Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234342e302f32322d3234203d3e203532333233.roa
File:                     3138312e31362e3234342e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier:          rxFZIFerILX4R800XrYHj0XYYHhKHOvM2CNY8TDzr8I=
Subject key identifier:   46:6A:55:99:D3:52:C6:BA:56:AB:9E:9D:F2:F2:3E:18:A7:FA:FB:57
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       19E077B4A9220DC8CBB2CBAEC5ABBBA86C7351B0
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234342e302f32322d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:17 +0000
ROA not before:           Tue 05 Mar 2024 18:02:17 +0000
ROA not after:            Tue 04 Mar 2025 18:07:17 +0000
asID:                     52323
IP address blocks:        181.16.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e0:77:b4:a9:22:0d:c8:cb:b2:cb:ae:c5:ab:bb:a8:6c:73:51:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:17 2024 GMT
            Not After : Mar  4 18:07:17 2025 GMT
        Subject: CN=466A5599D352C6BA56AB9E9DF2F23E18A7FAFB57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:f3:f6:c8:13:c3:6b:e1:68:3f:a6:25:5b:
                    1c:9e:26:88:2c:4f:f1:d7:2c:fd:04:eb:d0:ba:d8:
                    4e:ca:1b:1f:37:76:2e:4e:3a:28:e7:1d:48:d4:3d:
                    b3:04:0f:4e:5e:8f:8f:98:88:08:fc:e4:3c:a9:a4:
                    f7:28:f1:05:fe:cf:65:70:9a:12:7e:39:5e:30:d7:
                    ef:19:6a:dd:f1:58:16:a1:ec:47:02:09:c7:f0:ca:
                    4d:41:c9:4d:2d:06:a6:41:18:1c:2f:0d:59:62:e5:
                    9b:6e:d4:31:46:16:92:8f:dd:09:9f:6b:aa:97:fb:
                    35:74:ae:e7:c9:4b:bd:69:b5:6e:9e:75:8a:2c:63:
                    36:c9:b2:35:61:8c:cf:9c:f1:7f:c4:5a:6e:ce:a4:
                    79:66:bb:96:48:f7:6d:4b:dc:2f:e6:4b:d4:3f:5e:
                    91:ab:af:46:af:fd:94:3f:a7:3d:d4:44:4c:ce:a7:
                    e6:43:47:a5:40:88:b3:c9:0a:67:30:09:e1:e4:84:
                    0c:42:44:a3:32:3e:e4:2d:c9:c8:18:75:f5:2b:17:
                    f1:a5:18:b5:ec:c2:6e:6e:2f:27:a9:d7:f9:c6:8e:
                    e0:f8:f4:a1:6b:1f:35:75:73:83:51:eb:2d:85:fa:
                    a9:6b:b7:86:51:85:6b:f2:a4:22:9f:41:9b:0d:e8:
                    21:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6A:55:99:D3:52:C6:BA:56:AB:9E:9D:F2:F2:3E:18:A7:FA:FB:57
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234342e302f32322d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:da:ba:0e:73:79:2b:70:04:b3:df:64:f5:cd:9d:bd:7f:4c:
         fd:a3:82:41:43:84:e5:e3:87:2b:24:20:4f:9d:7a:71:41:1d:
         7e:e2:f9:d4:48:06:a4:30:b0:3c:5f:6e:15:59:a3:0b:f7:90:
         10:36:9b:e4:a7:5e:c6:41:d8:f8:94:2b:9e:79:60:31:4f:c7:
         91:22:d4:d1:fa:84:8c:ed:29:d5:6c:18:8d:a9:74:d7:ae:39:
         14:e5:e5:e6:e5:e3:4b:f5:54:bb:4a:b6:d5:9f:00:0c:b1:c4:
         ea:b2:e5:77:73:73:d5:7d:0c:e5:d4:3c:45:20:cf:d0:7c:28:
         8e:c3:46:50:19:da:44:20:fa:4d:b0:61:a1:73:4d:ae:31:71:
         c4:f8:87:0c:69:b4:31:23:55:e8:b1:3d:09:10:ef:33:7f:e4:
         75:af:95:e6:c2:90:66:48:29:39:67:bd:24:f2:99:71:46:93:
         79:8d:67:f4:06:5d:3f:83:1d:20:28:7c:a9:cc:27:05:de:3d:
         3e:e8:95:a6:47:64:2c:6e:7a:c8:bb:ce:fc:5d:06:85:f1:ed:
         b6:11:e3:ac:63:05:5c:fe:86:c3:51:85:ee:d2:ab:c3:b2:f4:
         4d:ed:73:f1:40:18:05:16:12:ce:47:d8:99:34:38:2b:a7:86:
         f4:76:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:23 2024 by rpki-client on console-ams.rpki-client.org