Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230342e302f32322d3234203d3e203532333233.roa
File:                     3138312e31362e3230342e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier:          wo2fu+TyrxywQc9e3IpIS9Qv7q+5LFqvFQAPlKhW9j4=
Subject key identifier:   EF:5B:A5:B7:5A:7D:5A:08:3D:6C:FC:3D:DA:1E:C1:8B:29:76:53:B4
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       0D5A493EF8FD9F85261369B355D61ABE71039F26
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230342e302f32322d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:11 +0000
ROA not before:           Tue 05 Mar 2024 18:02:11 +0000
ROA not after:            Tue 04 Mar 2025 18:07:11 +0000
asID:                     52323
IP address blocks:        181.16.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5a:49:3e:f8:fd:9f:85:26:13:69:b3:55:d6:1a:be:71:03:9f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:11 2024 GMT
            Not After : Mar  4 18:07:11 2025 GMT
        Subject: CN=EF5BA5B75A7D5A083D6CFC3DDA1EC18B297653B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8e:36:81:3e:ec:d4:18:7c:22:b1:2d:0c:d0:
                    01:39:8b:92:a4:f9:6f:d3:f8:09:a2:52:6a:b5:dd:
                    92:b5:57:e3:33:39:0f:91:fa:c3:53:cc:c6:6a:5a:
                    49:1e:35:b9:46:2a:de:a3:73:dd:b5:8e:13:cf:0c:
                    d6:4a:83:85:32:47:e8:63:ce:28:fd:71:d1:3c:f6:
                    3a:fc:5c:ef:ff:d1:53:eb:09:d2:d6:85:7a:dd:58:
                    60:8a:40:48:6d:8f:8e:78:7a:e1:13:dd:9d:d0:0c:
                    24:6c:08:f0:c3:a1:98:d6:26:ad:eb:87:0b:ff:4c:
                    ae:bb:92:29:75:69:10:49:7e:57:ef:a4:4b:31:ae:
                    4f:67:b2:02:5b:e8:1e:c0:2e:bd:5a:d6:b6:96:f7:
                    6d:86:7e:c7:b6:9b:f8:30:4b:b7:c0:78:af:16:fe:
                    b1:c1:de:2f:cc:cf:18:60:9a:78:88:69:6e:3c:c9:
                    f3:5d:8b:2c:6b:c2:53:a2:b3:4f:73:35:5c:da:cb:
                    ea:12:cc:3f:04:f9:46:b5:07:89:da:36:f0:db:b8:
                    1f:54:c3:41:10:c7:f5:f5:0f:9b:bc:d9:c4:7a:ba:
                    bd:83:65:1a:83:42:99:45:f0:d1:72:7d:1f:08:88:
                    6b:61:cc:11:2a:87:41:cf:9a:3c:5c:11:95:91:00:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5B:A5:B7:5A:7D:5A:08:3D:6C:FC:3D:DA:1E:C1:8B:29:76:53:B4
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230342e302f32322d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:51:32:0c:0d:3e:ff:ad:6f:6f:ab:98:af:90:36:8c:5c:9e:
         24:91:9a:97:62:23:4d:87:75:ca:13:65:b7:5e:1e:87:74:04:
         4d:86:03:8e:cb:63:92:9b:b8:1d:aa:95:16:4e:bb:b9:ea:26:
         c0:07:da:ad:fc:14:ba:50:25:57:20:f8:aa:bb:ac:ae:fa:17:
         37:5f:3b:9f:bc:15:be:4c:82:6b:02:d5:84:80:de:89:fd:09:
         e4:aa:69:43:c0:2b:31:9a:23:b1:28:a3:50:c8:3b:6e:6b:2b:
         45:95:5f:90:01:57:5d:8a:01:dd:28:c7:3c:4b:d4:76:48:50:
         24:4b:dc:e4:dd:0e:78:b5:b5:36:b2:98:a6:e5:f3:c4:c9:4b:
         50:72:f4:3f:27:f1:da:c9:e2:4d:8e:e6:a8:ca:99:38:63:f0:
         ca:de:d8:17:a6:b3:3c:1e:43:25:2d:73:0d:96:ca:28:4f:85:
         c4:54:5b:d5:6d:b7:63:de:48:eb:93:6a:6d:69:6b:ba:9a:05:
         c0:40:67:84:00:19:3a:d1:66:e9:a1:6f:78:97:b3:76:3f:a7:
         5c:f1:48:33:40:ec:e5:47:0a:04:0d:e0:b3:e7:b0:42:33:ee:
         73:2e:00:be:8c:2f:2f:0d:88:3e:fb:08:a6:e2:9f:3d:1a:5f:
         9e:86:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:23 2024 by rpki-client on console-ams.rpki-client.org