Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138322e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3138322e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          i2je9f6smqM25l9Ra8TcEPtrkyO4CFJ+7Tb36PUgMoo=
Subject key identifier:   04:AD:23:39:96:71:EE:FE:1A:FF:E7:D1:F7:C3:A4:D3:0F:79:E6:D4
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       3D170DB1B99D3D8C2229D2BEB7CC68FE9EBC88BB
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138322e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:24 +0000
ROA not before:           Tue 05 Mar 2024 18:02:24 +0000
ROA not after:            Tue 04 Mar 2025 18:07:24 +0000
asID:                     52323
IP address blocks:        181.16.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:17:0d:b1:b9:9d:3d:8c:22:29:d2:be:b7:cc:68:fe:9e:bc:88:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:24 2024 GMT
            Not After : Mar  4 18:07:24 2025 GMT
        Subject: CN=04AD23399671EEFE1AFFE7D1F7C3A4D30F79E6D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c6:48:42:1d:a1:36:6b:0a:08:a5:eb:9f:0d:
                    a0:18:a5:67:04:10:7d:6a:46:55:8d:48:5c:83:b6:
                    1f:95:16:4d:19:72:c8:5c:70:8f:d9:78:62:1e:3f:
                    6c:6a:95:72:98:6a:58:e5:85:1b:02:37:39:a4:e5:
                    e0:93:3a:c9:ac:08:c3:70:75:b8:84:54:13:36:d7:
                    c9:9b:50:45:5a:09:37:c8:40:9d:86:33:8e:c3:b5:
                    b1:85:11:13:7c:eb:2f:3c:9d:de:f5:ce:2f:7a:b6:
                    1e:81:68:9e:c7:6a:c5:4c:bf:6f:2e:26:03:57:6b:
                    95:ca:0d:07:76:a1:ff:b4:97:ac:a7:24:f8:ec:e8:
                    ca:48:b6:4a:9d:34:82:cc:6d:ba:b1:d4:a4:63:fb:
                    27:c3:56:4e:de:0b:24:c3:65:14:24:d6:1e:a7:ea:
                    ad:51:69:c0:56:2e:4b:2d:cc:4a:d4:71:de:f8:8c:
                    9e:31:19:c0:7d:65:0f:a0:c0:91:eb:bc:91:12:a5:
                    aa:b5:8a:51:29:8f:ae:1c:e7:d2:a4:f6:62:b1:f4:
                    31:9a:6a:80:40:e0:27:3a:c7:20:cc:cd:6c:f0:fe:
                    56:c0:3f:9e:75:d7:94:b5:71:a8:8a:c7:aa:60:f9:
                    a9:df:c4:75:1f:f9:54:b9:e2:d1:6a:16:4d:a0:d2:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AD:23:39:96:71:EE:FE:1A:FF:E7:D1:F7:C3:A4:D3:0F:79:E6:D4
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138322e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:6d:54:c8:52:e3:67:f3:c5:06:19:91:74:1a:bd:3d:e8:c8:
         f8:8a:3c:c7:78:b0:4f:5b:e3:46:a0:db:e0:82:5b:61:f7:64:
         68:60:8f:37:7d:54:bd:4f:e6:76:73:34:94:0f:54:8d:45:c9:
         e9:fc:ec:00:5a:e6:27:81:72:db:1c:14:22:cf:57:b8:80:21:
         41:0c:03:e9:44:21:99:48:da:ef:03:61:41:66:71:1c:26:21:
         fb:e3:40:71:87:95:55:e4:a0:12:5e:a3:52:03:f2:31:0f:f6:
         87:8a:7c:5b:9c:c4:9a:e9:6e:c9:e1:34:f1:2f:e8:57:8a:68:
         17:36:e0:c1:24:5d:90:4d:41:50:33:0e:3a:6b:19:96:c5:29:
         5a:3e:6c:dd:5c:eb:93:7f:44:ba:01:4c:98:2b:14:60:a7:a0:
         4a:6a:a0:d2:c5:cf:de:2d:74:7b:30:de:79:db:05:16:93:1f:
         43:33:77:d8:a8:f3:3b:01:73:a6:7a:4c:3c:ac:56:00:22:3b:
         1e:32:d3:57:a9:f6:55:4a:fb:27:7e:a0:1e:8e:b6:ec:b6:64:
         16:ed:43:67:13:27:79:79:01:fc:9a:32:8e:81:1a:f8:fc:7d:
         f2:0b:e4:96:7d:30:b3:44:bf:19:61:1e:d2:4e:2b:12:ae:b1:
         77:2b:45:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:17 2024 by rpki-client on console-fra.rpki-client.org