Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138352e3132382e302f31372d3137203d3e2036333036.roa
File:                     3138312e3138352e3132382e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier:          X2rAEFM2onzX8zhb3C43OVWo3vMddk8YZQk94lE3LjU=
Subject key identifier:   7E:42:59:D0:28:17:E4:63:4D:82:B2:D1:A1:F8:1E:F7:CC:78:3D:33
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       015EE1858DD2C7232FFD23B8514D72609B145118
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138352e3132382e302f31372d3137203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:32:58 +0000
ROA not before:           Tue 04 Feb 2025 18:27:58 +0000
ROA not after:            Tue 03 Feb 2026 18:32:58 +0000
asID:                     6306
IP address blocks:        181.185.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 16:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5e:e1:85:8d:d2:c7:23:2f:fd:23:b8:51:4d:72:60:9b:14:51:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:27:58 2025 GMT
            Not After : Feb  3 18:32:58 2026 GMT
        Subject: CN=7E4259D02817E4634D82B2D1A1F81EF7CC783D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ce:b6:42:a3:cc:61:4e:d7:f1:e7:5e:fd:16:
                    98:7e:c3:ca:2f:03:86:f7:2d:8e:55:08:af:eb:be:
                    fe:89:56:90:ca:3f:1a:53:a7:f5:48:0b:6f:88:fc:
                    8a:d8:1e:60:e4:b3:49:62:00:55:0d:c4:e7:43:98:
                    61:e5:c8:cd:06:03:b8:1f:93:c2:f4:5e:65:93:e7:
                    a7:9d:11:18:23:6d:7e:e3:b1:a2:df:89:b5:d6:bd:
                    04:2a:6e:c2:c8:a7:9c:5d:09:e3:72:b9:50:12:a9:
                    49:8d:49:16:24:07:39:5a:8a:be:8b:8c:ba:02:94:
                    a9:21:b6:be:6c:c7:d7:62:ae:4b:22:c9:d6:b4:cd:
                    78:ec:c1:1e:b0:b8:26:d6:65:fe:79:e8:08:5b:37:
                    f5:fd:06:c8:0d:eb:08:5e:a2:72:23:3d:b2:d4:59:
                    7c:b0:11:9f:c8:95:ea:7f:90:9c:a2:43:54:27:09:
                    ec:4b:29:70:63:2d:52:97:cd:e1:37:85:b0:e6:a5:
                    1d:b1:b9:f1:c8:2f:3b:62:dd:de:89:20:ac:88:16:
                    45:38:99:18:70:fd:cb:b2:21:77:60:24:fe:44:66:
                    69:f5:ff:72:90:e5:13:cb:3e:17:3a:e8:15:4d:ef:
                    27:76:b4:47:33:0a:4a:a7:f9:92:18:04:b5:9e:0d:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:42:59:D0:28:17:E4:63:4D:82:B2:D1:A1:F8:1E:F7:CC:78:3D:33
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138352e3132382e302f31372d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.185.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         65:88:30:6a:43:d6:cd:b2:fe:47:da:04:98:47:b4:2f:82:6b:
         39:32:21:e4:08:75:c1:d5:39:81:af:df:36:3d:0b:c7:3f:b1:
         bf:56:8f:c3:e5:3f:87:e9:b6:1e:9f:c4:46:de:b6:c2:18:7a:
         29:9c:e3:1b:4f:6e:06:75:ca:b6:25:23:d8:93:78:7d:1f:78:
         42:19:8e:a6:5e:d3:b9:20:f0:53:c8:db:0d:b0:b3:2c:7a:e9:
         17:66:39:0e:dc:35:7d:eb:68:1a:db:89:b8:3d:dc:74:e7:2f:
         82:d9:b9:c5:39:b0:13:69:f6:6b:04:61:27:d0:3e:f1:07:50:
         52:36:ce:6b:61:9d:c6:22:1e:17:73:74:9b:2e:9f:6e:55:fe:
         65:d9:fc:45:26:a5:75:73:0d:bb:6b:9f:78:13:f0:96:f2:55:
         c0:16:1c:ce:74:69:7b:27:80:99:4c:e5:38:64:e6:6d:31:36:
         58:40:7e:93:94:a6:67:78:63:cb:92:1b:af:85:26:d4:bd:47:
         d1:ce:a7:d2:b1:55:c1:7d:54:25:9b:f9:62:81:04:cc:56:0c:
         2a:0d:15:e0:95:84:db:20:f7:d5:3c:b3:a9:c9:82:a3:5b:de:
         f0:39:c5:6f:0f:3b:6a:18:3f:59:45:07:5c:03:c8:e4:c9:58:
         ba:d0:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:18 2025 by rpki-client