Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233352e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3233352e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          MEE8Rvr9n3KIi2ccLCj4Rsi6mj78fOP4O+fPT6+s9Sc=
Subject key identifier:   49:CB:3D:0B:DF:68:DB:3A:A0:0A:A3:9D:50:27:54:14:F3:0E:D5:25
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       495A1EDE5F0DDDCB44DF0041A728D87C55D07378
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233352e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:45 +0000
ROA not before:           Tue 04 Feb 2025 18:32:45 +0000
ROA not after:            Tue 03 Feb 2026 18:37:45 +0000
asID:                     52323
IP address blocks:        181.16.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5a:1e:de:5f:0d:dd:cb:44:df:00:41:a7:28:d8:7c:55:d0:73:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:45 2025 GMT
            Not After : Feb  3 18:37:45 2026 GMT
        Subject: CN=49CB3D0BDF68DB3AA00AA39D50275414F30ED525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:71:e2:2e:d1:2d:9d:70:b0:19:0c:1c:e5:
                    c4:75:e5:24:34:ac:0c:39:be:0e:be:7b:cb:55:e0:
                    58:f2:b4:00:af:be:4d:19:5e:07:17:43:a1:35:96:
                    7c:00:d4:aa:38:60:17:bd:65:a6:51:f8:c7:be:d8:
                    54:4d:1a:a1:f9:f4:be:0a:aa:6e:06:42:1f:8a:15:
                    d5:cc:a8:f3:a0:dc:23:0a:82:0e:66:5f:78:d3:b1:
                    32:86:37:91:d1:1e:93:e8:3d:48:0c:57:13:2e:73:
                    1c:40:86:6b:60:d0:76:fd:7f:99:0e:72:ce:e4:39:
                    e8:54:06:ad:91:07:46:77:c9:f3:f9:41:d4:fe:28:
                    95:0a:57:15:ff:19:11:6e:0a:43:e9:17:8a:56:ac:
                    ce:e2:51:45:db:5b:78:93:ae:10:8c:94:9d:17:1e:
                    e7:04:e1:01:e7:30:35:62:7f:98:f6:57:97:a9:97:
                    5b:31:d0:a9:ef:77:ff:23:c2:d2:cf:bf:51:51:b2:
                    13:72:ae:ca:1c:26:11:aa:d6:ed:70:01:70:69:97:
                    29:46:90:25:25:50:c6:a5:99:b8:2f:78:d0:0d:48:
                    49:e7:35:03:cf:d5:bf:c9:e5:14:ba:57:1d:98:3f:
                    0f:db:bc:81:53:71:9a:6b:8d:fd:4c:a1:78:78:f8:
                    31:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CB:3D:0B:DF:68:DB:3A:A0:0A:A3:9D:50:27:54:14:F3:0E:D5:25
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233352e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:8e:d1:ea:13:75:37:93:39:56:1f:20:e7:78:3f:fe:6d:f0:
         09:4b:be:77:48:fe:1c:b4:d1:72:97:32:30:fe:cd:9f:bd:72:
         c1:d2:ee:aa:f8:41:77:ac:36:e5:05:04:22:a6:95:37:e5:38:
         0b:d8:6d:cc:45:3a:06:02:0d:68:d3:86:2e:0c:9f:68:21:64:
         01:23:65:b8:6a:e8:f2:48:a8:54:fe:09:08:85:df:a9:0a:a4:
         dd:e1:56:7a:f8:c2:fb:99:30:c1:1c:28:fd:93:28:e0:62:1f:
         12:97:ad:1f:90:84:af:41:7c:2a:0b:9e:18:1a:08:69:2a:45:
         17:bd:5c:7a:20:f5:53:b8:8f:19:48:88:86:d0:2b:bb:6e:41:
         65:25:1d:b2:8f:23:46:43:28:95:3a:eb:a7:84:91:e7:95:ec:
         52:8c:69:4d:86:17:1b:14:b5:bd:0a:76:77:13:b1:66:49:0c:
         5c:e3:68:1f:c2:83:5b:b4:cf:9e:93:0d:4d:3b:f3:c7:69:ea:
         a9:c1:13:d0:38:fe:2e:96:29:27:f2:70:9f:9d:4d:a2:70:a3:
         90:5e:e0:80:81:e7:b1:83:6f:50:38:df:fa:f3:52:9f:10:5f:
         2f:fe:df:4c:e0:ee:9f:03:b9:bf:fb:f2:7e:0b:96:d3:b3:69:
         13:90:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:27 2025 by rpki-client