Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233362e302f32322d3234203d3e203532333233.roa
File:                     3138312e31362e3233362e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier:          QFSZ4kiJ9kWXp6iVLlXnTX5ecSM6ICM1x5SjcNm3VLc=
Subject key identifier:   DD:C0:88:D1:F9:DE:A9:86:05:DB:D2:89:5E:6F:F0:80:7C:52:6E:03
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       3B2CD4CC82AC88755D92A7766BB5767E5CE52700
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233362e302f32322d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:20 +0000
ROA not before:           Tue 05 Mar 2024 18:02:20 +0000
ROA not after:            Tue 04 Mar 2025 18:07:20 +0000
asID:                     52323
IP address blocks:        181.16.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2c:d4:cc:82:ac:88:75:5d:92:a7:76:6b:b5:76:7e:5c:e5:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:20 2024 GMT
            Not After : Mar  4 18:07:20 2025 GMT
        Subject: CN=DDC088D1F9DEA98605DBD2895E6FF0807C526E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:90:49:a2:0b:77:25:81:f1:b0:69:a3:3e:
                    8d:11:3b:ba:02:e3:f9:a7:f0:70:65:d8:12:90:b6:
                    3e:f5:5e:28:d3:9d:38:d8:72:62:9a:4e:f3:e1:38:
                    60:7a:f4:4e:ec:f2:52:81:bb:d2:c6:91:40:85:1b:
                    e6:85:b4:88:60:5a:22:42:13:d5:db:88:92:05:7d:
                    00:1f:5b:b8:30:b9:bd:9c:bb:3c:fb:63:5f:8d:b8:
                    f6:72:c4:05:55:33:e3:78:c2:ed:af:56:4c:77:c0:
                    e9:18:b9:ec:65:46:34:f4:2f:ef:ff:08:de:5a:e5:
                    37:0c:a1:9b:ac:e0:d7:67:2c:f7:f4:ed:85:2d:e6:
                    bc:09:f3:bb:ca:62:00:59:bc:b5:d9:a3:5e:31:7f:
                    42:87:09:eb:d8:a8:0b:97:25:f5:d2:0a:49:4b:51:
                    f2:33:9b:c2:31:5a:fe:63:9e:1e:00:9e:0a:54:aa:
                    23:fe:cf:dc:d0:0c:da:e3:98:e0:17:7b:18:8d:da:
                    09:94:88:6c:30:9c:d3:04:be:e6:3b:2f:e0:86:c5:
                    9d:b9:1b:42:ca:04:1d:7e:96:b2:a7:01:83:49:09:
                    af:9c:f5:47:58:dc:32:0d:8b:19:69:1e:75:11:ee:
                    47:60:c8:37:60:9b:ee:11:5d:51:f7:8d:a8:e2:2d:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C0:88:D1:F9:DE:A9:86:05:DB:D2:89:5E:6F:F0:80:7C:52:6E:03
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233362e302f32322d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:6b:b0:31:49:da:e4:4f:66:fb:fc:d2:0d:4f:49:a6:34:ac:
         c6:4e:06:b6:ea:53:01:5c:32:99:ad:91:d0:38:a5:b3:3b:39:
         a3:9b:4c:4d:5d:39:f2:ed:bc:49:e5:b9:ff:17:b2:76:e2:5b:
         fb:cf:a8:d3:f3:ab:01:a5:00:b8:02:52:42:21:84:51:ed:95:
         2f:c9:17:d0:64:d4:7a:3c:1b:d9:c1:cb:36:4e:0e:0b:d4:82:
         c8:c7:92:03:68:1a:26:2c:06:7d:0e:00:44:08:57:6d:98:9c:
         98:7d:50:48:f7:14:dc:d0:a9:ea:2d:d8:69:19:12:9b:db:fb:
         dd:a8:b8:d9:a3:b0:75:e1:74:92:44:33:07:24:e4:0b:1d:ea:
         47:f6:32:94:76:bc:c1:7a:cb:27:30:2b:5a:f6:f9:d3:81:b1:
         39:6d:a8:1e:d4:97:dc:3a:1f:12:c6:46:a6:df:2b:b1:bc:1d:
         d0:e4:ae:75:7b:2d:60:3f:bb:68:67:4a:a3:94:8d:c3:9b:43:
         89:a6:32:3e:76:87:f5:17:e7:92:ca:34:36:6c:7b:f6:f7:94:
         18:53:2c:21:25:58:cf:48:30:e7:57:f2:71:68:3d:67:7d:19:
         cd:66:49:12:c6:37:7a:d2:83:ef:7d:59:24:ef:63:31:21:8d:
         cc:c9:71:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:37 2024 by rpki-client on console-ams.rpki-client.org