Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234322e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3234322e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          H3FtDR59oYyat9zcaCYJ3fZqJwfN2fgvf+/Ug91si4M=
Subject key identifier:   34:0B:7C:AB:B8:86:AD:4F:73:10:61:3C:95:9A:F4:DE:6E:6E:72:D1
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       0A60D61B3F0AB1089FE1A1740CBCFD7AA6922BA8
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234322e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:22 +0000
ROA not before:           Tue 05 Mar 2024 18:02:22 +0000
ROA not after:            Tue 04 Mar 2025 18:07:22 +0000
asID:                     52323
IP address blocks:        181.16.242.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:60:d6:1b:3f:0a:b1:08:9f:e1:a1:74:0c:bc:fd:7a:a6:92:2b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:22 2024 GMT
            Not After : Mar  4 18:07:22 2025 GMT
        Subject: CN=340B7CABB886AD4F7310613C959AF4DE6E6E72D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:a5:28:91:3a:38:84:64:72:78:0b:69:f0:
                    24:f4:b9:f8:ae:47:a9:e6:de:99:b5:1f:c4:3a:92:
                    da:aa:35:23:24:f0:e1:94:b3:a8:6a:f3:ed:7d:6e:
                    d6:83:a7:e9:7e:df:e8:c2:c6:b9:6f:a7:65:23:fa:
                    16:33:c8:76:f3:11:44:a7:84:67:09:ba:57:a8:64:
                    2a:86:02:80:72:5f:8e:dc:91:e5:76:e7:b2:db:17:
                    e9:ee:ff:d1:72:52:95:57:99:b5:c4:0b:32:cd:8d:
                    b1:e9:dd:ef:d3:d3:a0:be:ee:33:9f:5f:fe:6d:5a:
                    f4:28:55:b5:f1:9c:de:82:8a:d6:74:fe:df:9c:01:
                    66:2e:ad:35:1c:87:28:2d:9a:b4:99:10:ae:8d:d0:
                    e3:4b:60:dc:ce:3f:e9:10:71:4d:ed:b0:b5:e1:de:
                    3c:57:d1:99:b7:a4:d7:73:e9:a9:c4:79:7d:37:d0:
                    03:33:e4:bc:72:3b:7a:cc:7e:72:e3:43:2a:24:d5:
                    85:25:d9:b9:81:20:e4:11:d9:ea:cf:34:78:4e:57:
                    bf:24:d1:c7:91:b0:ca:f7:3f:d3:34:5e:00:20:2b:
                    42:40:20:52:71:b3:8a:fd:4b:00:00:6d:1c:e7:2a:
                    82:68:85:5c:d1:31:00:80:d9:3d:3b:e3:5b:32:1c:
                    fc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0B:7C:AB:B8:86:AD:4F:73:10:61:3C:95:9A:F4:DE:6E:6E:72:D1
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234322e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:25:a7:d5:0c:d0:63:70:0f:2f:26:ff:8c:21:d1:87:08:23:
         88:fd:81:ac:eb:5c:55:e4:04:71:7c:78:96:b3:d7:8d:e7:0c:
         dd:48:5c:3f:95:fe:b1:e7:3c:09:84:96:33:4d:0f:e6:e4:9e:
         8a:c7:e1:1f:a3:f4:47:2f:f9:c8:79:e4:79:6e:55:46:a4:5c:
         9f:cb:50:0f:34:63:d2:d5:92:7a:3f:35:ce:d5:94:27:4e:60:
         ec:4b:c9:e0:b2:97:19:40:53:2c:40:5b:ea:a0:69:38:29:e8:
         c3:44:17:95:bc:dc:cb:b7:1e:f5:91:58:a0:32:1f:07:b4:17:
         9d:52:80:4e:1d:60:6f:fa:9a:1f:25:a8:99:87:2c:88:ae:78:
         14:33:4c:76:03:0b:76:f9:a9:93:2c:0d:89:3e:8b:5a:88:b1:
         c1:2e:e4:85:fd:d2:2b:2c:bb:25:ed:01:f6:b7:f9:8a:ab:65:
         8e:6d:1a:7d:b5:84:d0:ad:97:33:b1:7e:c0:53:62:1c:a0:36:
         67:3d:6f:d0:2d:03:32:fe:c5:ba:dc:30:e2:8c:6e:ac:02:04:
         11:b1:f3:7f:dd:57:11:a8:43:3b:4c:bb:50:08:a4:7e:ca:42:
         07:8c:07:c1:1a:cc:06:37:9a:3c:d3:e8:c7:b8:5c:aa:fc:0b:
         ad:38:a7:95
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCmDWGz8KsQif4aF0DLz9eqaSK6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNDAzMDUxODAyMjJaFw0yNTAzMDQxODA3MjJaMDMxMTAvBgNV
BAMTKDM0MEI3Q0FCQjg4NkFENEY3MzEwNjEzQzk1OUFGNERFNkU2RTcyRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMqUokTo4hGRyeAtp8CT0ufiu
R6nm3pm1H8Q6ktqqNSMk8OGUs6hq8+19btaDp+l+3+jCxrlvp2Uj+hYzyHbzEUSn
hGcJuleoZCqGAoByX47ckeV257LbF+nu/9FyUpVXmbXECzLNjbHp3e/T06C+7jOf
X/5tWvQoVbXxnN6CitZ0/t+cAWYurTUchygtmrSZEK6N0ONLYNzOP+kQcU3tsLXh
3jxX0Zm3pNdz6anEeX030AMz5LxyO3rMfnLjQyok1YUl2bmBIOQR2erPNHhOV78k
0ceRsMr3P9M0XgAgK0JAIFJxs4r9SwAAbRznKoJohVzRMQCA2T0741syHPzjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUNAt8q7iGrU9zEGE8lZr03m5uctEwHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzIzNDMyMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbUQ8jAN
BgkqhkiG9w0BAQsFAAOCAQEACyWn1QzQY3APLyb/jCHRhwgjiP2BrOtcVeQEcXx4
lrPXjecM3UhcP5X+sec8CYSWM00P5uSeisfhH6P0Ry/5yHnkeW5VRqRcn8tQDzRj
0tWSej81ztWUJ05g7EvJ4LKXGUBTLEBb6qBpOCnow0QXlbzcy7ce9ZFYoDIfB7QX
nVKATh1gb/qaHyWomYcsiK54FDNMdgMLdvmpkywNiT6LWoixwS7khf3SKyy7Je0B
9rf5iqtljm0afbWE0K2XM7F+wFNiHKA2Zz1v0C0DMv7Futww4oxurAIEEbHzf91X
EahDO0y7UAikfspCB4wHwRrMBjeaPNPox7hcqvwLrTinlQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:17 2024 by rpki-client on console-fra.rpki-client.org