Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e302e302f31342d3134203d3e2036333036.roa
File:                     3137392e32302e302e302f31342d3134203d3e2036333036.roa (raw, json)
Hash identifier:          BKe8AoFUbffM1pTlDsyStvD6NPD09Ch93JVQ952o144=
Subject key identifier:   7E:8F:6D:B7:10:F9:B8:02:56:9C:C1:06:2B:C6:AD:80:1A:E8:04:C1
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       47DE0A4F45F2F82DC8BB9B8285D31894587A25CB
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e302e302f31342d3134203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:49 +0000
ROA not before:           Tue 05 Mar 2024 17:36:49 +0000
ROA not after:            Tue 04 Mar 2025 17:41:49 +0000
asID:                     6306
IP address blocks:        179.20.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:de:0a:4f:45:f2:f8:2d:c8:bb:9b:82:85:d3:18:94:58:7a:25:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:49 2024 GMT
            Not After : Mar  4 17:41:49 2025 GMT
        Subject: CN=7E8F6DB710F9B802569CC1062BC6AD801AE804C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:69:6d:4b:d1:7c:4a:e5:b0:09:6a:99:0c:03:
                    fd:02:cb:60:14:35:85:0d:bf:fc:9d:bb:85:be:d4:
                    ac:36:c4:28:6f:6d:87:19:0d:2e:01:17:7b:a7:8d:
                    ab:70:78:20:17:15:03:25:17:73:2a:e4:49:fd:46:
                    89:12:68:3b:39:89:6e:dc:bc:b0:23:2a:50:cc:9c:
                    fa:5d:54:f6:67:1e:47:36:31:b9:58:35:8d:b0:b0:
                    00:56:84:8b:9f:9c:2c:d8:7b:99:71:aa:da:7c:c1:
                    48:db:cc:2a:29:90:85:ff:c7:2b:35:e4:8d:96:78:
                    eb:20:e4:d4:da:bf:3e:de:c1:00:fa:4f:3a:a1:c2:
                    70:20:fc:67:c4:55:78:40:d0:4c:3b:a8:62:b8:06:
                    b8:c3:43:ea:02:b6:ef:25:c4:0e:71:7f:27:18:a3:
                    af:3c:3e:b3:5e:19:b2:1b:63:3c:f6:ea:55:75:d0:
                    8b:79:b3:c9:bc:23:ce:a0:ee:63:d9:76:84:a1:15:
                    15:04:c2:94:4b:e3:07:1a:26:65:98:78:70:d6:6b:
                    4a:bd:61:1a:b1:cc:45:80:0c:9f:f2:99:76:ac:fa:
                    28:a4:bc:ab:40:a3:ef:6a:c2:44:45:5e:cb:52:ef:
                    9b:0b:e9:73:97:ef:31:93:05:12:6d:0f:9a:6f:8c:
                    ca:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8F:6D:B7:10:F9:B8:02:56:9C:C1:06:2B:C6:AD:80:1A:E8:04:C1
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e302e302f31342d3134203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.20.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         0a:6d:29:ed:e2:6d:06:3a:a0:ff:31:f8:72:e3:5d:4d:3d:f4:
         6c:67:57:46:2e:e9:f6:6d:eb:db:2a:5a:e3:87:94:e9:69:87:
         c7:de:d5:60:12:2e:e5:42:1f:57:60:76:78:47:33:5f:8d:37:
         cb:fd:65:a6:8d:5d:6c:50:c3:cc:bb:63:b2:b3:b4:6e:76:e6:
         e9:07:e4:e4:92:fb:7b:77:60:ea:ef:3c:ad:c3:7e:5c:d7:1a:
         a8:0c:0f:63:92:cc:fe:0d:58:9c:88:87:9f:69:be:f5:4a:49:
         1c:4e:35:19:65:66:d6:ef:b4:2f:9b:aa:26:2a:1a:c9:8a:74:
         9e:96:cd:6a:7b:28:3f:fe:7a:2a:27:f7:a5:ee:f5:57:14:83:
         0e:8a:8b:3e:05:6a:75:27:00:bd:10:47:b9:24:80:3e:56:08:
         34:1c:52:ff:b9:13:6a:bb:45:59:6d:05:26:0e:84:99:63:9d:
         1a:64:71:26:68:14:e2:52:76:71:96:a2:53:c4:09:b6:02:86:
         a7:2a:37:c7:1b:24:54:43:1f:d3:82:7e:14:79:47:9b:73:7d:
         f5:17:66:57:f6:40:02:e1:ab:79:05:ef:c4:7f:84:d2:ea:fa:
         62:70:ea:d9:e7:58:3d:08:de:07:9f:0d:2b:f9:8b:97:f4:ff:
         b3:51:88:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:47:41 2024 by rpki-client on console-fra.rpki-client.org