Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3235342e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3235342e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          BAXRRP77FYKylgG6DNPoVUgz/FI/fjjHfjQroBEJNyM=
Subject key identifier:   DF:18:39:76:2F:A5:13:69:FF:0F:A3:E4:C4:C0:A6:B8:72:E9:60:09
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       75BC048291F6A82E15C70AE7D208AE21CA4AB93A
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3235342e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:38 +0000
ROA not before:           Tue 04 Feb 2025 18:32:38 +0000
ROA not after:            Tue 03 Feb 2026 18:37:38 +0000
asID:                     52323
IP address blocks:        181.16.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bc:04:82:91:f6:a8:2e:15:c7:0a:e7:d2:08:ae:21:ca:4a:b9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:38 2025 GMT
            Not After : Feb  3 18:37:38 2026 GMT
        Subject: CN=DF1839762FA51369FF0FA3E4C4C0A6B872E96009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:b4:30:ec:27:d7:4c:f5:e9:4e:71:97:d9:
                    33:f8:d5:89:65:14:86:18:ab:90:e7:ed:89:c8:b5:
                    fa:92:13:85:23:03:9f:f6:bc:30:bb:f7:63:00:67:
                    fb:dd:7f:02:ac:b8:86:b9:fc:6d:f8:36:04:c1:24:
                    4d:98:53:4a:e6:08:be:3c:1b:a2:ee:73:2b:21:f8:
                    fd:6d:89:e1:67:30:83:4f:fc:75:6f:57:ae:44:8b:
                    cd:80:dc:42:70:dc:dd:9c:de:6d:72:b7:8d:d3:0f:
                    e3:1b:df:80:61:5c:22:b1:f6:37:e2:26:59:a2:29:
                    a6:f2:9f:e7:f3:0b:86:04:28:dd:54:e1:c6:bf:58:
                    43:16:f6:ad:da:a3:0e:3b:c1:ab:94:77:68:de:27:
                    67:4a:e3:6b:a1:a7:cc:da:27:40:ee:a2:bd:7d:e4:
                    6f:c2:1d:84:28:56:1c:6a:6b:21:0e:64:2c:eb:09:
                    b5:84:11:b3:4d:e5:85:26:53:9f:67:b2:e5:91:b9:
                    85:e2:2a:4d:39:81:b6:7d:a2:36:ba:60:4d:ba:5d:
                    7d:6f:46:c7:8a:d9:66:b7:36:2c:32:85:c3:a8:5d:
                    ed:27:b1:fe:ee:89:e2:28:c4:0e:f2:7c:01:e6:29:
                    3f:90:56:23:84:09:5e:53:bd:85:ac:a9:59:d4:64:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:18:39:76:2F:A5:13:69:FF:0F:A3:E4:C4:C0:A6:B8:72:E9:60:09
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3235342e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:eb:a0:ce:ea:bd:0b:e2:94:14:3f:93:fd:05:50:8d:5c:61:
         89:53:c9:7b:63:0d:02:c3:98:2d:1c:1e:f1:e1:36:04:e2:1b:
         54:d9:d5:c1:0b:8c:f9:09:bc:dd:81:e2:61:6b:22:c0:b3:ff:
         8b:6a:78:40:2d:3b:54:e5:ca:6d:7f:27:d6:77:2b:f3:22:44:
         e0:95:cc:75:57:42:ad:04:09:99:d2:8b:8d:54:fe:1f:26:ad:
         9f:d6:d1:a9:6d:d3:51:c5:f8:d5:f1:15:55:43:12:6d:6f:2a:
         e3:42:55:02:48:64:d4:95:4a:0f:47:5a:9d:50:66:a0:55:b9:
         b1:cc:6d:e2:69:04:e7:01:48:38:75:8c:3b:7a:db:be:ec:5d:
         23:ad:da:b1:f9:92:21:05:e7:5a:16:14:9d:7d:07:4b:9d:d2:
         28:d0:b4:ec:fb:3a:11:ac:60:b2:44:25:94:9a:2e:2d:04:69:
         ea:0e:49:6c:50:1a:c4:b8:53:73:0c:1a:ad:c3:8a:b3:5e:6b:
         60:28:d7:f3:b8:36:d8:08:ac:10:1d:13:7e:4f:da:82:91:bf:
         ec:db:33:c0:2a:4f:e8:60:60:32:09:9c:22:f9:47:0b:45:0c:
         67:61:74:c1:b5:52:4f:1c:98:93:f1:7d:49:9c:fd:65:b5:f5:
         3b:20:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:21 2025 by rpki-client