Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33352e302f32342d3234203d3e20323732383039.roa
File:                     3136312e32322e33352e302f32342d3234203d3e20323732383039.roa (raw, json)
Hash identifier:          jA46TPuFJNRL1aJhO2WAKbX+CWt6CaB5TYyvKB+FU0w=
Subject key identifier:   29:E9:E2:D6:93:18:65:27:0B:B4:72:02:BB:B0:12:FA:ED:C5:43:4F
Certificate issuer:       /CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Certificate serial:       116B1D326C7A966EAD87DA03D321E74B92D93DA5
Authority key identifier: DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33352e302f32342d3234203d3e20323732383039.roa
Signing time:             Tue 05 Mar 2024 18:20:58 +0000
ROA not before:           Tue 05 Mar 2024 18:15:58 +0000
ROA not after:            Tue 04 Mar 2025 18:20:58 +0000
asID:                     272809
IP address blocks:        161.22.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 16:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6b:1d:32:6c:7a:96:6e:ad:87:da:03:d3:21:e7:4b:92:d9:3d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
        Validity
            Not Before: Mar  5 18:15:58 2024 GMT
            Not After : Mar  4 18:20:58 2025 GMT
        Subject: CN=29E9E2D6931865270BB47202BBB012FAEDC5434F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:0e:cd:42:3c:b0:ee:82:5a:da:15:d0:a3:
                    81:92:4f:55:09:ef:3d:0e:6c:d7:bb:e7:6f:cf:24:
                    53:68:e2:72:72:68:bb:a3:c7:11:72:08:cc:43:53:
                    88:c9:85:d9:06:a0:c8:80:a6:18:ff:8b:53:a7:03:
                    77:dd:87:08:f9:eb:a9:af:b1:18:b8:90:f9:c5:f6:
                    d5:75:f5:f7:a8:d5:cc:bb:64:97:c6:e5:b7:d7:07:
                    05:d3:62:a2:bd:5d:df:8b:cc:18:7d:35:0f:e9:e1:
                    e9:60:bc:5e:c8:59:47:98:33:70:76:8d:76:b0:54:
                    8f:5c:3e:be:71:66:43:ac:a0:8c:bf:46:89:d6:1b:
                    01:59:f6:42:52:18:58:b3:26:24:43:94:f1:35:e1:
                    90:90:a0:16:b7:e2:f2:7a:5c:46:43:12:c5:fb:b4:
                    f8:d5:32:02:f8:6e:70:1f:e5:88:90:1c:01:dc:2d:
                    7f:50:15:45:98:3d:55:ac:24:f9:75:27:a1:29:91:
                    35:30:20:fa:04:ec:03:9a:00:d9:71:85:21:99:c8:
                    af:f1:8f:68:de:b2:3c:ed:f7:4e:a2:4c:d1:de:08:
                    64:cd:89:59:20:f2:eb:85:ea:95:70:c7:b4:ba:da:
                    ce:fa:16:bc:b8:11:f8:8d:fd:ce:e2:16:80:e5:71:
                    6e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E9:E2:D6:93:18:65:27:0B:B4:72:02:BB:B0:12:FA:ED:C5:43:4F
            X509v3 Authority Key Identifier:
                keyid:DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33352e302f32342d3234203d3e20323732383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:3c:c6:78:de:06:44:da:57:b2:43:d3:6e:95:35:5c:1d:11:
         b6:54:b6:80:a2:b0:c3:96:54:6b:86:0f:5f:76:54:fd:87:5a:
         60:ba:c8:23:55:40:22:ec:a6:ae:34:a1:6c:b6:94:c8:f3:0e:
         a2:1a:66:7a:eb:7e:93:d4:b7:c5:7e:38:04:cd:7e:db:28:cb:
         0b:a5:e5:72:7b:99:bd:8d:9f:be:a9:38:1f:55:b0:e8:ed:26:
         d3:42:d8:65:8f:41:03:99:21:b3:7c:8b:3a:2b:5d:9d:36:a2:
         9b:c6:31:8a:f7:de:f3:a6:d0:88:44:89:b5:c7:6a:09:a2:b6:
         51:26:60:00:7d:2c:a7:14:5a:4d:88:a7:3e:1a:28:01:09:5d:
         7d:82:e8:32:fa:b0:e3:4d:9f:ee:a0:05:ef:a1:28:38:99:00:
         31:2c:9b:13:f6:da:d6:9b:63:be:3f:56:e6:5e:4d:6f:fd:aa:
         aa:ac:5b:a6:b6:06:78:34:8f:45:ef:94:f5:07:ce:fb:ab:e0:
         30:15:14:78:a0:20:c8:2f:ec:b4:e8:7f:02:64:9f:8e:fd:94:
         d8:4f:1c:b5:5d:80:bb:bd:2f:4b:a1:23:c7:75:81:a8:68:31:
         9b:40:2f:0f:b7:a6:7b:68:fc:a2:94:51:31:c1:e9:24:06:63:
         8d:db:9f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:43:12 2024 by rpki-client on console-fra.rpki-client.org