Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230342e302f32322d3234203d3e203532333233.roa
File:                     3138312e31362e3230342e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier:          okdyBOFR0QYNYvHO3zXGRWByskI96ggky2Yp/3l3g98=
Subject key identifier:   59:95:8D:9B:E3:A1:56:73:B1:B4:33:BC:4C:AB:44:FA:D8:FD:5F:FB
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       1140E3AF3B1FBDD33A4B793CB9206B9212DA09F8
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230342e302f32322d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:53 +0000
ROA not before:           Tue 04 Feb 2025 18:32:53 +0000
ROA not after:            Tue 03 Feb 2026 18:37:53 +0000
asID:                     52323
IP address blocks:        181.16.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:40:e3:af:3b:1f:bd:d3:3a:4b:79:3c:b9:20:6b:92:12:da:09:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:53 2025 GMT
            Not After : Feb  3 18:37:53 2026 GMT
        Subject: CN=59958D9BE3A15673B1B433BC4CAB44FAD8FD5FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:50:e3:80:f3:cd:00:66:34:a1:3a:08:f2:
                    77:8d:9d:5f:4c:82:11:a0:1e:42:a8:c9:3b:04:d0:
                    aa:b4:ea:69:cd:fc:06:a4:85:b3:8e:e6:c8:d8:92:
                    22:f7:e4:7d:cc:f1:78:76:af:6f:f6:5d:37:d5:0b:
                    a5:c3:b6:54:b2:06:77:a7:a2:df:ff:6e:18:9e:a1:
                    19:b9:9a:87:fa:e1:35:5d:f5:5f:1a:1c:8a:8f:b4:
                    bf:95:26:33:0c:3b:d1:76:0e:54:67:6f:63:2e:23:
                    9e:95:57:cf:82:c4:63:fa:b7:17:7c:26:e3:09:c8:
                    3c:f4:1b:ba:a9:2f:1f:07:e5:69:28:72:7e:01:56:
                    e8:08:5e:b2:aa:02:3d:ef:4f:01:16:85:98:a4:7b:
                    2b:84:ff:d2:1d:f7:88:1a:ab:1f:7f:79:bc:68:c3:
                    7a:7f:0d:d1:b3:55:61:58:76:3a:d5:70:cc:82:06:
                    f0:4e:c0:0b:51:91:46:91:f2:79:23:fa:99:b9:ff:
                    07:27:b5:f2:78:91:81:cf:0b:19:9b:d9:99:79:1e:
                    eb:15:05:23:43:b6:cf:00:ad:e8:bf:b3:35:09:36:
                    ef:37:3b:6c:58:e2:23:3b:6c:88:4a:7b:84:dc:09:
                    5b:dd:9f:13:e7:91:00:72:54:fa:92:78:d7:09:92:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:95:8D:9B:E3:A1:56:73:B1:B4:33:BC:4C:AB:44:FA:D8:FD:5F:FB
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230342e302f32322d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:95:b8:0d:da:1a:1a:23:5c:01:a0:df:07:89:9e:fd:9b:ee:
         d6:08:5a:d2:a8:ba:57:f8:a0:80:dc:4b:1c:6f:26:72:fb:41:
         7a:8e:b2:66:6f:32:f3:8d:ec:f5:92:73:49:cb:2d:b9:81:bc:
         bf:ad:e5:ce:e9:8b:e1:8a:ec:cb:11:80:a1:56:2a:b4:e8:9d:
         2a:07:35:53:af:24:d6:1c:bc:0d:e2:53:93:6f:4d:d1:3c:1e:
         76:dc:8b:ab:e4:ff:23:3c:25:c4:06:c2:74:ce:f3:1c:ad:80:
         5b:66:3f:fd:c1:9d:0e:55:18:88:c0:85:6b:dd:5e:8b:6c:0a:
         a6:d2:a2:d9:2d:68:5b:8d:10:fa:a1:f1:54:df:ba:91:bf:94:
         6a:5e:9c:b5:7c:69:07:cd:33:8b:c2:98:56:76:52:af:b8:c2:
         68:d8:4f:3b:69:d2:9f:ef:22:bb:e1:eb:23:b6:bb:94:fd:16:
         15:f6:65:ae:56:c3:05:ae:1e:2d:7f:7a:18:77:08:2c:57:a1:
         29:10:4a:d3:f4:ea:a3:3e:d5:bd:e5:28:e7:9e:7a:92:e0:d5:
         0e:17:98:dd:97:23:8a:e1:1e:76:22:ea:cb:7a:2b:77:28:4a:
         5b:77:ca:b8:9a:1f:9e:85:d2:27:63:e4:91:8c:a7:10:bf:b6:
         c8:2f:94:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:44 2025 by rpki-client