Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3235342e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3235342e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          JqFVCcoxtd600k+44wATzTYpD89bf2X9uF8hAycJvbE=
Subject key identifier:   61:B4:B4:90:A5:78:8C:37:66:BE:83:88:09:10:76:41:3F:12:D0:F1
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       34D5993AFBFAD8FB9F02F7A44ED65F9E920F7E13
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3235342e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:12 +0000
ROA not before:           Tue 05 Mar 2024 18:02:12 +0000
ROA not after:            Tue 04 Mar 2025 18:07:12 +0000
asID:                     52323
IP address blocks:        181.16.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d5:99:3a:fb:fa:d8:fb:9f:02:f7:a4:4e:d6:5f:9e:92:0f:7e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:12 2024 GMT
            Not After : Mar  4 18:07:12 2025 GMT
        Subject: CN=61B4B490A5788C3766BE8388091076413F12D0F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:54:20:23:8f:d3:e2:a5:1c:12:0a:ba:b3:
                    29:7d:cf:e6:e2:c4:38:78:b7:c3:c3:0f:72:df:df:
                    ea:45:d6:85:70:f4:a4:74:c4:25:bf:61:5f:05:55:
                    68:79:2a:56:d6:ad:6a:1e:37:d5:f7:31:d0:3e:25:
                    6b:31:0c:03:42:ff:45:8c:f1:d5:86:ba:4a:47:64:
                    ff:6a:60:9b:80:84:aa:9d:d9:90:0b:7d:4a:92:d5:
                    cb:63:f3:90:4c:15:f9:dd:05:75:9f:e0:ed:84:1b:
                    52:f6:70:85:60:63:43:2f:f5:0b:59:c8:c6:f5:28:
                    9d:ae:49:c9:01:00:89:25:1b:96:ce:79:67:b4:91:
                    b0:f0:e0:da:c3:b5:3f:ca:7b:c5:14:6a:1f:8a:4a:
                    34:41:02:9c:ba:1e:eb:1c:0d:c3:a3:27:04:3a:97:
                    92:93:08:a3:79:14:c8:1b:2a:65:8d:8f:49:df:cd:
                    3d:9c:bb:2a:91:df:cc:1b:d1:f4:b9:58:58:24:d0:
                    35:ab:7a:e5:18:c0:bc:74:4c:c2:d9:95:7a:c5:b9:
                    e6:16:21:27:06:9f:28:99:5b:51:49:f9:4a:a7:64:
                    64:57:71:90:70:c0:81:4e:19:45:cd:93:65:fd:02:
                    b5:bc:63:89:1f:0a:42:2e:a8:f9:d0:0b:e5:c9:b4:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B4:B4:90:A5:78:8C:37:66:BE:83:88:09:10:76:41:3F:12:D0:F1
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3235342e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:4b:02:19:11:22:5a:d3:df:46:47:54:4f:54:94:3e:1e:af:
         34:67:d6:5f:96:3e:bc:83:35:fe:16:2f:f9:ad:16:af:4b:db:
         d2:f9:a5:80:07:2c:3f:5f:d1:53:05:d3:4f:ea:ed:51:6b:15:
         bc:8f:82:c6:1b:77:61:4e:cc:24:da:ec:c4:b8:3c:86:54:fe:
         44:59:55:06:f3:3f:49:3e:95:d1:1d:41:6a:08:1e:3d:0c:ba:
         1e:6b:c3:25:da:9f:d3:00:51:4e:7a:b2:eb:88:ec:51:8c:be:
         8a:10:76:ef:36:6e:14:c1:47:8a:4b:ee:d0:c6:10:2c:cf:9d:
         19:8e:f9:f5:40:28:f5:c3:7e:09:5e:f4:fe:af:5e:7c:99:9a:
         9e:a2:7c:42:38:f2:34:4f:68:40:3e:b5:95:12:29:c9:da:47:
         16:8b:81:52:88:33:27:44:81:8b:f2:ba:ff:f2:63:a7:e9:e6:
         8e:07:f3:7e:30:6e:ad:6f:e0:d4:91:7d:4b:a5:3a:f8:d9:8f:
         91:ba:56:d7:da:1c:a7:e8:95:73:94:33:6f:29:c1:d1:3f:69:
         10:ec:85:8f:9d:e7:d9:2e:63:ad:54:4d:41:93:4c:74:26:b9:
         3f:97:bc:a7:d4:91:4f:84:ab:f6:fc:b7:9c:ec:09:d7:d7:41:
         65:20:61:14
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNNWZOvv62PufAvekTtZfnpIPfhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNDAzMDUxODAyMTJaFw0yNTAzMDQxODA3MTJaMDMxMTAvBgNV
BAMTKDYxQjRCNDkwQTU3ODhDMzc2NkJFODM4ODA5MTA3NjQxM0YxMkQwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4alQgI4/T4qUcEgq6syl9z+bi
xDh4t8PDD3Lf3+pF1oVw9KR0xCW/YV8FVWh5KlbWrWoeN9X3MdA+JWsxDANC/0WM
8dWGukpHZP9qYJuAhKqd2ZALfUqS1ctj85BMFfndBXWf4O2EG1L2cIVgY0Mv9QtZ
yMb1KJ2uSckBAIklG5bOeWe0kbDw4NrDtT/Ke8UUah+KSjRBApy6HuscDcOjJwQ6
l5KTCKN5FMgbKmWNj0nfzT2cuyqR38wb0fS5WFgk0DWreuUYwLx0TMLZlXrFueYW
IScGnyiZW1FJ+UqnZGRXcZBwwIFOGUXNk2X9ArW8Y4kfCkIuqPnQC+XJtOAtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYbS0kKV4jDdmvoOICRB2QT8S0PEwHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzIzNTM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbUQ/jAN
BgkqhkiG9w0BAQsFAAOCAQEAB0sCGREiWtPfRkdUT1SUPh6vNGfWX5Y+vIM1/hYv
+a0Wr0vb0vmlgAcsP1/RUwXTT+rtUWsVvI+Cxht3YU7MJNrsxLg8hlT+RFlVBvM/
ST6V0R1BaggePQy6HmvDJdqf0wBRTnqy64jsUYy+ihB27zZuFMFHikvu0MYQLM+d
GY759UAo9cN+CV70/q9efJmanqJ8QjjyNE9oQD61lRIpydpHFouBUogzJ0SBi/K6
//Jjp+nmjgfzfjBurW/g1JF9S6U6+NmPkbpW19ocp+iVc5QzbynB0T9pEOyFj53n
2S5jrVRNQZNMdCa5P5e8p9SRT4Sr9vy3nOwJ19dBZSBhFA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:54 2024 by rpki-client on console-fra.rpki-client.org