Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3231362e302f32312d3234203d3e203532323731.roa
File:                     3138312e31362e3231362e302f32312d3234203d3e203532323731.roa (raw, json)
Hash identifier:          uCqMH9CIWs8bLIVHd9pAlUuKcSC7liMiHXweuMQlvbs=
Subject key identifier:   37:56:DE:CA:EE:AC:35:F2:34:9E:2A:D1:5D:F0:F2:23:BA:4C:E5:01
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       4494883FAE25893ED0008AD94323CECBFCAFD3B4
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3231362e302f32312d3234203d3e203532323731.roa
Signing time:             Tue 05 Mar 2024 18:07:14 +0000
ROA not before:           Tue 05 Mar 2024 18:02:14 +0000
ROA not after:            Tue 04 Mar 2025 18:07:14 +0000
asID:                     52271
IP address blocks:        181.16.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 11:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:94:88:3f:ae:25:89:3e:d0:00:8a:d9:43:23:ce:cb:fc:af:d3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:14 2024 GMT
            Not After : Mar  4 18:07:14 2025 GMT
        Subject: CN=3756DECAEEAC35F2349E2AD15DF0F223BA4CE501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:46:9a:7f:d3:02:3b:58:a3:4a:89:bd:e5:
                    ce:75:76:28:73:f4:4b:e8:63:96:cb:56:b1:9e:bf:
                    e3:30:6e:ce:5b:17:b0:e6:1c:b1:29:b9:90:9f:e3:
                    6b:ed:73:45:b0:cf:d3:9e:7d:d3:15:6b:5a:8a:2f:
                    5c:de:90:3d:0f:ef:26:4c:36:dc:13:11:57:f8:42:
                    77:23:7c:2e:dc:8d:c9:3f:20:a6:3d:dc:0f:6c:85:
                    41:37:87:65:6c:cf:78:24:90:09:a6:2e:3d:16:05:
                    31:94:8e:59:97:ab:6e:9e:be:86:7d:e9:fb:f2:70:
                    6b:b1:80:04:56:dc:15:d2:88:cb:e7:30:14:b2:cb:
                    c6:2c:a7:13:81:60:38:43:7c:8a:2b:13:da:86:05:
                    d3:0b:46:f0:b0:e4:ba:49:ec:95:50:4b:8e:1d:d4:
                    e9:ce:e0:43:7e:42:2c:a2:30:c6:c9:e9:a5:f8:82:
                    9d:63:5d:ac:7a:33:ab:6f:e7:a1:2c:92:29:bc:17:
                    35:a2:c7:2c:4e:11:f6:c3:5d:ab:34:36:7d:20:98:
                    7c:b8:66:d1:73:26:1b:c2:e7:f5:f1:79:36:44:63:
                    ce:45:61:47:67:25:6c:cc:5a:11:f2:59:f7:db:64:
                    29:e7:97:66:40:92:9d:3f:02:2b:ae:12:d2:f7:24:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:56:DE:CA:EE:AC:35:F2:34:9E:2A:D1:5D:F0:F2:23:BA:4C:E5:01
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3231362e302f32312d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:7b:04:2b:97:8e:57:f9:75:58:39:42:81:d6:d3:ba:22:78:
         cc:64:06:13:ab:cd:62:99:c8:68:74:47:4c:5b:f7:eb:c4:d8:
         a1:d6:e1:4f:5c:71:ef:1a:a7:6f:b2:80:28:3e:58:61:59:07:
         07:82:04:3a:71:74:9a:a2:f1:07:13:de:e1:94:1b:f3:08:51:
         a9:41:f2:13:86:d1:0c:a7:22:39:da:78:86:2f:5f:45:b2:51:
         6c:52:9a:b8:17:05:2d:6e:d4:35:f4:79:20:e3:9a:6b:4a:01:
         5b:f5:1f:a2:70:77:a8:3f:76:64:d1:76:32:c0:64:e3:c3:2b:
         49:de:d7:57:4c:a2:27:11:c7:eb:04:29:e2:c5:56:98:e9:f5:
         9f:90:c5:48:c4:43:62:27:d9:bf:40:18:a6:c1:63:da:cf:4a:
         98:cc:5d:04:65:a0:27:8f:36:68:4a:e6:ea:3b:0e:d2:00:7e:
         f3:d7:d3:14:a8:5f:9f:f8:4f:51:d9:2d:28:f0:03:05:eb:31:
         d9:fd:7a:b9:90:7f:2e:0c:34:ea:36:a0:f3:b2:51:72:bf:46:
         89:5d:24:6c:fa:2f:94:e4:03:fb:c0:15:50:a3:01:3d:f2:30:
         66:ef:f5:63:9f:4b:e0:12:d5:30:3a:88:e3:c7:38:48:d2:52:
         af:d8:54:f6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURJSIP64liT7QAIrZQyPOy/yv07QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNDAzMDUxODAyMTRaFw0yNTAzMDQxODA3MTRaMDMxMTAvBgNV
BAMTKDM3NTZERUNBRUVBQzM1RjIzNDlFMkFEMTVERjBGMjIzQkE0Q0U1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJfkaaf9MCO1ijSom95c51dihz
9EvoY5bLVrGev+Mwbs5bF7DmHLEpuZCf42vtc0Wwz9OefdMVa1qKL1zekD0P7yZM
NtwTEVf4QncjfC7cjck/IKY93A9shUE3h2Vsz3gkkAmmLj0WBTGUjlmXq26evoZ9
6fvycGuxgARW3BXSiMvnMBSyy8YspxOBYDhDfIorE9qGBdMLRvCw5LpJ7JVQS44d
1OnO4EN+QiyiMMbJ6aX4gp1jXax6M6tv56Eskim8FzWixyxOEfbDXas0Nn0gmHy4
ZtFzJhvC5/XxeTZEY85FYUdnJWzMWhHyWffbZCnnl2ZAkp0/AiuuEtL3JFoRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUN1beyu6sNfI0nirRXfDyI7pM5QEwHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzIzMTM2MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMjMyMzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7UQ2DAN
BgkqhkiG9w0BAQsFAAOCAQEAN3sEK5eOV/l1WDlCgdbTuiJ4zGQGE6vNYpnIaHRH
TFv368TYodbhT1xx7xqnb7KAKD5YYVkHB4IEOnF0mqLxBxPe4ZQb8whRqUHyE4bR
DKciOdp4hi9fRbJRbFKauBcFLW7UNfR5IOOaa0oBW/UfonB3qD92ZNF2MsBk48Mr
Sd7XV0yiJxHH6wQp4sVWmOn1n5DFSMRDYifZv0AYpsFj2s9KmMxdBGWgJ482aErm
6jsO0gB+89fTFKhfn/hPUdktKPADBesx2f16uZB/Lgw06jag87JRcr9GiV0kbPov
lOQD+8AVUKMBPfIwZu/1Y59L4BLVMDqI48c4SNJSr9hU9g==
-----END CERTIFICATE-----
Generated at Wed May 1 18:11:14 2024 by rpki-client on console-ams.rpki-client.org