Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230322e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3230322e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          0UZ7qvU6FgmpCAU6nZn80gLfioRuul5tGhrZtfc4hpM=
Subject key identifier:   BF:BE:BC:D1:72:D9:DF:8A:18:07:93:91:03:16:C6:12:96:34:F8:29
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       31ACBE73476D7FB9608E674C675C6E3E27C2DBD2
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230322e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:13 +0000
ROA not before:           Tue 05 Mar 2024 18:02:13 +0000
ROA not after:            Tue 04 Mar 2025 18:07:13 +0000
asID:                     52323
IP address blocks:        181.16.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ac:be:73:47:6d:7f:b9:60:8e:67:4c:67:5c:6e:3e:27:c2:db:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:13 2024 GMT
            Not After : Mar  4 18:07:13 2025 GMT
        Subject: CN=BFBEBCD172D9DF8A180793910316C6129634F829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:a2:c1:e0:ba:1b:8a:7c:29:3d:46:1d:3a:
                    64:83:ca:42:9a:57:a1:9d:67:15:be:5d:38:0f:e2:
                    8f:0d:1d:00:76:eb:df:a1:9d:63:8d:d5:9c:28:87:
                    c2:e9:8f:a7:f4:bf:00:7d:60:ff:33:d4:19:2a:1f:
                    fe:ea:7b:51:5c:51:10:72:da:75:0c:d3:df:c9:a5:
                    fc:30:a1:13:45:8e:6a:a7:1b:bd:fa:39:80:8f:cd:
                    5a:40:08:46:8d:1f:e4:c6:26:4d:31:17:47:c2:fa:
                    1f:08:9c:3a:c7:0b:eb:27:0f:f2:46:03:83:f3:a6:
                    65:42:6d:d9:e3:26:fc:23:89:f5:29:e3:3a:69:50:
                    72:76:20:0f:fe:78:9a:bd:c3:df:7b:d3:11:62:17:
                    4f:af:21:d5:f6:54:c2:98:ab:39:c9:82:07:77:f7:
                    d4:d9:af:64:02:f9:8e:ff:b9:32:a0:14:c8:2a:54:
                    65:a6:31:e5:2f:79:1a:90:0f:6e:16:ba:75:27:fe:
                    33:1e:b2:0f:d2:c6:76:d2:54:34:50:d7:13:54:57:
                    3c:84:3d:cb:09:a9:26:d4:43:ff:a2:7e:0d:50:9b:
                    f4:53:eb:72:3e:5c:84:3c:2e:5a:60:a4:45:b9:8e:
                    9f:c7:c7:fd:df:b0:b0:18:b9:a9:02:06:26:51:4b:
                    69:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BE:BC:D1:72:D9:DF:8A:18:07:93:91:03:16:C6:12:96:34:F8:29
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230322e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:94:b6:e0:09:07:a3:02:f5:13:24:da:75:8c:17:29:8b:90:
         c2:ba:cd:69:7b:c2:2a:66:20:bc:24:6f:15:48:ff:04:40:60:
         40:88:f9:78:d5:94:b8:12:a1:02:d2:95:af:68:f1:de:4e:8e:
         ef:82:d4:71:65:6d:33:0c:c5:88:06:aa:16:7a:1d:00:b1:2d:
         de:a8:64:92:2f:15:20:e0:c5:86:48:f0:f7:94:88:56:e2:c1:
         81:5c:16:a5:1e:78:fb:6d:18:8d:f1:66:92:d4:5b:6f:35:9f:
         6b:44:d7:ae:b4:4a:06:c0:38:b5:83:0a:41:19:8d:f9:77:7f:
         95:d1:44:ae:b9:44:53:94:10:c3:90:5b:e6:9d:b6:26:37:69:
         d6:14:51:c5:2b:67:02:db:52:ab:3f:0d:88:79:16:72:2c:08:
         7f:16:e6:55:c3:17:53:a9:62:0b:d3:82:4a:81:51:2d:77:17:
         2e:3c:5a:72:69:0b:fe:37:03:4f:5e:25:48:a3:bb:4c:20:d7:
         e6:e8:1e:65:64:56:ea:a6:6d:57:6a:6c:8a:36:8c:33:58:fa:
         ef:89:49:e4:67:d9:09:bd:f3:15:46:26:fa:05:2c:e4:9c:b8:
         42:2f:b1:37:09:05:d4:33:7b:10:cc:63:c5:97:02:a2:47:a6:
         7f:17:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:54 2024 by rpki-client on console-fra.rpki-client.org