Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138332e3132382e302f31372d3137203d3e2036333036.roa
File:                     3138312e3138332e3132382e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier:          +n2ZzGzPJm8Y34bj2k3nFYffzhcwnw4boYXPqIkg8xY=
Subject key identifier:   CA:6E:6D:4C:F8:DD:09:6F:4A:95:F8:BD:56:1B:AC:7E:23:65:7E:82
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       360C43A8ECD1555055BD592804361FC9B93AE215
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138332e3132382e302f31372d3137203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:32:59 +0000
ROA not before:           Tue 04 Feb 2025 18:27:59 +0000
ROA not after:            Tue 03 Feb 2026 18:32:59 +0000
asID:                     6306
IP address blocks:        181.183.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 16:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0c:43:a8:ec:d1:55:50:55:bd:59:28:04:36:1f:c9:b9:3a:e2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:27:59 2025 GMT
            Not After : Feb  3 18:32:59 2026 GMT
        Subject: CN=CA6E6D4CF8DD096F4A95F8BD561BAC7E23657E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:0b:53:49:ec:75:bc:3c:d6:7e:d3:c6:6f:
                    f5:b4:ee:cb:59:bd:f8:eb:bb:47:bd:bb:03:da:a2:
                    36:ba:b6:f9:8c:95:29:1c:d0:66:44:03:dd:f6:d9:
                    28:8a:fc:e5:2a:a0:68:ef:f7:a5:6a:9b:e8:cb:e3:
                    f3:f9:60:1f:7d:68:f7:0b:22:25:45:b6:af:0f:64:
                    0c:a5:15:f9:2b:47:c7:b1:ab:a3:d8:c8:8d:71:63:
                    8c:9a:4c:42:c5:94:ff:cb:be:6f:15:b5:c2:97:a7:
                    61:4b:aa:42:f5:d5:a3:c3:db:f5:41:12:48:1a:b8:
                    ab:be:63:db:4d:7e:96:52:5d:c7:c9:53:47:73:37:
                    ba:bf:81:f2:80:cc:5e:78:7a:0a:a7:b7:be:4d:4f:
                    39:97:b3:27:b1:9b:9e:71:23:e1:1d:59:d2:27:0b:
                    a2:9c:d5:82:34:bf:23:1d:2d:cc:44:eb:e8:7e:b2:
                    76:1b:a0:b1:91:10:f7:20:35:22:99:6f:34:2d:14:
                    e2:27:9c:0b:86:af:a3:34:fc:71:b5:58:18:f9:7d:
                    a7:b7:74:0b:92:a2:c4:20:a0:aa:82:4b:fa:fc:ac:
                    da:65:3a:39:d2:ad:df:ea:ff:70:ff:73:54:19:19:
                    b2:9b:70:41:ac:6a:80:44:48:d2:b4:90:7c:3e:96:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6E:6D:4C:F8:DD:09:6F:4A:95:F8:BD:56:1B:AC:7E:23:65:7E:82
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138332e3132382e302f31372d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.183.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9c:e8:2a:25:0c:3a:d1:74:fd:df:ed:99:60:41:dd:94:f1:99:
         5a:89:1f:66:5e:b3:6c:6d:af:59:7e:73:bd:0f:55:b4:e5:0b:
         9d:65:2e:97:2b:b3:80:9c:44:a8:a9:f1:8c:15:a2:77:e5:f8:
         7c:d1:02:ab:e0:7b:de:e0:07:8b:42:f8:36:ed:44:b2:e5:b2:
         35:79:23:98:b7:0c:d3:82:4a:f0:5c:e9:9a:58:40:6e:f7:0c:
         8f:b9:55:20:06:59:7a:c2:cc:e5:38:2d:b5:bb:97:4e:2b:69:
         e3:28:49:23:a2:84:f4:1f:cd:bc:b7:c5:75:8c:8f:f4:45:c9:
         00:3a:d5:2f:58:ea:97:6c:36:0d:80:03:ac:af:c4:b7:4c:f3:
         c1:09:83:00:f0:20:9e:a0:83:d2:d0:ef:52:22:80:0e:7c:47:
         00:42:b0:bb:69:0b:53:36:6b:5a:79:6a:b5:38:b2:5f:04:df:
         38:26:ea:a0:87:d7:92:f6:0e:be:db:6d:46:97:15:c8:4e:e6:
         cd:2d:4f:91:f6:e0:cf:6c:96:58:ae:a6:a3:6d:a1:47:c5:68:
         d3:20:f6:a8:aa:8d:89:1f:29:c6:fa:49:ae:af:54:53:91:a3:
         68:e9:82:be:ab:7c:7d:f8:f8:3f:c3:4f:4c:6f:06:2b:92:ca:
         48:7f:8a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:24 2025 by rpki-client