Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3233342e302e302f31362d3136203d3e2036333036.roa
File:                     3136312e3233342e302e302f31362d3136203d3e2036333036.roa (raw, json)
Hash identifier:          2PuQ/Cd+NToFQB3B0mFZcgr2pc3dXjnKABxQtShPiOE=
Subject key identifier:   1E:77:9F:99:F8:DF:BC:30:09:78:9E:4B:F5:59:16:13:F5:28:F8:F9
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       5915DB6451E4AC5A799761372FE9AB166CB8AAE9
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3233342e302e302f31362d3136203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:33:07 +0000
ROA not before:           Tue 04 Feb 2025 18:28:07 +0000
ROA not after:            Tue 03 Feb 2026 18:33:07 +0000
asID:                     6306
IP address blocks:        161.234.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 16:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:15:db:64:51:e4:ac:5a:79:97:61:37:2f:e9:ab:16:6c:b8:aa:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:28:07 2025 GMT
            Not After : Feb  3 18:33:07 2026 GMT
        Subject: CN=1E779F99F8DFBC3009789E4BF5591613F528F8F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4f:33:7d:0d:bb:60:29:4e:28:83:d8:37:49:
                    71:62:f4:35:f6:35:5e:01:a3:1b:ad:29:04:76:2c:
                    6f:ec:e9:a9:32:1d:d1:db:84:e0:76:ba:8f:62:0c:
                    4b:3c:31:a7:84:0c:e7:78:03:b8:01:9b:15:b1:80:
                    76:5e:16:df:cb:64:ec:98:5e:8a:30:41:d0:01:97:
                    90:4f:e9:21:e9:65:66:3a:36:9e:fc:a3:34:bb:75:
                    35:27:c3:98:fd:24:45:0f:8b:c0:a8:7c:d4:a7:48:
                    ac:31:c1:8b:04:a3:63:5c:78:56:27:84:8b:67:5b:
                    94:19:66:65:79:0e:84:30:b4:dc:07:77:d2:c2:b8:
                    f9:c3:2f:53:95:60:ca:ed:e9:31:fb:30:ad:68:b1:
                    5a:1f:03:fe:3d:01:ec:ad:74:a6:8d:cf:d5:15:ca:
                    e9:6c:5d:a9:d0:43:a4:e8:20:53:4c:cf:f0:6e:5b:
                    79:55:08:d4:aa:78:81:ae:fc:06:9e:50:8e:90:53:
                    20:36:1d:1b:e5:31:43:0a:c0:dc:be:34:dd:4c:6a:
                    b3:4a:db:b3:5b:e0:0a:93:33:06:03:70:7e:23:b2:
                    04:5d:53:1f:a5:ca:07:3f:33:95:f6:24:7e:e5:c9:
                    e6:6d:0b:54:60:a0:49:95:35:b0:ad:d9:69:dd:02:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:77:9F:99:F8:DF:BC:30:09:78:9E:4B:F5:59:16:13:F5:28:F8:F9
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3233342e302e302f31362d3136203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:b6:85:bf:ce:a9:41:a8:c8:54:0a:a2:a8:8c:66:a3:3e:2d:
         b6:e4:ac:a7:fb:cd:33:75:16:63:a0:a4:15:e7:24:25:46:fc:
