Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138342e302e302f31342d3134203d3e2036333036.roa
File:                     3138312e3138342e302e302f31342d3134203d3e2036333036.roa (raw, json)
Hash identifier:          KioxooHaTBfb6FmN15Y7NV9Bl7UIChf/IRvYoG2BT0E=
Subject key identifier:   D0:1D:77:83:D1:C7:CC:29:3D:84:78:ED:88:9A:11:58:DA:8B:6F:25
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       75E9809AECA8950BEF1CB4401D7220052D96BC24
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138342e302e302f31342d3134203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:33:09 +0000
ROA not before:           Tue 04 Feb 2025 18:28:09 +0000
ROA not after:            Tue 03 Feb 2026 18:33:09 +0000
asID:                     6306
IP address blocks:        181.184.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 16:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e9:80:9a:ec:a8:95:0b:ef:1c:b4:40:1d:72:20:05:2d:96:bc:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:28:09 2025 GMT
            Not After : Feb  3 18:33:09 2026 GMT
        Subject: CN=D01D7783D1C7CC293D8478ED889A1158DA8B6F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:4c:24:cb:11:f6:c2:35:fa:a0:be:fc:23:
                    61:05:2d:db:33:8e:96:af:66:41:b1:0b:a8:75:1d:
                    75:5b:ca:c2:bb:03:26:84:62:55:cd:25:ad:4a:f2:
                    5d:6e:1c:47:c1:9c:88:45:17:24:01:8d:b6:a7:c3:
                    30:88:de:4a:8e:1c:fb:e3:b2:f7:07:bf:30:bc:19:
                    b8:a8:e8:d7:44:b3:72:f9:b9:b0:fb:fe:61:ef:a8:
                    83:53:42:fc:17:1e:e3:ad:6a:e7:53:1c:6b:d8:18:
                    7f:43:96:e0:98:d0:75:dd:73:c6:71:8c:fa:81:2f:
                    ea:c7:f6:f1:1e:3f:7d:25:cc:a8:a2:52:7e:f6:4b:
                    c8:e1:71:b4:2d:05:6a:c7:95:bc:14:fa:22:59:4c:
                    fd:9f:ce:da:93:f4:05:76:d2:ed:1a:b5:bd:38:ea:
                    08:29:62:28:7f:a0:45:25:00:5f:8f:a7:28:4f:e6:
                    9a:86:45:7b:44:16:3f:7c:46:9e:8e:42:7d:29:4e:
                    a5:3f:83:c7:31:f7:e5:82:db:fe:2c:07:06:a6:42:
                    11:84:7f:03:8f:ef:42:b2:e1:01:45:5c:71:cb:c3:
                    55:65:05:68:b9:37:15:81:ea:42:a8:47:67:74:ec:
                    e9:fe:19:3a:5b:86:b6:6e:85:56:e9:50:53:d6:87:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1D:77:83:D1:C7:CC:29:3D:84:78:ED:88:9A:11:58:DA:8B:6F:25
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138342e302e302f31342d3134203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.184.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         ab:f0:7d:27:a7:4e:36:84:1d:b1:8d:b0:87:11:c3:f9:01:fb:
         e2:be:31:82:c1:37:3a:df:55:30:87:c5:f9:8e:9d:29:85:8f:
         8e:bd:e0:68:af:12:9a:3a:a7:19:20:a5:58:da:6e:de:5d:68:
         82:fe:31:98:2b:66:6d:0e:08:76:45:61:dd:4d:79:65:1d:79:
         e8:87:95:d7:10:7b:f7:ef:30:9f:0c:a5:ae:a8:d7:cf:32:1e:
         93:aa:c6:83:73:75:ae:85:ae:6c:05:2c:40:ba:6c:8b:dd:82:
         fa:4b:ff:2a:ae:ca:51:ec:9c:dd:ab:25:44:34:77:e7:36:ca:
         ee:e0:c6:ce:1d:fb:f9:d9:a1:bf:f5:d8:d5:db:6f:51:45:15:
         e3:89:0f:68:1a:a0:3b:01:f1:8c:24:eb:e0:7b:00:14:f3:cc:
         6e:e3:b1:d6:61:d2:49:ca:16:e3:45:3d:88:f3:23:dd:b8:3a:
         d8:4d:a0:9c:b3:4b:f2:b8:99:72:13:5c:01:1f:12:08:b5:e7:
         d5:c7:57:f5:5e:60:fa:3f:cd:d2:0e:09:53:33:e0:86:a8:e5:
         25:ab:f0:34:ad:e6:18:08:b4:a6:48:9b:60:48:e9:cc:bb:ab:
         86:96:95:b2:77:51:4c:6a:fd:32:06:39:6c:4c:cc:c7:51:a0:
         70:ba:e2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:22:09 2025 by rpki-client