40:f9:73:b1:0b:5c:db:62:dc:
         a8:87:b9:f1:a6:b2:a5:ba:c1:30:04:87:17:93:0c:d7:56:fe:
         2f:10:41:b8:6a:f8:13:b3:83:e6:af:f6:52:48:02:a0:e2:60:
         3a:7d:7a:8b:6f:1a:2b:d9:a2:3d:b5:f2:30:22:92:24:e9:8e:
         e0:13:60:d4:7f:e3:67:f2:e6:30:06:11:84:78:f2:53:9c:d0:
         8c:ad:f1:48:9a:8e:17:39:81:36:a7:d9:3a:b8:47:e2:6f:18:
         8e:f7:92:7a:0c:09:58:53:06:0f:e6:0e:3c:63:31:f2:7d:4d:
         5e:e4:ce:e4:25:f3:e4:da:21:31:38:2b:39:65:b2:91:b9:4a:
         00:7d:0c:7b:db:e1:ef:d7:7c:73:04:8c:f2:92:a2:0a:38:06:
         45:56:83:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:23 2024 by rpki-client on console-ams.rpki-client.org