Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230302e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3230302e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          hTvdN3qVdOE9JEn2hyrs5TmOdqmjFzVRu2yfmEmcuCE=
Subject key identifier:   F2:82:A7:20:DC:48:86:C6:77:33:F2:DA:9D:13:A4:A5:DB:61:E7:E4
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       509E939B4105D0D416DD5272BA6969A723107AC2
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230302e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:22 +0000
ROA not before:           Tue 05 Mar 2024 18:02:22 +0000
ROA not after:            Tue 04 Mar 2025 18:07:22 +0000
asID:                     52323
IP address blocks:        181.16.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9e:93:9b:41:05:d0:d4:16:dd:52:72:ba:69:69:a7:23:10:7a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:22 2024 GMT
            Not After : Mar  4 18:07:22 2025 GMT
        Subject: CN=F282A720DC4886C67733F2DA9D13A4A5DB61E7E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:91:8b:dc:76:40:b4:d3:74:de:61:f3:e9:f7:
                    80:e5:78:a5:ed:6b:66:f1:f3:82:65:84:38:3a:d6:
                    9d:32:f0:65:fb:e7:bf:3f:48:5c:71:61:7d:bd:35:
                    42:e1:55:ff:89:61:d3:af:8a:9e:cb:3c:1a:e7:74:
                    01:20:55:8d:cf:07:40:52:01:14:61:00:05:cd:ea:
                    e0:37:a7:6d:5a:38:66:fc:32:44:d4:93:b5:9a:3f:
                    65:80:49:96:60:a3:5e:61:bc:9f:13:b3:b0:55:6f:
                    23:de:52:ec:0f:5c:5b:f5:32:9a:22:27:5a:a5:06:
                    26:98:54:fa:30:76:34:6e:bb:b8:2f:43:22:cf:c1:
                    78:2b:b8:30:64:77:4b:9a:81:60:28:99:86:e4:87:
                    fb:44:b9:a2:37:4d:4e:bf:fa:8d:fc:74:fd:5f:7e:
                    b2:d1:c9:27:9c:89:c2:8d:d9:06:14:11:6a:55:58:
                    12:cc:be:93:69:7a:52:e8:84:a1:1a:8c:09:e6:f2:
                    24:62:d1:a4:5f:55:7c:c3:12:a4:fc:a7:c1:13:14:
                    26:34:9f:87:10:37:09:eb:81:78:b4:6e:51:43:7e:
                    e5:11:e0:60:1e:73:f0:ca:66:4c:29:07:9f:a7:76:
                    b9:58:c9:f9:23:c6:fd:42:64:ae:b9:7d:13:a7:40:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:82:A7:20:DC:48:86:C6:77:33:F2:DA:9D:13:A4:A5:DB:61:E7:E4
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230302e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b8:77:ab:df:b8:8b:34:48:10:dd:96:c5:65:fd:2b:13:b9:
         1d:c7:08:4e:fd:ab:6d:00:7f:09:22:67:61:da:28:78:fa:f0:
         7a:66:82:ea:a7:98:83:bb:60:d7:4f:0e:6f:01:80:b5:73:5c:
         9f:3f:79:77:b6:6c:36:97:9b:d1:5b:fe:a7:60:28:a8:c8:19:
         3d:4d:a5:38:31:e8:1d:fb:04:be:10:20:10:40:be:98:29:48:
         50:51:18:98:1f:92:fe:ae:d3:32:31:6f:72:32:38:7c:3c:a5:
         ff:e8:ea:20:b8:c1:7b:86:a3:96:0b:c2:e6:3f:d7:6b:5c:17:
         34:d6:af:3f:ea:f5:b1:c9:ea:f4:e4:52:cd:f4:8c:36:1e:0d:
         70:d7:64:0e:f7:2a:ff:98:df:3a:b6:8a:b1:8a:29:40:d8:6a:
         45:36:2c:68:af:14:e6:36:f5:5c:bc:96:ee:58:04:45:93:06:
         6d:62:49:cf:a8:82:50:2a:b0:a6:07:60:0e:fa:3e:a3:4d:1f:
         04:fb:0e:60:98:a7:52:9c:7c:33:7d:d2:94:df:5f:40:6f:96:
         38:c4:87:c2:a3:d1:18:4c:b5:d2:30:92:09:da:e2:66:3c:f9:
         25:df:60:62:40:14:b2:c6:ec:a7:ec:5a:49:b9:36:0c:d9:85:
         68:21:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:23 2024 by rpki-client on console-ams.rpki-client.org