Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234312e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3234312e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          H36uRFFG740tCSW6QDN+pry1P55YzN92BnwLtVpo5lk=
Subject key identifier:   81:06:B4:AC:55:9C:FA:63:D0:B2:4D:73:B6:34:95:B3:C3:CF:86:F7
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       640462C9692E313CE50824B0BBFB70981B7EC00A
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234312e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:08 +0000
ROA not before:           Tue 05 Mar 2024 18:02:08 +0000
ROA not after:            Tue 04 Mar 2025 18:07:08 +0000
asID:                     52323
IP address blocks:        181.16.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:04:62:c9:69:2e:31:3c:e5:08:24:b0:bb:fb:70:98:1b:7e:c0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:08 2024 GMT
            Not After : Mar  4 18:07:08 2025 GMT
        Subject: CN=8106B4AC559CFA63D0B24D73B63495B3C3CF86F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:3f:37:1c:c2:57:17:18:f1:4a:00:ab:a1:
                    21:9b:61:0e:83:ed:ff:f4:2f:8e:c8:12:f6:d8:44:
                    8e:5b:1d:b8:c8:d7:0b:ae:c3:43:64:e4:26:3d:8e:
                    3c:79:20:38:81:3a:47:5d:8f:5b:d3:4a:0a:7b:96:
                    7d:d4:06:c8:4d:65:53:4a:f9:80:6a:d1:ed:df:9b:
                    59:b8:01:7a:9f:b7:53:cb:b0:03:e1:8a:e7:ca:e7:
                    c6:4b:0d:58:b8:95:ee:0a:14:35:92:cf:b5:c9:ff:
                    3b:be:88:6c:fd:1c:f0:c2:84:08:c5:31:0a:ac:2e:
                    f5:c6:00:f0:9c:78:b8:d8:a3:a9:18:23:c7:78:2b:
                    77:57:1a:40:93:00:0f:12:ce:bd:c2:8f:51:e2:2e:
                    c5:b7:4d:40:a0:73:ec:2f:8f:3d:ae:29:e5:8e:de:
                    ed:87:33:f4:d8:9e:97:0e:d1:16:d2:78:c2:9f:0c:
                    55:34:12:ff:9b:5d:e8:12:88:96:a6:6c:dc:b3:48:
                    d7:e1:b6:15:b0:19:be:21:c9:e7:ff:63:68:dc:a3:
                    74:44:6a:d2:d3:07:7b:00:2e:d5:d4:dc:d6:5d:74:
                    4c:4a:8f:01:6e:82:91:b9:b7:58:d0:bf:a0:1b:44:
                    8f:25:23:74:47:89:71:5d:74:1a:fa:3b:2d:0a:cb:
                    6c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:06:B4:AC:55:9C:FA:63:D0:B2:4D:73:B6:34:95:B3:C3:CF:86:F7
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234312e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:b5:34:4c:90:a6:f1:a0:35:4a:62:ad:4e:e5:06:19:cf:20:
         9c:9d:7b:b2:c7:a3:ec:61:77:e0:d9:d0:e0:52:8e:7a:f6:ce:
         c5:01:4d:f1:b9:41:59:98:d3:01:30:08:ed:5d:41:b1:5c:56:
         cf:1e:6a:af:ce:16:be:1a:d0:bb:49:8e:41:f7:9f:84:67:7f:
         7e:52:bb:bc:c4:79:e3:88:0c:99:0b:b3:f6:4f:9f:bf:80:67:
         48:51:9c:c5:9a:35:ca:99:1c:0a:e4:84:dc:17:e5:84:bd:9a:
         50:30:f7:ae:c8:82:b0:d6:aa:a7:72:71:ab:a2:bc:64:bb:ef:
         0c:6d:b7:ca:84:75:13:04:a5:13:b5:09:32:4a:1b:e5:27:8d:
         01:36:41:87:ad:c9:72:7c:ca:9a:55:56:9a:94:d3:bb:42:24:
         25:4f:c4:d9:4f:25:3b:53:82:3a:f9:7c:e0:e2:68:cd:c4:f7:
         31:27:ea:7f:ee:53:5b:14:de:cc:3e:bf:f3:d0:1f:2f:89:b0:
         47:cb:8a:e7:64:78:6e:33:20:f7:fa:47:f9:af:a3:c6:28:d7:
         7d:03:32:f0:25:02:31:84:3e:e2:4f:64:f1:97:e5:c3:8c:9c:
         14:9d:9e:9c:2c:41:54:23:94:2a:87:2d:aa:51:43:bb:30:64:
         f5:20:8f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:17 2024 by rpki-client on console-fra.rpki-client.org