Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234322e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3234322e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          FsoD+B3nrBB85I94xeAdeiH1NufRatH5ugzeuDhUfZQ=
Subject key identifier:   1F:3D:5D:B3:D3:61:D1:23:9F:8B:3E:9C:EB:EC:02:E3:E0:E3:06:8A
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       7A50251F219EBAAE5CE7D49F48ED9166FEA840B3
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234322e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:42 +0000
ROA not before:           Tue 04 Feb 2025 18:32:42 +0000
ROA not after:            Tue 03 Feb 2026 18:37:42 +0000
asID:                     52323
IP address blocks:        181.16.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:50:25:1f:21:9e:ba:ae:5c:e7:d4:9f:48:ed:91:66:fe:a8:40:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:42 2025 GMT
            Not After : Feb  3 18:37:42 2026 GMT
        Subject: CN=1F3D5DB3D361D1239F8B3E9CEBEC02E3E0E3068A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ba:08:16:54:85:3c:cf:7e:a8:62:ae:3f:4f:
                    af:dc:7b:ea:dd:12:7c:d5:a3:4c:fe:f6:b9:a4:a0:
                    90:58:41:25:b5:ea:ab:72:ba:69:b3:78:27:b0:dc:
                    33:96:50:77:1e:78:9f:b6:0a:89:57:e7:4b:65:e7:
                    6e:6a:4a:cf:26:f1:65:fb:cb:05:8f:f8:95:b1:5f:
                    c3:76:cf:e1:f4:12:32:fd:13:2a:43:44:87:be:a9:
                    09:7d:4e:9b:03:5a:e8:91:44:63:a9:ce:6a:63:6a:
                    11:3b:37:77:63:a7:b5:40:31:6f:ba:9e:9c:91:67:
                    0f:15:17:03:c9:e2:70:e2:d0:66:05:89:26:f3:81:
                    7d:2a:f3:1e:8c:39:ec:77:2a:04:3b:45:e0:aa:93:
                    85:af:73:32:ee:72:16:55:bc:d3:ca:85:58:19:ee:
                    61:29:41:56:5b:70:a2:81:5c:29:1f:87:8f:66:d5:
                    2a:96:a6:85:5c:80:21:65:92:0c:83:a4:f1:c5:d7:
                    43:2b:b6:88:ab:e6:17:35:3f:0b:8e:04:af:90:5e:
                    b6:93:4c:19:0f:fc:26:78:e5:b8:c6:f1:b6:9d:8b:
                    56:ac:c1:d7:ce:f6:e2:d0:eb:40:5d:dd:23:e3:7d:
                    9b:c7:69:7b:7c:48:1f:f8:86:ad:65:52:75:92:c9:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3D:5D:B3:D3:61:D1:23:9F:8B:3E:9C:EB:EC:02:E3:E0:E3:06:8A
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234322e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:02:fe:4c:76:8b:12:3e:1b:c3:9b:d0:84:6f:72:c7:fe:43:
         23:80:00:75:5d:1a:0b:8f:96:cb:2e:73:3c:75:da:e5:65:c9:
         d9:f5:1b:35:d0:d3:9e:36:72:d0:38:2f:d1:49:be:f7:50:3c:
         69:21:48:ae:e6:f8:15:2c:a9:4b:8e:18:90:02:3d:0f:ed:0e:
         05:54:17:d6:ec:b2:f0:c2:b5:84:46:b5:b9:5e:e8:f8:12:20:
         97:92:d8:b0:cf:3a:91:ed:8a:d6:12:fa:ae:d8:17:dc:f0:47:
         b7:9c:03:2a:06:a0:68:a4:70:28:27:c6:5c:35:ba:63:30:4a:
         90:14:ec:ab:dd:0d:41:21:34:a5:d9:d9:38:65:12:19:68:c7:
         7f:57:1f:55:8f:5d:23:33:17:86:88:de:a8:a1:77:2c:09:f6:
         c3:23:bc:85:9e:dc:94:f1:e9:d4:6e:15:94:36:41:5e:56:80:
         79:55:d3:eb:29:3b:51:3e:39:2c:72:76:da:1b:95:ac:af:bd:
         63:a4:af:83:87:bf:f1:65:ff:b2:a8:a2:05:c5:72:47:35:cc:
         9e:2a:8f:97:f1:eb:5a:8c:d6:81:81:2e:68:82:b6:0a:44:64:
         db:8d:82:78:03:f3:c5:47:42:b7:b9:c6:28:ce:a0:cd:a8:46:
         23:c9:b3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:28:43 2025 by rpki-client