Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137382e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3137382e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          mRogWKKJyPGh5bpGXuXunwH5Qg+LzfKhiC7O9JUDC9c=
Subject key identifier:   28:93:35:6C:AF:1D:DA:89:C8:98:A6:F5:31:2D:8A:A9:01:82:AC:DE
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       107796E7DF89A5C55324C15DD93694BDB82D82C2
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137382e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:53 +0000
ROA not before:           Tue 04 Feb 2025 18:32:53 +0000
ROA not after:            Tue 03 Feb 2026 18:37:53 +0000
asID:                     52323
IP address blocks:        181.16.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:77:96:e7:df:89:a5:c5:53:24:c1:5d:d9:36:94:bd:b8:2d:82:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:53 2025 GMT
            Not After : Feb  3 18:37:53 2026 GMT
        Subject: CN=2893356CAF1DDA89C898A6F5312D8AA90182ACDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:18:ea:2d:15:b6:e1:71:98:92:d1:6d:38:
                    c4:19:52:37:20:68:2b:e6:66:3e:8c:12:8c:44:4d:
                    55:e6:f5:4a:e6:48:ef:94:cd:66:14:b4:3a:b1:b7:
                    43:b4:46:15:45:fa:cd:60:59:30:b3:ee:73:9e:c7:
                    94:0a:2d:b9:ec:e3:e3:ba:68:1c:15:e5:d9:30:be:
                    cf:30:f2:73:a0:55:1d:1e:6e:3a:8e:42:93:e6:bc:
                    7a:b1:75:12:a1:f8:af:a6:7e:ac:54:d7:49:72:d5:
                    f3:9c:0f:57:97:5f:9c:ff:8f:7c:47:ad:bc:2f:5b:
                    92:09:29:45:22:33:f1:09:b9:d5:c2:85:f2:cc:b1:
                    54:d1:3b:cf:22:39:f7:55:0e:cd:ed:87:a4:47:41:
                    c9:c1:50:0d:df:4c:97:df:c7:a5:94:16:7c:50:6c:
                    5b:6e:23:cf:94:06:d9:4b:40:ea:43:b5:ef:c0:b5:
                    e2:94:72:3f:b1:1f:cd:fa:70:04:77:31:09:7b:2a:
                    58:cb:5f:4c:eb:38:c8:0e:d7:3b:d9:f3:39:04:f0:
                    e8:ac:8a:09:d9:1b:4e:ca:ed:11:8f:d8:70:ed:4a:
                    ab:e4:0b:2f:cf:a4:ea:76:94:02:01:56:8e:cd:bd:
                    91:00:b7:b6:ce:0a:d8:23:e1:a0:67:8a:2d:72:81:
                    97:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:93:35:6C:AF:1D:DA:89:C8:98:A6:F5:31:2D:8A:A9:01:82:AC:DE
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137382e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:0a:91:c0:54:e9:8a:e1:c8:d5:db:11:f0:48:93:98:52:97:
         77:96:3e:70:1f:79:05:b9:bd:59:62:6a:0c:94:5a:30:23:12:
         d6:ba:79:75:f8:26:43:81:6e:b3:61:80:fd:44:1b:fd:76:a8:
         80:56:bc:43:04:67:63:e3:da:18:5c:dd:01:03:c0:93:d2:5b:
         27:85:a1:40:1a:3b:8b:5d:55:cf:26:07:7d:2f:a2:1b:cf:58:
         4a:e6:f8:bd:06:ae:a9:06:61:66:bc:1e:56:e6:91:da:d3:ba:
         74:9f:d0:d8:21:1e:a7:02:f3:4e:e4:18:ec:f3:24:78:0e:44:
         94:d4:77:1e:7c:a1:6b:74:47:ed:2e:b9:54:df:51:c7:4a:f7:
         0f:71:cd:97:f7:a3:64:a4:64:01:75:44:63:f6:0b:a0:df:47:
         57:14:8d:21:a3:d9:b5:0c:1c:ab:56:d7:26:00:15:9d:c8:87:
         1b:11:0b:60:5e:f2:8b:1e:89:2e:ea:78:62:44:c5:49:a3:f6:
         a4:93:fb:7a:06:b2:8c:e7:84:04:de:d2:7d:aa:2c:76:dd:68:
         d0:1e:18:a8:1c:4a:f7:b3:48:5f:d5:99:20:90:fb:4f:7e:3a:
         3d:58:62:7e:73:d8:14:4f:8e:9b:66:2f:3e:05:1c:97:1a:bd:
         20:e0:77:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:41 2025 by rpki-client