Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233352e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3233352e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          9HTF4Ti8kw1fldRdcW3if9Gvy9/b/Nr0A0f57VRHvVs=
Subject key identifier:   67:59:CC:E0:0F:CA:72:F0:2C:D3:6A:83:BA:29:7E:B1:B1:50:EF:65
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       44C8B53FACCD6CB6DF683D672D223BC647E2A264
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233352e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:11 +0000
ROA not before:           Tue 05 Mar 2024 18:02:11 +0000
ROA not after:            Tue 04 Mar 2025 18:07:11 +0000
asID:                     52323
IP address blocks:        181.16.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c8:b5:3f:ac:cd:6c:b6:df:68:3d:67:2d:22:3b:c6:47:e2:a2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:11 2024 GMT
            Not After : Mar  4 18:07:11 2025 GMT
        Subject: CN=6759CCE00FCA72F02CD36A83BA297EB1B150EF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:32:b5:ad:a4:19:0c:22:72:79:89:b4:db:
                    85:c0:48:c4:1d:12:b0:1b:bb:82:bd:62:df:e5:24:
                    a6:05:ea:34:4f:6d:ca:ea:49:b2:26:c5:9a:44:89:
                    f5:2b:79:27:cc:2d:75:ce:6c:4d:e0:18:7d:10:2b:
                    3a:3e:42:41:04:bb:1e:dc:da:75:32:15:12:1f:f5:
                    04:57:6c:6b:af:32:a4:11:44:31:36:f8:d2:f4:87:
                    51:9c:06:62:c8:85:c7:24:5f:6d:19:79:bb:51:2a:
                    65:3b:92:f5:82:bb:2e:fd:0d:30:8b:48:01:9f:e4:
                    e4:f0:94:2b:46:49:f5:12:24:9d:8b:aa:1c:27:52:
                    cc:ce:98:4c:cc:35:fc:9a:d4:9c:c9:37:92:29:21:
                    f2:d4:95:1d:d7:bb:d8:e0:83:3b:4d:00:ef:ea:f6:
                    93:ac:d9:7a:b0:9c:ad:a7:c0:54:ab:c7:71:9a:69:
                    b6:6e:48:cd:f7:2f:67:bf:69:1b:c2:c8:ed:da:e9:
                    02:10:39:c3:21:27:25:bb:76:05:87:04:80:a1:38:
                    02:c5:3b:8f:72:53:ff:43:c6:c6:ef:86:fb:0e:13:
                    3e:4e:0d:4d:48:3a:8d:7e:25:a6:4b:22:70:6a:92:
                    17:07:3f:52:31:f4:ef:cb:01:1b:2d:99:06:9d:48:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:59:CC:E0:0F:CA:72:F0:2C:D3:6A:83:BA:29:7E:B1:B1:50:EF:65
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233352e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:51:df:fc:08:bd:97:db:eb:8b:d2:85:9f:83:e9:76:a0:a6:
         44:be:40:6d:ec:6e:4d:56:3c:c4:1d:88:ab:d0:09:05:a9:1b:
         52:2c:f1:b7:b9:d2:41:7b:6a:c6:f9:ec:70:34:1b:6e:98:2b:
         21:2c:84:07:3b:ac:3e:cf:af:9f:8d:f1:0f:e6:ef:ea:de:71:
         26:57:17:5a:26:44:a8:aa:49:30:23:80:da:29:e0:7f:2d:e9:
         97:b5:55:c1:92:b0:70:98:59:a6:50:45:8e:a4:1b:e6:ed:78:
         41:a1:f3:15:3d:12:5d:ea:d1:8c:3e:22:28:38:15:ff:46:fc:
         1e:7d:57:e5:d9:fd:e3:e2:db:1e:90:88:0b:a6:c7:b6:a3:21:
         60:72:53:19:7a:f3:a4:bf:32:27:60:77:01:d5:b7:31:29:74:
         04:4f:59:05:c0:60:ef:3d:8f:f4:dc:f5:7e:c9:50:98:ab:ca:
         df:16:d2:5e:bb:6f:bc:2a:15:14:5a:a5:a6:03:40:2a:5f:62:
         80:0b:ce:df:59:90:c9:60:17:8f:c2:7a:56:c9:dc:90:93:17:
         e1:eb:76:bc:ed:87:23:34:f2:f1:2b:ab:38:74:a8:4b:09:42:
         41:d5:86:72:d1:29:35:33:86:2c:e4:03:e9:5b:bb:cd:8e:88:
         e1:29:57:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:23 2024 by rpki-client on console-ams.rpki-client.org