Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138382e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3138382e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          G0tyD2Iry7topysK8bStgVIEFqdl/deJ649Dh9rfFwk=
Subject key identifier:   1F:D8:61:80:FC:D6:7E:44:D8:15:F1:27:5D:1D:2E:82:3E:D4:36:BB
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       5049DAFB9ED2CA4933A53AE838DAAE55474A3CB8
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138382e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:16 +0000
ROA not before:           Tue 05 Mar 2024 18:02:16 +0000
ROA not after:            Tue 04 Mar 2025 18:07:16 +0000
asID:                     52323
IP address blocks:        181.16.188.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:49:da:fb:9e:d2:ca:49:33:a5:3a:e8:38:da:ae:55:47:4a:3c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:16 2024 GMT
            Not After : Mar  4 18:07:16 2025 GMT
        Subject: CN=1FD86180FCD67E44D815F1275D1D2E823ED436BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ce:96:99:71:6c:91:b1:57:97:e0:68:cf:05:
                    10:d5:78:c4:7a:3e:a1:a7:47:75:04:1e:e0:ba:f1:
                    1f:4f:e0:25:30:dd:10:e6:07:fb:c6:c7:34:b7:37:
                    41:b8:a0:28:8e:cf:81:bb:38:d5:7b:49:fa:0b:2b:
                    94:16:20:cf:04:60:3d:b5:05:97:f7:c2:9f:9f:ae:
                    22:66:32:97:d1:c0:f4:9e:41:a4:02:a9:5e:e7:88:
                    4f:d3:a0:4a:f0:89:43:2a:8f:03:f1:d4:67:75:e5:
                    7d:5e:32:43:0c:15:4d:6e:bb:2e:1e:6d:90:a1:2a:
                    6e:2a:2d:f1:23:17:15:68:74:73:43:b7:cc:60:22:
                    83:86:b2:e6:80:e6:2b:27:92:ba:9e:33:2a:bb:14:
                    da:ba:7b:fd:58:de:3f:a7:59:81:5b:0c:70:9e:42:
                    63:b2:3d:47:80:b5:e2:a2:ac:91:e4:dd:b6:38:42:
                    c6:bc:19:24:c9:c5:1c:f6:33:4c:05:fa:27:ae:93:
                    23:85:ca:76:65:1d:ce:a0:2e:43:f1:1f:66:f8:da:
                    26:cd:6e:86:6a:cc:3f:f0:b3:9b:9b:5a:2d:f8:14:
                    22:9b:66:18:74:16:f9:2d:90:b4:ee:10:1e:2d:e7:
                    cb:ed:71:42:66:5b:b6:85:fb:33:59:84:fc:bd:a5:
                    9a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D8:61:80:FC:D6:7E:44:D8:15:F1:27:5D:1D:2E:82:3E:D4:36:BB
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138382e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:dd:25:a9:32:63:f6:ec:d8:30:1a:7f:d2:f6:1f:d7:dd:97:
         76:a2:73:35:eb:12:d4:c6:45:83:e0:ef:b1:30:63:a5:b1:82:
         45:b7:2c:a9:f6:d7:01:de:33:f3:03:1a:0a:05:b2:0f:c1:68:
         2c:fa:0b:45:a2:12:89:e9:e4:d5:34:95:6a:ca:e6:96:8e:7d:
         05:38:16:b0:61:71:d7:3d:c2:8e:97:9d:c4:19:c9:5e:19:c1:
         65:7b:a6:be:24:82:05:61:db:9d:06:6e:ee:5a:e0:00:b5:b5:
         8b:46:bf:68:7f:a4:fb:66:41:ac:89:f5:44:c8:6e:36:70:57:
         76:0e:92:7b:40:eb:31:15:ea:99:03:fd:f3:e8:b5:75:da:17:
         fe:aa:18:54:2d:41:4e:f2:36:aa:28:28:30:ed:db:aa:52:d2:
         0e:a6:3d:ea:f8:a4:b6:3f:b2:65:34:5d:5c:9b:af:df:4e:ab:
         06:c5:72:36:57:c9:1a:00:fe:8c:23:3e:da:24:bf:2f:96:dd:
         30:1a:c0:ca:e4:32:81:40:b1:95:7e:99:a8:28:88:0d:11:6b:
         e4:b8:7c:21:6a:19:a0:8e:37:60:ad:39:71:37:c6:0b:3a:9f:
         d2:ef:71:74:c9:1d:e5:f3:8e:26:01:66:31:b2:4c:ca:a3:c2:
         ae:98:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:02:23 2024 by rpki-client on console-fra.rpki-client.org