Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234342e302f32322d3234203d3e203532333233.roa
File:                     3138312e31362e3234342e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier:          ODr9IHxLtTeuorgJ2ypPPOKllRP3775UfRpNWD0Olf4=
Subject key identifier:   82:04:31:00:F8:62:36:06:85:AB:B6:49:0C:3C:94:54:11:B2:B4:FF
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       37EFA836C92D3D823B4C247C29CEEABAE5D3FC67
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234342e302f32322d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:37 +0000
ROA not before:           Tue 04 Feb 2025 18:32:37 +0000
ROA not after:            Tue 03 Feb 2026 18:37:37 +0000
asID:                     52323
IP address blocks:        181.16.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ef:a8:36:c9:2d:3d:82:3b:4c:24:7c:29:ce:ea:ba:e5:d3:fc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:37 2025 GMT
            Not After : Feb  3 18:37:37 2026 GMT
        Subject: CN=82043100F862360685ABB6490C3C945411B2B4FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:3e:3e:64:e7:3c:a2:61:e4:6f:98:23:18:
                    ae:6e:eb:d7:09:e4:72:de:a3:32:eb:d9:48:3c:f8:
                    12:31:42:ac:a4:a4:8b:26:94:97:8a:c6:70:9e:7c:
                    78:f0:98:be:a0:02:6c:42:a6:a4:72:f5:23:a5:99:
                    b4:1e:ad:84:ce:7a:25:02:93:78:2d:36:d2:65:a8:
                    b7:e3:ab:78:e0:5b:78:ea:cb:43:94:66:e6:23:3a:
                    5b:09:05:f7:66:87:ed:e1:45:3d:5d:2d:1d:29:ad:
                    f6:e9:47:22:80:b7:fd:6c:12:c0:a4:0d:64:39:dd:
                    20:09:1d:39:70:a2:df:8a:57:86:df:ad:d9:43:f6:
                    90:9c:01:74:3b:26:4e:6a:65:b8:80:92:b1:8d:e8:
                    0f:7a:a0:60:fa:b5:82:36:50:e7:c0:8d:34:3a:89:
                    c3:e6:69:85:a3:b2:44:61:c9:d6:1e:39:f8:1f:6a:
                    56:35:14:e3:59:af:cb:cc:d6:50:a2:bd:5d:c8:da:
                    65:26:b9:20:ce:1b:71:eb:1b:81:42:38:5d:c1:fa:
                    1f:44:c2:d5:85:ca:df:59:18:2b:73:ba:08:96:28:
                    e4:7b:a1:c1:45:36:d9:1d:ca:08:66:b1:68:3e:45:
                    a5:ec:5f:b6:ae:b2:5d:27:b9:83:ab:20:1f:2a:f6:
                    57:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:04:31:00:F8:62:36:06:85:AB:B6:49:0C:3C:94:54:11:B2:B4:FF
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234342e302f32322d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:80:e2:65:37:35:95:c0:cf:09:45:95:b9:95:7a:e8:44:a5:
         60:f5:74:ae:88:b2:89:93:e2:fa:d7:db:7d:2d:c2:06:a8:2b:
         fc:75:f9:13:e3:fb:cc:39:4b:ff:c1:4a:85:6d:f2:9e:c1:f1:
         06:98:0e:be:ed:82:08:64:72:e4:27:b2:84:50:fc:c6:3d:a3:
         5a:66:e6:dd:83:81:c2:25:fa:dc:1f:b7:4b:b4:d6:b3:5e:c4:
         51:fe:f4:e9:50:4d:53:0b:20:3a:0d:6c:d4:dc:e5:e3:1b:e8:
         b6:d3:9d:78:0f:6a:ab:4b:89:fc:c3:fa:73:57:6b:2c:7f:18:
         ce:ed:e5:90:ca:22:65:6b:09:f3:c6:c0:7f:52:23:59:37:46:
         34:99:e1:82:6d:4e:16:0d:d6:8f:ea:a9:c3:b7:45:4b:51:25:
         a3:1e:fa:2e:37:e0:18:fa:86:99:a6:e3:90:3f:44:8a:7e:37:
         7c:db:0c:62:fb:d0:c4:90:ce:69:2f:22:a1:a5:92:52:95:62:
         74:a0:1b:aa:a3:fc:7a:b7:ee:e6:a1:f6:c2:80:98:e9:c4:1c:
         4c:6c:da:0c:a5:18:a2:07:9c:60:26:b6:2f:bf:82:02:eb:af:
         49:bd:63:15:e9:58:9c:77:b1:59:9a:5c:41:50:34:c3:55:62:
         6c:08:41:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:39 2025 by rpki-client