Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139382e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3139382e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          wNix/b5Dnpz+wummA0C4wnWtVkEVWgVNcFKyj2sbR1w=
Subject key identifier:   02:78:C8:2E:D0:FD:34:B6:7A:A0:A1:41:00:F9:EA:C1:11:1A:7C:80
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       7B16985DE7582E18864FB45BC39F835A78AD2037
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139382e302f32332d3234203d3e203532333233.roa
Signing time:             Mon 26 May 2025 18:20:10 +0000
ROA not before:           Mon 26 May 2025 18:15:10 +0000
ROA not after:            Mon 25 May 2026 18:20:10 +0000
asID:                     52323
IP address blocks:        181.16.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:16:98:5d:e7:58:2e:18:86:4f:b4:5b:c3:9f:83:5a:78:ad:20:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: May 26 18:15:10 2025 GMT
            Not After : May 25 18:20:10 2026 GMT
        Subject: CN=0278C82ED0FD34B67AA0A14100F9EAC1111A7C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:55:28:1f:8e:d0:24:fa:2c:6b:78:d7:c3:
                    f7:8f:93:ae:e8:0e:b8:da:77:9d:c9:c4:4b:47:76:
                    09:94:0d:dd:90:6d:4f:5a:04:da:c1:6a:13:f2:54:
                    9c:1e:3c:96:b7:38:a5:51:81:b5:77:56:15:fe:d9:
                    c6:e2:d3:f4:6e:c6:86:e0:37:a4:9f:d7:1d:81:10:
                    f3:48:48:ec:2a:a0:a1:fc:e2:73:00:f1:d3:9f:20:
                    e9:29:72:48:67:13:e5:43:31:01:42:c0:e8:ed:9e:
                    6a:68:66:40:dd:fe:c3:25:a9:7f:89:e9:74:e1:6b:
                    39:19:0d:ac:c3:67:78:11:ce:5e:5a:8b:aa:e9:20:
                    cc:82:8a:94:d0:59:f2:59:30:f4:dd:5b:4d:c4:b7:
                    c4:3c:af:31:2f:12:28:34:16:0d:83:88:a2:67:e1:
                    2d:9c:5a:08:7e:b9:a9:52:b5:03:ea:1f:d4:b2:9d:
                    f4:a2:50:31:95:81:da:d4:58:f1:03:91:36:74:28:
                    e7:12:29:a9:ca:43:69:21:73:70:b1:ae:31:64:83:
                    b9:52:1f:da:d5:c3:ba:6d:8d:01:6c:8b:8e:fc:43:
                    eb:6e:82:30:84:e0:dc:c2:d6:10:71:06:c9:53:da:
                    fd:e4:4a:be:fd:b2:da:3f:3a:60:ec:ce:45:61:ed:
                    ec:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:78:C8:2E:D0:FD:34:B6:7A:A0:A1:41:00:F9:EA:C1:11:1A:7C:80
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139382e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:e9:f5:cc:a6:ff:2b:82:22:71:de:c2:00:ea:d0:9b:9b:b3:
         9b:9e:07:75:c3:36:70:9d:67:24:dc:3c:84:91:50:c9:52:a5:
         17:46:7f:7c:66:76:7d:cc:50:1b:b3:a6:76:27:5d:bb:14:68:
         42:28:25:4d:30:1c:d3:57:15:8b:dc:68:20:43:b4:72:70:c1:
         73:8a:69:3a:3d:6c:ca:41:85:6c:ac:3d:a9:5f:11:97:1a:98:
         96:e8:5f:3d:d8:4b:8b:43:d8:94:ba:36:28:d1:42:8a:85:83:
         12:79:1f:2b:eb:4a:e7:af:c0:72:fc:02:ff:51:31:e8:0d:06:
         35:47:ee:e7:e3:89:ee:5d:dc:71:de:37:6f:9e:ab:4a:98:e2:
         bc:a6:7f:3d:f0:8e:4a:4a:b6:9a:7d:a3:fd:73:b0:b8:a3:26:
         de:1b:d2:77:40:87:ca:cf:52:74:22:6c:f0:c0:96:44:c0:66:
         bf:73:71:42:62:ee:bd:e2:b9:19:a8:f1:9e:ba:02:aa:d7:2b:
         46:3a:9c:1a:21:b6:ae:03:af:0e:c5:90:80:9c:c5:8f:e8:e5:
         3f:5c:d1:46:d3:a8:a9:18:40:be:ab:f4:ca:35:99:72:aa:87:
         c5:b4:b9:21:5f:1f:76:da:d6:ec:90:d5:33:00:0c:b6:3d:4c:
         6e:93:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:05:39 2025 by rpki-client