Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230332e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3230332e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          vLPtSGuDB6GRMY1uyOURg7vcVG433iDmP9VOOLoQ/w0=
Subject key identifier:   F6:CD:6C:4F:64:A7:97:3F:29:E8:B6:8D:18:30:C1:42:63:58:02:83
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       5DC7E41C26ECBB79C6B2615555BAB97CD2BA5308
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230332e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:23 +0000
ROA not before:           Tue 05 Mar 2024 18:02:23 +0000
ROA not after:            Tue 04 Mar 2025 18:07:23 +0000
asID:                     52323
IP address blocks:        181.16.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c7:e4:1c:26:ec:bb:79:c6:b2:61:55:55:ba:b9:7c:d2:ba:53:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:23 2024 GMT
            Not After : Mar  4 18:07:23 2025 GMT
        Subject: CN=F6CD6C4F64A7973F29E8B68D1830C14263580283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:90:b2:9a:15:9c:73:bf:6d:06:c9:c3:0a:
                    bd:36:c8:61:c9:c7:00:f0:77:de:29:7e:6c:46:c2:
                    02:a4:1c:d9:80:fc:2c:f1:f2:98:6b:aa:4b:8f:fe:
                    38:53:1f:0b:a1:0f:97:53:4b:bd:24:56:37:33:09:
                    dc:4c:d8:88:e9:66:ab:ef:46:79:4f:93:84:bc:d7:
                    31:bd:58:fa:d3:4b:b3:45:af:4d:3a:40:47:fe:e5:
                    35:02:1a:58:dc:03:c8:14:8b:7a:1f:70:fb:ec:b2:
                    26:27:fc:5f:a2:ca:fa:16:28:f4:48:1f:9e:47:82:
                    73:fa:d8:0a:3c:20:fe:cb:cf:b4:bd:d9:8c:6d:79:
                    30:45:6a:46:9d:b5:16:ff:41:c1:8b:fa:04:fb:33:
                    06:d6:1c:1b:61:53:05:a0:54:23:8a:d5:7a:ba:49:
                    e7:f4:91:bf:fe:1e:46:0a:00:c6:ec:a9:9f:31:9f:
                    8a:fc:b4:a2:0d:60:99:c5:4a:46:03:59:b4:fd:b2:
                    a0:99:d6:e9:ea:16:fc:0f:83:48:eb:d8:8b:31:57:
                    f9:d1:12:bd:7f:77:22:ac:d0:3c:b9:ed:e6:d3:b3:
                    a1:64:56:7c:ac:70:90:fa:37:01:0d:83:0d:59:06:
                    b0:6c:52:b8:35:ee:ec:f6:e8:c8:a3:a8:13:a8:e9:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CD:6C:4F:64:A7:97:3F:29:E8:B6:8D:18:30:C1:42:63:58:02:83
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230332e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:67:2d:b2:6a:f2:a3:53:83:b1:19:99:f7:38:e7:29:3c:
         a4:f3:fa:36:08:ff:00:4e:78:12:9a:68:f6:63:b7:6f:b8:c5:
         0d:68:cd:0d:45:73:39:dd:c8:56:6e:ee:30:04:b3:b7:23:a0:
         4b:dc:7b:37:6c:df:d1:a0:e8:cb:87:b4:d8:21:2e:31:1c:52:
         1a:a2:5e:79:f9:9a:8c:bb:60:ad:50:14:35:6c:9a:a5:1c:5a:
         1b:21:f8:e3:91:d9:07:c4:35:a4:0e:4d:af:37:47:ac:b5:bd:
         4e:76:e5:21:83:0e:a0:ad:a8:9a:df:40:c9:3f:7c:69:11:da:
         ad:01:dc:ae:36:56:95:9b:da:3f:ce:b0:61:e2:1e:6d:1b:48:
         b2:18:5a:3d:c4:0a:cd:d3:1b:56:92:e2:82:19:52:b3:12:96:
         e3:d0:4b:b7:08:77:37:0a:4f:21:ab:12:a7:1d:67:0c:eb:9e:
         dd:49:79:85:d3:d1:87:48:fa:f7:63:ba:d9:e6:af:a1:f4:f4:
         6e:8a:57:64:36:f8:8a:d2:28:08:b6:94:ce:3c:b3:8e:fd:6e:
         3b:e4:e2:2b:35:6a:f1:f6:fc:da:3f:10:fa:92:22:cc:3a:06:
         a2:0e:5d:29:e0:36:47:c3:9a:e6:30:55:67:1b:50:a8:ff:cf:
         0f:33:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:54 2024 by rpki-client on console-fra.rpki-client.org