Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234302e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3234302e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          9AwQjflQvkajXmLYwwB3T1bMLNmoIO/+OLZxC+ldufw=
Subject key identifier:   20:3E:3E:8C:27:5A:86:40:82:76:85:C3:D5:72:E0:14:43:F7:4D:7B
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       3921B326C4DAF8B1D806AC999AF8D565AEB8E6CA
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234302e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:18 +0000
ROA not before:           Tue 05 Mar 2024 18:02:18 +0000
ROA not after:            Tue 04 Mar 2025 18:07:18 +0000
asID:                     52323
IP address blocks:        181.16.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:21:b3:26:c4:da:f8:b1:d8:06:ac:99:9a:f8:d5:65:ae:b8:e6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:18 2024 GMT
            Not After : Mar  4 18:07:18 2025 GMT
        Subject: CN=203E3E8C275A8640827685C3D572E01443F74D7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f0:9c:79:18:83:b2:e5:50:2f:3b:cc:0f:9c:
                    31:27:11:9e:34:2d:38:46:02:80:92:23:88:20:43:
                    b6:3e:32:3b:49:f1:7b:c1:90:00:75:a6:95:07:e0:
                    72:c2:b9:98:10:2e:83:93:f7:1f:da:d5:6e:52:58:
                    e3:d3:38:b2:ea:8a:e1:69:8b:24:a7:b9:ae:bf:00:
                    88:94:93:6e:7d:7e:42:36:2b:4b:0c:b8:90:d9:80:
                    0b:1b:04:5e:21:52:7d:f4:4d:69:aa:79:ce:8f:e1:
                    4c:c2:08:b0:ea:72:16:04:e8:bc:61:03:47:ba:ab:
                    38:bd:c8:42:36:b0:e8:c1:05:fc:ea:64:fb:32:d2:
                    2b:0a:eb:4b:7a:6a:b1:3d:65:f2:77:2e:5a:3b:f2:
                    21:2e:4d:24:a4:00:ec:e6:48:58:25:69:f8:97:18:
                    35:7a:e2:a8:d8:e6:9a:84:61:08:b2:ed:24:5a:17:
                    4b:f7:6c:70:18:49:ad:37:53:5a:6d:23:c1:ce:d8:
                    b2:52:25:d8:df:1e:af:ba:5f:0c:23:29:ce:ad:e1:
                    e3:f1:e3:36:2e:f7:4d:03:1b:04:1b:31:e7:da:a4:
                    2c:14:24:40:08:31:f8:69:bb:3f:be:0e:67:0f:45:
                    56:40:cf:18:04:4f:b8:c2:68:c1:39:8b:ee:a3:c5:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3E:3E:8C:27:5A:86:40:82:76:85:C3:D5:72:E0:14:43:F7:4D:7B
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234302e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:89:f4:16:00:cb:18:7f:d3:e7:cf:75:7d:08:8d:f4:07:c8:
         28:68:8b:76:45:84:a7:c0:cb:f7:7a:21:20:b9:3e:27:5f:86:
         5c:d6:33:34:f2:27:e3:88:b8:2d:5b:60:5f:77:3d:2d:83:86:
         4d:a8:7b:8e:52:7d:77:31:1e:b6:f8:a4:73:40:51:41:42:0d:
         ea:ce:36:84:ee:1e:cb:09:eb:db:f7:03:24:80:e8:87:1b:d9:
         b2:0b:c3:1f:28:88:c8:0d:a0:5b:18:06:0c:2a:b4:4f:bb:79:
         e7:d4:4b:5c:55:a6:1b:6e:67:92:bc:bb:21:44:53:dc:69:c7:
         5c:d4:3f:0b:21:06:28:7b:d2:1e:55:6d:02:57:10:eb:cc:1e:
         72:ff:9d:95:45:94:01:a0:42:96:15:6d:81:ae:37:51:7f:37:
         b5:02:8e:53:ff:9d:69:1c:a6:ec:2f:b5:05:4d:5e:5a:d9:95:
         60:dd:1c:7f:07:0a:37:fe:b5:de:bf:7e:b1:fd:e9:7c:fd:bd:
         dc:7a:f5:1d:c9:2e:55:42:92:e3:64:9a:2a:4d:1f:a7:dd:35:
         b0:3f:fa:f4:12:ab:e3:a7:f2:73:d5:36:e7:2f:97:72:9f:3d:
         43:c5:81:95:ee:f9:de:98:59:64:c2:22:8c:c6:7e:ab:b6:a3:
         0a:df:a6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:54 2024 by rpki-client on console-fra.rpki-client.org