Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139302e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3139302e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          7NBYRrUr9zCsdqHszUHZbIs2wT8uV1d0kqIiARuXQPk=
Subject key identifier:   DF:CF:53:21:5E:FD:FB:7F:42:85:B4:41:40:40:46:BD:06:72:94:36
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       3A99338A0932AD49112BD18237D28D40A5F65ADE
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139302e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:48 +0000
ROA not before:           Tue 04 Feb 2025 18:32:48 +0000
ROA not after:            Tue 03 Feb 2026 18:37:48 +0000
asID:                     52323
IP address blocks:        181.16.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:99:33:8a:09:32:ad:49:11:2b:d1:82:37:d2:8d:40:a5:f6:5a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:48 2025 GMT
            Not After : Feb  3 18:37:48 2026 GMT
        Subject: CN=DFCF53215EFDFB7F4285B441404046BD06729436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:44:ee:62:b7:32:87:5c:cb:77:a2:c9:df:
                    03:1e:13:f4:8d:dc:08:76:04:62:c5:90:32:04:4a:
                    bd:e4:ab:6f:e3:7f:e4:50:15:a0:ee:4d:27:66:14:
                    56:85:e0:fa:86:7b:97:fb:97:b2:ff:33:24:83:32:
                    4f:3d:1c:9f:8f:9c:43:3d:40:b7:26:58:22:a5:03:
                    54:97:cd:a7:27:71:90:d1:19:f0:13:a6:f5:93:b3:
                    e0:65:e6:03:38:5f:19:65:a6:e3:46:3f:72:53:9c:
                    92:da:4c:08:8b:a7:38:8c:67:cb:a3:15:66:24:0c:
                    8a:15:1e:12:a1:e8:7c:6b:3a:46:9b:fd:f3:3a:c1:
                    05:2d:03:a1:5f:c7:c8:3d:5d:08:ec:c9:30:54:44:
                    8f:aa:f2:d3:77:fd:d2:b2:6c:f0:4e:a1:4c:e9:6c:
                    82:c2:a0:89:77:7e:8f:d2:48:62:7f:68:4c:dc:3a:
                    fe:13:bb:dc:29:87:1d:a4:1d:6e:ce:23:bf:f3:d2:
                    76:43:b2:d9:a1:87:b4:78:3e:ad:d7:7b:0f:b9:39:
                    73:77:9b:d4:0b:12:a6:07:db:08:a0:e7:0f:90:79:
                    03:cf:1d:c9:75:e2:3a:58:c4:00:90:56:40:f4:74:
                    ec:38:a9:b5:9c:be:ac:84:fa:08:c8:2f:6d:49:9f:
                    b6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CF:53:21:5E:FD:FB:7F:42:85:B4:41:40:40:46:BD:06:72:94:36
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139302e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:df:7f:4d:c1:76:a5:e4:a9:d8:7a:97:34:7b:da:63:c6:78:
         3c:5f:04:05:86:6e:03:60:db:46:2a:cc:5a:ad:69:97:0e:7b:
         c5:2e:94:15:1e:bc:81:95:b6:67:fd:8e:10:fc:79:66:b1:bb:
         27:46:23:f8:4b:bd:d6:15:40:bd:51:3f:13:a5:50:d4:b2:4f:
         c7:26:f8:77:d7:42:62:2f:3f:3c:7a:87:65:d0:ee:4d:98:a5:
         6b:49:e3:75:8d:2d:3c:72:2f:a4:9e:a7:ed:60:20:c4:eb:20:
         f7:fd:c8:49:8c:c8:3a:bd:8c:88:3b:54:1a:46:a1:f1:43:68:
         8f:dc:c1:cd:d0:42:00:b9:f1:6d:9b:15:ec:96:e2:dd:77:62:
         4f:77:a7:fe:9f:3e:b5:2f:91:27:c7:83:fe:84:1b:29:b5:7f:
         3c:ff:8a:e8:38:ee:07:d9:21:64:de:60:0f:82:3d:ce:dd:00:
         4f:a4:ac:83:df:60:a0:e8:0d:a8:28:80:f6:f2:90:27:9d:f2:
         c1:da:69:d1:6d:7b:03:c8:a8:27:88:f1:aa:7c:e3:8b:29:a0:
         1e:2a:63:cb:63:0a:9b:b0:8c:2a:06:05:a8:44:da:03:0e:a5:
         9e:c1:ca:0a:58:0d:d4:e2:6f:38:72:5c:1b:36:9c:e0:c2:fb:
         39:1c:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:09 2025 by rpki-client