Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138322e3132382e302f31372d3137203d3e2036333036.roa
File:                     3138312e3138322e3132382e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier:          OrB82DztL/4Pko4k5dWH27Z8A7+A9tQL8bY6NNM68Ro=
Subject key identifier:   22:97:3F:A1:5C:27:AA:01:AC:2A:55:AF:3C:3F:2F:D1:A3:D7:E4:05
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       734E837438C29193D4A29CC887064AA148931581
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138322e3132382e302f31372d3137203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:52 +0000
ROA not before:           Tue 05 Mar 2024 17:36:52 +0000
ROA not after:            Tue 04 Mar 2025 17:41:52 +0000
asID:                     6306
IP address blocks:        181.182.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4e:83:74:38:c2:91:93:d4:a2:9c:c8:87:06:4a:a1:48:93:15:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:52 2024 GMT
            Not After : Mar  4 17:41:52 2025 GMT
        Subject: CN=22973FA15C27AA01AC2A55AF3C3F2FD1A3D7E405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d3:48:63:8c:38:5d:d1:55:b6:5f:72:3c:59:
                    ee:57:2b:2b:62:b1:1b:f3:d5:46:3d:46:24:52:2a:
                    83:57:df:e5:f2:87:83:c0:3c:2c:02:35:f6:f5:d3:
                    e2:b6:3a:1e:1a:da:6f:f6:9c:5a:b1:c1:94:0d:5e:
                    8c:de:e4:ec:6b:a4:05:c1:1b:23:fb:88:83:e5:7d:
                    58:f1:1d:07:e1:50:be:a1:c3:e6:03:15:bf:7e:88:
                    36:e1:87:88:5d:c3:26:08:b9:8b:0f:b3:75:b1:14:
                    7f:28:e0:b4:52:a0:08:ff:c3:fb:2d:1d:e0:7d:b1:
                    c1:a5:9e:82:8c:4f:cf:7e:32:90:c0:f4:01:36:c8:
                    be:ec:1a:ad:67:6e:8d:0d:f9:4a:fd:2c:7e:9a:00:
                    1a:a7:44:ed:8e:c3:f3:d8:3d:29:13:c4:7a:f6:43:
                    e1:fb:26:9f:ad:ed:7e:63:30:65:3a:60:46:77:c7:
                    18:7e:cf:58:34:51:81:df:6b:9e:2e:20:c4:63:bb:
                    4d:fb:6f:83:e5:73:83:5f:29:39:82:ee:dc:d1:1b:
                    a6:bc:18:60:23:ad:0a:48:5a:93:c7:09:b2:33:15:
                    82:f2:38:63:5d:cc:27:d2:4e:2f:8e:39:09:ad:42:
                    08:70:3e:b0:c7:01:3f:68:a6:e7:58:ba:b8:de:82:
                    5a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:97:3F:A1:5C:27:AA:01:AC:2A:55:AF:3C:3F:2F:D1:A3:D7:E4:05
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138322e3132382e302f31372d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.182.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         83:52:ed:86:b0:27:91:a9:94:53:e0:d9:a4:9b:ab:04:a8:8a:
         1d:17:ae:7e:94:b0:1e:cb:96:39:fb:e2:ac:98:9a:3b:11:50:
         af:b4:44:99:bd:a4:d2:5c:03:05:a7:3b:cb:b3:72:09:cc:20:
         e4:f2:9d:f4:b0:5b:18:d7:4f:fc:a7:10:d1:62:c5:16:e7:ff:
         78:89:cb:42:f9:86:93:3d:c8:5f:96:05:b8:dc:7c:10:5e:19:
         5d:c9:6a:2a:57:af:be:52:c3:a7:28:3f:11:ed:92:09:c4:d3:
         ac:5c:d4:77:e4:6a:dd:4b:45:c7:b2:40:2e:de:2d:ce:46:9f:
         c9:78:cf:da:eb:be:7a:8e:f1:01:6d:93:61:aa:b3:4c:2f:61:
         c5:e1:cf:5c:28:09:af:24:c6:e8:98:8c:c1:00:4b:14:d5:c9:
         0e:5c:b0:b9:61:a2:99:ec:69:17:49:ca:51:c2:d6:52:f5:a0:
         83:62:a3:68:a3:37:d2:8f:af:a0:b1:58:9c:a5:72:85:12:3e:
         f3:c4:0a:dd:2b:20:30:3b:a2:7d:22:8f:be:0b:9d:f3:ae:a5:
         04:4a:37:9b:bf:0a:18:af:29:b3:ec:2d:1d:1c:23:f7:f0:24:
         31:91:96:0c:fe:96:ca:ab:e1:f8:06:45:6c:0b:ed:13:eb:cd:
         89:2a:bb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:06:59 2024 by rpki-client on console-ams.rpki-client.org