Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138342e3132382e302f31372d3137203d3e2036333036.roa
File:                     3138312e3138342e3132382e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier:          PDaychFqcATfvZ/EAGnbolYXuyVoseCmyDuEf1ze03g=
Subject key identifier:   AC:7B:F4:29:76:CA:65:26:96:5E:88:7E:AC:C2:16:07:4A:32:0F:7E
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       3846DB79409F4AD77B64477414D54FF89586A81F
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138342e3132382e302f31372d3137203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:55 +0000
ROA not before:           Tue 05 Mar 2024 17:36:55 +0000
ROA not after:            Tue 04 Mar 2025 17:41:55 +0000
asID:                     6306
IP address blocks:        181.184.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:46:db:79:40:9f:4a:d7:7b:64:47:74:14:d5:4f:f8:95:86:a8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:55 2024 GMT
            Not After : Mar  4 17:41:55 2025 GMT
        Subject: CN=AC7BF42976CA6526965E887EACC216074A320F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bc:5b:9c:ac:6b:2c:10:3c:5b:54:8f:3d:30:
                    07:ec:0a:ec:f3:cc:1b:ce:80:a5:97:1f:fb:af:8c:
                    23:4e:0b:7c:0d:ad:7a:51:51:a2:a0:1e:db:70:71:
                    92:aa:1e:07:86:a5:4c:4e:dd:55:e6:73:1a:9a:0c:
                    6a:12:fe:7b:a2:be:55:67:a1:3d:3d:9b:73:fb:8b:
                    59:9a:52:c2:63:f1:a6:f1:a4:d5:3a:c0:b5:7b:10:
                    a9:50:0c:ef:9d:1a:82:96:05:3e:53:eb:5d:76:39:
                    7b:dd:a5:bb:ca:0d:9f:31:5e:0b:dd:11:9e:db:86:
                    2d:a9:60:a6:59:66:21:0f:59:c5:b6:a9:36:be:ab:
                    dd:00:91:29:98:0a:23:61:43:88:6d:14:fe:ca:f7:
                    d9:e3:e8:5b:50:e2:d1:30:de:71:8f:32:76:2e:e3:
                    f9:67:1e:13:d3:e4:39:e8:36:eb:3c:10:5e:79:90:
                    56:bb:68:39:ea:ac:84:8f:4c:16:18:39:87:41:d1:
                    16:4c:de:15:e0:98:e5:02:a7:af:6d:ed:db:29:92:
                    e8:a6:d7:20:5e:b8:40:d7:41:5d:3e:35:93:fb:bc:
                    f8:9f:aa:ad:c3:06:97:78:c1:11:0b:52:8a:1a:8a:
                    0c:bd:85:9c:75:58:a5:c9:e8:9c:5f:dd:29:c1:cb:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7B:F4:29:76:CA:65:26:96:5E:88:7E:AC:C2:16:07:4A:32:0F:7E
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138342e3132382e302f31372d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.184.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:53:97:b0:42:d5:e2:89:b6:dc:2d:8f:d3:b9:2a:7d:47:
         5d:43:59:5e:0a:f0:1c:2a:ea:de:7e:e8:e5:aa:7c:89:61:23:
         40:c3:19:e2:00:5b:d4:1b:21:8f:a6:6d:5a:7f:b0:37:c1:55:
         92:1f:a3:b2:b9:ea:99:51:31:5e:bf:9a:d3:cc:80:65:79:56:
         44:b8:bb:84:0c:70:e5:13:7f:b7:b6:c9:eb:d7:28:ce:54:17:
         01:25:c3:c5:68:fe:62:a0:70:9b:92:d2:b7:ce:98:02:11:ee:
         a6:4f:3a:a1:d0:77:8e:f2:da:69:d0:94:1d:67:c9:5b:b9:71:
         8f:06:0e:12:0b:b5:52:56:72:fe:38:ad:ed:4d:b8:73:bc:b9:
         40:a1:63:c3:c5:ec:bf:bf:be:43:5a:61:ab:fb:9f:40:60:4b:
         9c:97:f7:2f:7d:d1:65:35:c3:b1:f1:0a:4a:fa:35:ee:08:57:
         91:77:5f:b7:1f:8c:92:c4:8f:96:47:a9:8d:e6:e1:8f:f5:c2:
         1b:6b:20:7e:95:2f:cf:c5:e6:b5:20:b0:da:39:ab:99:68:83:
         d3:a1:4f:7c:5b:cb:41:2e:c3:ae:70:6a:5e:01:de:39:bb:59:
         dd:b9:7b:4d:69:f0:76:79:d4:76:0c:54:98:d4:75:9e:9f:68:
         cc:5a:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:47:41 2024 by rpki-client on console-fra.rpki-client.org