Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139382e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3139382e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          3FgD7u2SSbUrCvSo5UP8uQ7FDbUrRia/cokq3D3Ywsk=
Subject key identifier:   16:2B:F5:4B:5E:48:02:A7:9D:5C:7E:A4:9C:02:44:B4:3B:27:3D:45
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       7193A3494EC50BDAACE4889BAC3B2D1C1940EF13
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139382e302f32332d3234203d3e203532333233.roa
Signing time:             Mon 24 Jun 2024 17:35:00 +0000
ROA not before:           Mon 24 Jun 2024 17:30:00 +0000
ROA not after:            Mon 23 Jun 2025 17:35:00 +0000
asID:                     52323
IP address blocks:        181.16.198.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:93:a3:49:4e:c5:0b:da:ac:e4:88:9b:ac:3b:2d:1c:19:40:ef:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jun 24 17:30:00 2024 GMT
            Not After : Jun 23 17:35:00 2025 GMT
        Subject: CN=162BF54B5E4802A79D5C7EA49C0244B43B273D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:a6:73:7c:d4:de:ce:57:86:13:42:07:96:
                    ba:af:da:09:dd:f6:fb:df:45:2e:c8:ee:a0:b8:a5:
                    27:d6:58:e2:ac:b8:2c:28:82:bb:7d:52:a8:db:dd:
                    ec:4e:0b:08:75:61:9d:ab:fa:fa:5c:e3:c9:92:5b:
                    88:00:07:07:e9:ff:33:92:71:ee:5d:61:4c:25:81:
                    9d:a6:f3:31:3c:9b:cc:11:40:62:cb:2a:6b:22:41:
                    a1:f0:26:c7:f7:2e:d8:28:69:f6:44:63:1f:ac:ca:
                    58:ce:72:c4:b3:50:9c:c5:68:3f:5f:81:20:f4:7e:
                    9c:e8:4a:76:15:ee:05:b9:19:f5:f9:27:63:9f:3c:
                    c0:d3:02:18:af:48:bb:b7:f8:1e:ee:02:6b:4f:d1:
                    b1:ed:22:10:36:e8:10:e7:96:e7:e9:d4:f8:b4:d3:
                    ea:78:54:ac:77:61:d7:cd:d7:ce:4a:d6:47:86:e4:
                    23:06:c5:2d:79:97:3f:21:e4:19:29:75:af:79:b8:
                    3a:1b:2b:85:b9:f8:06:d5:2a:fe:6a:b1:61:5b:14:
                    0e:aa:54:4c:1f:eb:e9:ea:53:10:0c:48:5c:6e:4f:
                    e7:f2:5e:91:58:3d:23:ea:eb:bb:83:50:b8:86:80:
                    eb:c0:5a:43:14:e8:d9:8f:d8:32:2d:e2:ce:13:07:
                    25:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2B:F5:4B:5E:48:02:A7:9D:5C:7E:A4:9C:02:44:B4:3B:27:3D:45
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139382e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:04:1f:97:9e:1c:88:26:84:1c:3e:17:25:3a:76:41:b3:b0:
         8f:ba:00:e7:07:49:d0:fb:64:8f:bf:4b:a3:31:bf:d7:dd:c9:
         64:01:7d:69:45:38:69:41:53:6e:14:92:cf:73:8d:e9:93:4c:
         ee:52:e7:78:e4:d9:c4:93:4d:00:c7:16:48:8f:4d:85:80:b6:
         5d:47:a7:22:8a:8e:90:f5:2e:bf:91:ad:27:5b:60:14:0e:12:
         70:49:6d:19:04:92:f0:28:5b:94:50:f8:0c:9e:87:7c:4c:1c:
         c8:3c:1d:d8:99:87:fc:d2:24:0e:fc:19:a5:cf:35:6d:b7:f5:
         de:2d:ed:50:79:39:1e:65:26:bf:6c:d7:11:95:63:24:09:c0:
         71:a1:d3:31:f0:35:7d:4c:1e:62:6a:da:4a:18:bd:6d:f3:1f:
         56:e5:3f:55:0b:ce:1f:5b:c8:7b:40:53:a8:89:30:9b:63:53:
         a1:77:f4:56:29:a5:ce:20:f2:64:2d:c4:bc:b5:ef:1d:47:a0:
         6f:4f:91:18:28:5e:0a:f4:00:85:53:32:6b:ac:b4:45:4d:6d:
         4a:60:df:b3:9f:d9:8f:07:6c:44:e4:d1:52:2b:ba:ed:b3:0b:
         4c:ba:d7:25:db:ac:d1:6a:9e:d6:61:4d:fd:ca:30:17:ed:f9:
         8f:6a:78:b2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUcZOjSU7FC9qs5IibrDstHBlA7xMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNDA2MjQxNzMwMDBaFw0yNTA2MjMxNzM1MDBaMDMxMTAvBgNV
BAMTKDE2MkJGNTRCNUU0ODAyQTc5RDVDN0VBNDlDMDI0NEI0M0IyNzNENDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqqZzfNTezleGE0IHlrqv2gnd
9vvfRS7I7qC4pSfWWOKsuCwogrt9Uqjb3exOCwh1YZ2r+vpc48mSW4gABwfp/zOS
ce5dYUwlgZ2m8zE8m8wRQGLLKmsiQaHwJsf3LtgoafZEYx+syljOcsSzUJzFaD9f
gSD0fpzoSnYV7gW5GfX5J2OfPMDTAhivSLu3+B7uAmtP0bHtIhA26BDnlufp1Pi0
0+p4VKx3YdfN185K1keG5CMGxS15lz8h5Bkpda95uDobK4W5+AbVKv5qsWFbFA6q
VEwf6+nqUxAMSFxuT+fyXpFYPSPq67uDULiGgOvAWkMU6NmP2DIt4s4TByUdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUFiv1S15IAqedXH6knAJEtDsnPUUwHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzEzOTM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbUQxjAN
BgkqhkiG9w0BAQsFAAOCAQEAwAQfl54ciCaEHD4XJTp2QbOwj7oA5wdJ0Ptkj79L
ozG/193JZAF9aUU4aUFTbhSSz3ON6ZNM7lLneOTZxJNNAMcWSI9NhYC2XUenIoqO
kPUuv5GtJ1tgFA4ScEltGQSS8ChblFD4DJ6HfEwcyDwd2JmH/NIkDvwZpc81bbf1
3i3tUHk5HmUmv2zXEZVjJAnAcaHTMfA1fUweYmraShi9bfMfVuU/VQvOH1vIe0BT
qIkwm2NToXf0VimlziDyZC3EvLXvHUegb0+RGCheCvQAhVMya6y0RU1tSmDfs5/Z
jwdsROTRUiu67bMLTLrXJdus0Wqe1mFN/cowF+35j2p4sg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:17 2024 by rpki-client on console-fra.rpki-client.org