         cf:b1:96:29:e4:17:37:79:13:70:7c:9c:53:3a:e7:cb:63:e4:
         1e:cc:49:b0:88:6b:5c:63:c3:c4:1e:a8:77:a0:83:24:39:8c:
         d3:7a:48:89:32:f9:47:99:84:c3:e4:35:5f:62:aa:1c:8b:5c:
         37:32:14:93:ae:c9:b1:7c:03:3b:e1:f1:9d:6d:9d:1e:dd:84:
         93:d9:2d:99:a7:73:cc:f8:f7:99:4d:e7:5a:83:50:fe:26:fe:
         d6:6a:02:8d:bd:cd:0b:cc:5c:bc:57:29:49:1c:11:08:82:2c:
         04:6b:e6:44:d8:8a:07:1c:65:47:6d:df:75:6e:50:8a:84:5d:
         a1:53:5c:87:7c:26:46:bb:c5:d9:69:d2:28:45:84:1f:cd:2e:
         f6:d1:6c:42:a8:83:e3:64:56:3e:cd:7c:3b:8b:4a:8b:0b:e2:
         40:b0:89:4c:24:cd:f7:46:73:96:b0:07:e5:c8:0b:ca:fa:9d:
         8b:52:68:c8:e6:b1:9c:f4:02:62:41:fb:ff:1e:3c:c9:a1:7b:
         5d:14:67:41:ce:a9:0d:45:3c:32:0d:19:ad:f4:6c:97:f2:7c:
         83:5e:a5:a6
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUWRXbZFHkrFp5l2E3L+mrFmy4qukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3MDVBOUVENzA2RkQ0NTcyNUE3MkQ5RDgzRUYxRDlC
OUExMkU5QzAeFw0yNTAyMDQxODI4MDdaFw0yNjAyMDMxODMzMDdaMDMxMTAvBgNV
BAMTKDFFNzc5Rjk5RjhERkJDMzAwOTc4OUU0QkY1NTkxNjEzRjUyOEY4RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaTzN9DbtgKU4og9g3SXFi9DX2
NV4BoxutKQR2LG/s6akyHdHbhOB2uo9iDEs8MaeEDOd4A7gBmxWxgHZeFt/LZOyY
XoowQdABl5BP6SHpZWY6Np78ozS7dTUnw5j9JEUPi8CofNSnSKwxwYsEo2NceFYn
hItnW5QZZmV5DoQwtNwHd9LCuPnDL1OVYMrt6TH7MK1osVofA/49AeytdKaNz9UV
yulsXanQQ6ToIFNMz/BuW3lVCNSqeIGu/AaeUI6QUyA2HRvlMUMKwNy+NN1MarNK
27Nb4AqTMwYDcH4jsgRdUx+lygc/M5X2JH7lyeZtC1RgoEmVNbCt2WndAnElAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUHnefmfjfvDAJeJ5L9VkWE/Uo+PkwHwYDVR0j
BBgwFoAUNXBantcG/UVyWnLZ2D7x2bmhLpwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUZBRDZFNkNEN0NFNTUxNjQzRDA0RDVERkI4MTY2OUUz
NUIzQUNERDFCOTM3NkIzN0MzMjQ1MzE5QTBFMzY0LzAvMzU3MDVBOUVENzA2RkQ0
NTcyNUE3MkQ5RDgzRUYxRDlCOUExMkU5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTcwNUE5RUQ3MDZGRDQ1NzI1
QTcyRDlEODNFRjFEOUI5QTEyRTlDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGQUQ2RTZDRDdDRTU1MTY0M0QwNEQ1REZCODE2NjlFMzVCM0FDREQx
QjkzNzZCMzdDMzI0NTMxOUEwRTM2NC8wLzMxMzYzMTJlMzIzMzM0MmUzMDJlMzAy
ZjMxMzYyZDMxMzYyMDNkM2UyMDM2MzMzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoeowDQYJKoZI
hvcNAQELBQADggEBABe2hb/OqUGoyFQKoqiMZqM+LbbkrKf7zTN1FmOgpBXnJCVG
/M+xlinkFzd5E3B8nFM658tj5B7MSbCIa1xjw8QeqHeggyQ5jNN6SIky+UeZhMPk
NV9iqhyLXDcyFJOuybF8Azvh8Z1tnR7dhJPZLZmnc8z495lN51qDUP4m/tZqAo29
zQvMXLxXKUkcEQiCLARr5kTYigccZUdt33VuUIqEXaFTXId8Jka7xdlp0ihFhB/N
LvbRbEKog+NkVj7NfDuLSosL4kCwiUwkzfdGc5awB+XIC8r6nYtSaMjmsZz0AmJB
+/8ePMmhe10UZ0HOqQ1FPDINGa30bJfyfINepaY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:36 2025 by rpki-client