Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138352e3132382e302f31372d3137203d3e2036333036.roa
File:                     3138312e3138352e3132382e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier:          rWgbQJoel44Rjl9tGBZrpJ0dWyCqHwjnbyTy29JGTWY=
Subject key identifier:   8A:23:AD:90:AB:09:B7:64:DD:AD:2B:7D:64:5D:96:CA:E2:07:F9:11
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       44DCE88536794057464C7A5FF3602EE270BCA6FC
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138352e3132382e302f31372d3137203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:42:00 +0000
ROA not before:           Tue 05 Mar 2024 17:37:00 +0000
ROA not after:            Tue 04 Mar 2025 17:42:00 +0000
asID:                     6306
IP address blocks:        181.185.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:dc:e8:85:36:79:40:57:46:4c:7a:5f:f3:60:2e:e2:70:bc:a6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:37:00 2024 GMT
            Not After : Mar  4 17:42:00 2025 GMT
        Subject: CN=8A23AD90AB09B764DDAD2B7D645D96CAE207F911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:49:da:38:c2:5c:c9:bc:ed:47:fe:1b:e6:
                    9c:cb:72:2b:8f:5d:ae:3b:75:b8:b7:34:2d:fb:8d:
                    ca:b8:43:3c:94:cf:63:8e:0e:24:97:fc:4b:df:73:
                    c6:4e:17:59:8c:56:71:14:82:02:9c:49:9d:7b:91:
                    9a:d3:0e:84:3c:ef:ae:8a:51:40:de:1a:d6:d1:45:
                    55:84:4d:fb:32:ba:b7:5b:c3:11:b9:43:5e:48:3e:
                    ba:a1:c5:9b:09:05:e2:49:ef:65:14:de:4c:10:90:
                    98:ee:b0:42:db:58:0d:aa:1f:e3:0e:b5:85:9f:09:
                    94:3b:f3:b6:05:63:2f:0c:7d:22:e0:1b:29:89:8f:
                    a8:e8:5e:6f:4c:f5:cd:1c:1f:fa:a0:0b:0b:5f:fa:
                    37:7c:e1:01:ca:3c:9a:48:00:a0:0a:dd:89:85:31:
                    45:f3:95:5d:b7:0b:b2:73:11:c6:e8:c4:0f:3e:d5:
                    27:82:d3:2b:79:80:60:31:3a:7f:80:5b:63:52:50:
                    74:26:b2:68:9a:9d:df:da:ab:8a:df:69:e4:49:76:
                    be:d4:7f:a5:9c:bd:bc:39:79:ce:47:ae:c1:c1:dc:
                    5c:8e:6e:f5:28:63:fa:86:9f:59:cb:0c:48:c6:72:
                    22:5b:63:de:86:42:14:90:c3:e4:06:a8:ec:23:97:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:23:AD:90:AB:09:B7:64:DD:AD:2B:7D:64:5D:96:CA:E2:07:F9:11
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138352e3132382e302f31372d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.185.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         57:a2:52:97:ae:d7:5c:cb:c6:bd:5d:a3:13:d2:76:77:8c:93:
         41:7e:69:26:0f:83:bb:b9:8e:02:29:c5:35:a4:39:7a:ed:f3:
         ab:fa:08:cf:a2:4a:ba:42:bf:6f:93:17:0d:3e:1c:98:d9:74:
         21:92:78:7d:9c:9d:68:6f:34:10:0a:8e:b6:1b:e5:0c:97:dc:
         c9:97:d0:ae:9a:fd:a5:e0:38:3d:f5:e7:32:d2:e4:4b:86:49:
         51:a8:40:b3:80:41:fc:fb:dd:96:72:51:b7:0f:0a:83:c2:55:
         83:04:e9:99:77:10:e5:e9:75:5a:bc:52:4e:d2:85:57:49:36:
         4a:75:c6:ac:32:52:d0:89:ea:ee:2b:5c:20:64:88:99:eb:ea:
         f4:e6:fc:bc:c3:58:3c:f2:d8:aa:0f:a5:97:2c:ab:10:4c:2b:
         5c:74:9c:f4:a0:27:e0:5a:7d:1b:b4:c3:02:4a:cd:f0:84:1e:
         e1:28:be:a5:9d:31:59:5c:8d:35:87:c5:a5:9c:7a:e8:65:d3:
         eb:fd:f0:75:89:f7:26:42:2a:a6:7d:b9:50:37:41:88:00:d3:
         06:99:35:49:34:7a:f8:19:47:36:43:56:83:3c:73:01:17:f7:
         f3:40:47:fe:82:69:a2:e8:c4:f7:c7:b6:bf:f2:a4:b4:05:37:
         0b:ab:05:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:47:41 2024 by rpki-client on console-fra.rpki-client.org