Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33352e302f32342d3234203d3e20323732383039.roa
File:                     3136312e32322e33352e302f32342d3234203d3e20323732383039.roa (raw, json)
Hash identifier:          wyUSJLMrCJxS3LMnjW5i5GrCXu5zUOLSWicarNg3bSg=
Subject key identifier:   29:A3:E1:70:B5:1E:D7:CE:ED:D0:FC:9D:32:02:34:47:2C:D3:13:F7
Certificate issuer:       /CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Certificate serial:       23B833F5AB8BBA74BB1AF1A6C3B87728CE2941BC
Authority key identifier: DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33352e302f32342d3234203d3e20323732383039.roa
Signing time:             Tue 04 Feb 2025 18:42:41 +0000
ROA not before:           Tue 04 Feb 2025 18:37:41 +0000
ROA not after:            Tue 03 Feb 2026 18:42:41 +0000
asID:                     272809
IP address blocks:        161.22.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Mar 2025 05:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b8:33:f5:ab:8b:ba:74:bb:1a:f1:a6:c3:b8:77:28:ce:29:41:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
        Validity
            Not Before: Feb  4 18:37:41 2025 GMT
            Not After : Feb  3 18:42:41 2026 GMT
        Subject: CN=29A3E170B51ED7CEEDD0FC9D320234472CD313F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:4a:79:56:f0:f0:1e:73:64:0e:8b:d0:33:
                    fe:a1:7a:fe:de:6a:5d:68:84:63:77:b3:33:92:dd:
                    3d:e3:42:3b:40:1e:a7:ab:aa:a6:16:5c:04:97:da:
                    b6:9c:a1:35:9c:a7:88:8a:b3:bc:ca:f9:6b:af:e1:
                    07:78:50:da:15:cb:21:c3:e4:16:21:03:4a:3a:5c:
                    68:92:f3:73:37:28:f0:0f:a4:9f:ac:e0:09:8a:60:
                    75:3c:d4:3a:dc:20:8c:9f:64:14:af:aa:ce:79:6f:
                    56:7c:17:3d:57:72:f0:7d:e6:6c:23:d8:23:76:01:
                    5d:8e:63:76:53:fc:0c:a0:d7:47:6c:ad:18:3b:9b:
                    61:7c:7a:fa:29:e7:64:d4:58:fe:94:cf:be:0a:75:
                    c7:03:cf:c3:b8:ea:5b:3e:55:7a:3d:92:84:09:63:
                    de:e8:bd:23:bf:53:21:30:15:3e:2e:74:40:09:c2:
                    b4:c2:b9:cf:70:f7:01:c2:f1:5d:5a:cc:b1:f0:82:
                    65:10:91:f2:17:cd:e7:52:39:94:26:11:c9:0f:fb:
                    73:a4:3f:68:ec:58:b4:e4:c1:5e:a4:86:9e:c0:db:
                    a2:08:58:ff:49:81:32:94:04:56:62:12:ef:b2:9f:
                    85:86:87:10:79:0f:a4:6f:3e:35:6c:a0:7e:b3:ae:
                    60:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A3:E1:70:B5:1E:D7:CE:ED:D0:FC:9D:32:02:34:47:2C:D3:13:F7
            X509v3 Authority Key Identifier:
                keyid:DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33352e302f32342d3234203d3e20323732383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:1a:8c:52:bc:6b:cc:31:60:de:e9:fb:e1:a1:75:3b:02:88:
         93:8d:18:1f:63:54:07:55:9d:1b:c6:9c:76:38:b4:dd:37:61:
         60:1b:83:ae:a9:ad:9d:d3:b8:8d:d1:8e:15:74:15:52:36:89:
         7b:f4:e1:06:58:e4:7a:08:01:51:bd:33:d4:b8:c3:ce:0d:3f:
         7c:b6:6d:1f:f3:b1:d6:3f:7a:74:6a:0d:67:9e:34:26:18:43:
         f8:a1:7e:0f:c2:d1:0e:a8:8a:89:0d:fb:e8:a4:13:c8:c4:02:
         44:da:30:40:59:b1:46:f0:9f:58:fa:29:74:4b:ed:fb:26:36:
         03:87:c8:08:04:2b:49:08:08:90:29:94:19:54:0d:98:92:e8:
         61:94:c1:3f:a8:57:e3:55:1d:8a:0c:b5:77:d7:f4:43:4a:62:
         b8:99:33:eb:fb:52:11:aa:06:04:48:fc:76:78:4a:ce:29:a8:
         84:60:f3:0a:5a:0a:0e:44:b2:8d:e2:ce:1e:8e:76:0a:d8:48:
         89:7b:48:56:de:34:3d:9e:0c:a0:aa:6e:c2:80:9f:87:c7:72:
         e2:4f:e5:ae:7d:e9:1b:bc:b5:39:ed:19:64:9b:65:52:99:72:
         3c:2c:4d:43:6d:1d:95:ac:f9:38:df:9c:54:e1:53:c4:0f:d9:
         8c:b0:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:20:55 2025 by rpki-client