Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138342e302e302f31342d3134203d3e2036333036.roa
File:                     3138312e3138342e302e302f31342d3134203d3e2036333036.roa (raw, json)
Hash identifier:          boi4yzGlv3qKTY3v+AfWOu+01wCArnypnRhyLtLXQCk=
Subject key identifier:   47:73:F5:FF:D0:D7:01:5A:81:58:FC:17:02:8C:BD:97:40:21:57:13
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       64B238CDCEA18B09751BB36EA59A72409ADE2DCE
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138342e302e302f31342d3134203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:50 +0000
ROA not before:           Tue 05 Mar 2024 17:36:50 +0000
ROA not after:            Tue 04 Mar 2025 17:41:50 +0000
asID:                     6306
IP address blocks:        181.184.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b2:38:cd:ce:a1:8b:09:75:1b:b3:6e:a5:9a:72:40:9a:de:2d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:50 2024 GMT
            Not After : Mar  4 17:41:50 2025 GMT
        Subject: CN=4773F5FFD0D7015A8158FC17028CBD9740215713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3d:e4:d9:b3:b3:bf:ea:8d:21:73:2e:9b:92:
                    b2:d9:10:9d:d3:d4:1d:41:40:f4:6a:c3:a6:81:b6:
                    12:04:c9:e2:83:f5:9a:92:f8:33:91:aa:b0:cd:75:
                    18:7a:d0:af:bc:a7:d2:5f:06:3d:d5:8f:e9:81:17:
                    d4:e8:13:3c:cb:f8:b9:44:8e:7e:c6:67:c9:9f:ac:
                    a4:68:13:f3:b8:5b:9a:be:e6:d7:91:eb:48:6f:b7:
                    e3:97:af:ed:2e:c2:e8:e8:61:7d:68:ab:44:8b:0f:
                    dc:24:d1:3a:56:d7:85:ca:f6:2b:4b:d0:8f:5d:86:
                    17:95:f8:a3:96:f8:a1:1c:0d:9b:4d:cd:72:36:77:
                    68:15:44:2d:ea:48:e5:21:37:ff:94:d7:21:48:6d:
                    45:06:a5:82:95:6d:6f:b8:ea:0e:c5:08:69:1c:5a:
                    ee:11:15:09:b2:fe:e6:33:34:36:5c:d4:a9:f4:7a:
                    3a:ea:2d:42:e8:69:cb:33:43:50:ae:c5:9f:8d:90:
                    71:14:38:7a:5c:a1:ae:a0:5d:3e:56:7c:08:d0:8d:
                    e5:e1:1f:09:b7:7f:86:bd:bf:07:ae:d3:27:ef:a0:
                    c0:a5:67:0f:a4:08:53:70:5e:89:77:bc:67:a4:2a:
                    5d:8d:0f:f8:dc:5f:f1:17:3a:d2:64:48:d2:cc:60:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:73:F5:FF:D0:D7:01:5A:81:58:FC:17:02:8C:BD:97:40:21:57:13
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138342e302e302f31342d3134203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.184.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         5f:1c:ee:13:3e:ed:85:20:dd:41:98:28:e3:42:19:a2:54:4e:
         b9:47:47:63:e7:c5:40:7f:5d:08:3e:c3:93:91:02:64:78:0d:
         3c:7c:10:13:5b:38:b5:5c:a9:d2:c3:af:fd:eb:c3:3d:22:cb:
         5b:1b:65:94:69:c1:34:c3:96:b1:46:f8:93:32:7b:69:f5:1f:
         1f:47:3f:09:a6:41:76:d8:14:0a:d0:53:95:f7:d0:e6:aa:d8:
         d9:ea:0f:30:de:fe:d8:c3:1e:6d:5c:d6:9d:59:b3:eb:3a:b6:
         47:8e:48:75:d9:3a:ce:ce:3f:38:fe:cb:d4:cf:27:eb:ef:77:
         68:75:c4:9b:4c:ab:c8:4a:69:2f:19:19:f4:a4:a8:c7:ab:88:
         83:b2:b3:59:b3:85:69:28:20:84:be:ac:1e:fe:07:68:92:e5:
         c8:23:19:82:42:6c:b2:b5:27:a1:a3:88:52:83:f2:7d:b7:91:
         5d:a1:ce:57:e9:18:24:1a:e1:18:c6:6d:27:34:06:df:d6:a5:
         a1:e9:3a:d9:4b:72:33:ad:e0:87:14:08:da:f1:aa:5a:bc:10:
         57:3c:50:8b:fd:53:02:2f:df:39:cb:b0:ea:9f:7b:c8:25:b1:
         3b:f4:26:90:78:bf:45:5f:b7:7e:72:47:f7:70:9f:0c:e1:21:
         d4:7b:6e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:46 2024 by rpki-client on console-fra.rpki-client.org