Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138342e3132382e302f31372d3137203d3e2036333036.roa
File:                     3138312e3138342e3132382e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier:          kiDCdUnbJjjAlcaHn4X398l8fjRJpXowNTYYatzIO1c=
Subject key identifier:   E6:70:09:5E:0D:E3:9F:8B:12:7D:C9:59:10:B7:E3:E3:48:B9:5D:DE
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       6F03DE764C5BEB9EEA649699DCC2D17B26D4D4B9
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138342e3132382e302f31372d3137203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:33:04 +0000
ROA not before:           Tue 04 Feb 2025 18:28:04 +0000
ROA not after:            Tue 03 Feb 2026 18:33:04 +0000
asID:                     6306
IP address blocks:        181.184.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 16:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:03:de:76:4c:5b:eb:9e:ea:64:96:99:dc:c2:d1:7b:26:d4:d4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:28:04 2025 GMT
            Not After : Feb  3 18:33:04 2026 GMT
        Subject: CN=E670095E0DE39F8B127DC95910B7E3E348B95DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:88:8a:b0:b6:cc:73:9b:7b:0d:47:d4:bf:
                    d1:72:9f:3d:75:93:8d:01:d1:2f:44:11:98:ec:a0:
                    4d:62:db:e4:f4:0f:2e:1f:a7:3f:3c:14:0d:40:df:
                    91:67:27:1d:fd:0c:d8:cb:93:dc:d2:92:44:f7:2c:
                    08:8c:e6:13:8b:24:25:b2:90:34:ba:ef:70:fc:ec:
                    80:b6:c7:a5:a3:72:80:60:c9:9d:9d:da:ca:1a:39:
                    0c:74:e0:84:26:c0:da:cb:81:aa:fa:13:8e:b5:8b:
                    c2:07:7b:b0:18:0a:b5:94:61:52:48:5d:3e:ac:f9:
                    1f:de:ba:17:36:9c:c0:62:5d:c0:28:e6:bd:5c:81:
                    f3:59:c3:9a:e9:aa:54:17:a8:2f:de:73:87:1f:d8:
                    72:7b:a0:49:bc:7e:f4:61:9b:48:30:16:31:18:f1:
                    30:8f:cc:29:df:46:de:b5:7f:56:c3:d3:f8:4b:72:
                    ef:82:f8:ee:42:46:7d:e5:d2:c6:ed:2d:69:23:df:
                    92:eb:e6:e4:da:66:d6:d9:b0:ee:13:bc:71:a4:3c:
                    f7:06:9b:b3:b1:ed:34:f6:dd:cd:29:48:2c:57:c0:
                    50:e6:04:c7:0c:fb:82:9b:49:8d:17:b3:af:df:02:
                    95:c5:a3:c0:1c:eb:6c:74:a8:6c:ea:bf:d1:59:f9:
                    64:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:70:09:5E:0D:E3:9F:8B:12:7D:C9:59:10:B7:E3:E3:48:B9:5D:DE
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138342e3132382e302f31372d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.184.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         42:5c:c6:fd:8b:7e:ac:ee:67:35:7e:fb:00:d1:82:06:8b:74:
         30:8c:98:8c:e4:60:c2:ee:2a:2a:20:b7:02:41:8a:e3:9a:10:
         8a:a6:4d:ae:4c:61:38:64:93:44:86:79:6f:6a:c2:5d:14:50:
         0c:54:85:df:78:b6:19:6a:24:e1:22:86:63:4e:08:0e:39:3c:
         fb:ab:21:93:e0:40:02:1d:1c:9f:92:ea:0e:be:fe:d4:d9:74:
         8e:63:eb:21:cb:03:ed:31:67:b7:3b:44:f3:ce:21:52:9d:0e:
         6c:65:16:a1:1a:1e:c7:ed:24:2d:2e:fa:5d:26:33:94:bd:16:
         83:57:63:2c:4b:25:9d:33:a7:b2:1f:5c:08:5c:c9:63:0e:3c:
         2f:b1:d9:8b:85:33:a7:55:3b:ae:b4:07:09:d1:ad:1f:68:12:
         e3:d1:c4:24:15:b0:f1:61:96:db:56:28:36:bb:73:4c:24:a2:
         b8:68:16:fc:0c:41:08:40:8b:27:be:44:42:8d:87:dc:ea:ce:
         fd:30:6f:86:63:2a:5c:80:c5:f5:bf:4d:ea:be:1c:1d:6a:fd:
         20:a1:bd:4a:a9:8e:a0:93:11:57:09:1e:2c:17:6c:c0:c4:89:
         73:fe:ba:42:42:17:1f:b6:c1:4a:b7:c0:60:61:a3:62:fa:b2:
         96:0c:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:23 2025 by rpki-client