Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3134302e302e302f31362d3136203d3e2036333036.roa
File:                     3136312e3134302e302e302f31362d3136203d3e2036333036.roa (raw, json)
Hash identifier:          +m4N7nwbGB/3H+JCtVO8t1OWZH/ii2wJX/cSblOQZ0o=
Subject key identifier:   B5:0A:B2:20:C9:25:F4:F9:CD:FA:5B:42:5B:E8:6D:23:49:99:FF:C8
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       0515496D4BC1125A4C9E9C259396F2823C00BC18
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3134302e302e302f31362d3136203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:33:08 +0000
ROA not before:           Tue 04 Feb 2025 18:28:08 +0000
ROA not after:            Tue 03 Feb 2026 18:33:08 +0000
asID:                     6306
IP address blocks:        161.140.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 16:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:15:49:6d:4b:c1:12:5a:4c:9e:9c:25:93:96:f2:82:3c:00:bc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:28:08 2025 GMT
            Not After : Feb  3 18:33:08 2026 GMT
        Subject: CN=B50AB220C925F4F9CDFA5B425BE86D234999FFC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:86:01:47:37:74:aa:0f:df:fc:6d:06:8a:
                    62:eb:60:73:df:09:b5:c1:b9:a2:17:27:70:35:43:
                    b3:49:0b:b8:d8:3e:78:a1:63:ed:b5:55:2d:a3:01:
                    95:33:56:92:e4:36:d9:a5:3c:f4:e1:0c:db:1a:d1:
                    bd:97:3e:8a:52:71:19:70:8f:1f:af:3c:fb:ae:03:
                    68:73:ab:c8:cd:33:96:38:73:b4:8a:ea:98:59:2b:
                    9a:1c:5d:8a:8d:f6:b6:9e:f0:12:a8:76:5a:ff:87:
                    82:61:32:60:f8:4c:cc:ec:e8:7d:96:68:66:7b:16:
                    d9:24:71:da:b4:f0:08:2f:23:1b:9d:6b:e7:ab:50:
                    1d:34:61:4a:ce:5b:64:28:35:bf:49:4a:c4:82:5a:
                    37:1f:d1:40:dd:5b:2c:5f:9a:23:f0:fe:40:af:a9:
                    18:a8:a2:34:8f:99:65:cb:40:04:fd:a4:2d:af:9e:
                    b6:40:9c:4d:a1:aa:dd:bf:08:85:4c:2e:68:78:66:
                    f0:40:2c:52:b8:60:7d:d1:7f:0e:53:f4:2d:ed:b9:
                    de:df:90:ca:b0:ab:e3:07:bd:25:f2:2e:14:4f:8e:
                    c4:6f:20:9f:89:a8:a3:a8:bd:70:8c:cc:99:7f:aa:
                    2e:cd:ae:b1:50:eb:a5:77:c6:9a:58:f6:7d:d4:9a:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0A:B2:20:C9:25:F4:F9:CD:FA:5B:42:5B:E8:6D:23:49:99:FF:C8
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3134302e302e302f31362d3136203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.140.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:9a:46:48:fc:66:53:c9:8e:ba:7c:dc:0d:e2:8d:b5:38:03:
         49:a1:d3:cb:e6:84:43:ae:ba:21:c3:07:c0:6a:43:17:41:ef:
         1a:2b:a5:bc:9e:aa:bc:3f:36:c6:99:27:bb:46:77:8f:e7:60:
         07:ec:5e:77:fc:bc:9d:43:04:7d:c2:13:2c:af:67:d2:30:62:
         04:ec:c8:ea:bb:25:49:32:cf:38:03:86:b3:9c:b0:49:f4:33:
         5e:26:d7:44:42:26:35:72:90:73:19:f3:cf:d2:cd:dd:da:df:
         96:b3:2b:e7:e5:bb:45:93:6a:9e:92:5a:4b:cc:bb:7e:fb:85:
         41:df:7c:cc:22:3d:83:11:80:51:80:b6:98:86:da:30:e4:7b:
         08:c7:a2:f5:45:73:e1:f5:fc:99:af:12:36:cb:13:25:84:f3:
         7b:5a:1b:61:22:ae:6c:be:76:45:cb:31:49:d3:52:5f:cf:e1:
         c5:4f:f9:d6:a1:11:b7:4d:ec:81:6c:ab:2e:02:b1:97:16:4a:
         9d:5a:20:2c:e5:9a:06:f0:a8:04:22:98:dc:96:ac:93:50:b3:
         49:d3:f7:e4:b0:3c:6d:9c:8d:c7:87:eb:c7:0e:c3:0e:de:01:
         c5:a8:3e:7f:28:10:fb:f7:66:75:9e:8c:9a:d5:e0:31:5e:f8:
         18:5b:a2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:59 2025 by rpki-client