Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e302e302f31352d3135203d3e2036333036.roa
File:                     3138362e3136342e302e302f31352d3135203d3e2036333036.roa (raw, json)
Hash identifier:          B1JXFCl1dvXBR2DAlIia6Z1lVk5kN/x4Chxvr0v+/Aw=
Subject key identifier:   FE:36:7A:BF:2D:69:18:15:91:51:A6:EA:59:8D:32:FB:FD:CD:15:B6
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       53BD70448C5E739A591CDC37C2F84B10A598DFB4
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e302e302f31352d3135203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:33:03 +0000
ROA not before:           Tue 04 Feb 2025 18:28:03 +0000
ROA not after:            Tue 03 Feb 2026 18:33:03 +0000
asID:                     6306
IP address blocks:        186.164.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bd:70:44:8c:5e:73:9a:59:1c:dc:37:c2:f8:4b:10:a5:98:df:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:28:03 2025 GMT
            Not After : Feb  3 18:33:03 2026 GMT
        Subject: CN=FE367ABF2D6918159151A6EA598D32FBFDCD15B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d5:b4:1c:41:ad:aa:d1:06:c0:88:d4:04:05:
                    7e:3a:ab:28:bd:d8:ec:01:7f:a9:36:94:e9:f0:4e:
                    40:92:f1:b3:66:1c:2f:4b:f9:35:c9:db:57:55:9f:
                    6d:fb:69:1d:ea:fe:a9:80:87:f8:f8:fd:f0:e5:6c:
                    d9:dc:3b:f9:2d:85:1c:3e:f7:04:b5:ff:27:1a:38:
                    f3:c6:ce:99:48:ee:a5:01:fa:26:01:bc:ea:66:fc:
                    34:6b:84:a2:b0:b0:47:e1:93:ca:ac:5d:e0:3f:f6:
                    42:dc:3d:da:ee:c4:3c:c1:aa:54:0a:83:b6:51:e3:
                    b1:a5:38:f6:9b:29:9a:7e:99:e7:a0:9e:60:8d:3c:
                    83:1a:4c:44:4c:77:b7:26:aa:89:5d:56:3a:f0:f7:
                    ff:13:2d:a5:43:fa:20:b0:0f:fe:db:3b:50:54:fe:
                    d0:ef:bf:c2:3b:ac:9d:1c:63:8e:ca:c3:f7:f6:70:
                    0b:8e:33:38:bb:cd:84:e4:c7:42:87:8c:99:0b:b7:
                    28:35:79:39:c7:0f:72:10:06:50:5c:a0:10:cb:12:
                    13:8f:15:e1:9b:df:6c:12:55:6c:0d:44:2d:4e:de:
                    51:ee:e1:e8:6b:37:3a:4f:ad:22:89:47:5b:d4:96:
                    20:3e:cd:d0:ea:f5:c6:32:81:bf:00:f8:65:5d:ea:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:36:7A:BF:2D:69:18:15:91:51:A6:EA:59:8D:32:FB:FD:CD:15:B6
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e302e302f31352d3135203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.164.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         55:bf:5f:93:96:91:30:85:ee:ec:84:81:f8:25:c5:11:b7:c6:
         1d:bf:cc:55:04:e6:10:7d:ab:49:23:8d:a6:d4:45:e2:6d:5c:
         87:5f:c6:2e:7b:a3:7b:af:ab:e0:70:84:18:44:a0:7a:fe:a0:
         fa:7a:25:37:0d:56:6e:7d:7a:67:aa:29:9f:41:ab:e9:66:d6:
         65:75:93:51:4e:ed:2f:25:5e:b5:40:3a:36:39:9f:7f:ea:1d:
         90:f5:b9:cf:31:c0:28:fa:9e:aa:ad:2b:28:45:84:6d:30:81:
         48:11:c0:20:e3:09:33:0d:8e:86:be:aa:9d:5e:0f:a7:03:35:
         c3:df:95:cb:a1:e7:eb:08:4f:51:c2:0f:f9:29:d0:f4:e5:68:
         e6:e9:06:15:92:61:88:fc:4f:45:dd:b6:da:18:18:64:e1:90:
         53:5c:7f:83:6a:c3:dc:8f:0d:1e:32:37:9f:85:28:cb:6b:31:
         bd:1e:32:66:1f:71:ed:c8:a1:be:cd:f6:e2:af:07:8d:50:5f:
         2f:ee:d5:6e:12:f3:38:97:69:de:3f:dd:42:ce:be:3d:c2:70:
         f5:43:75:d1:c2:89:f3:c7:5a:f0:f2:02:31:d7:5d:e5:6b:2d:
         55:e6:4d:03:03:70:f6:75:12:15:14:e0:7f:79:b5:61:7f:94:
         36:e3:d0:9b
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUU71wRIxec5pZHNw3wvhLEKWY37QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3MDVBOUVENzA2RkQ0NTcyNUE3MkQ5RDgzRUYxRDlC
OUExMkU5QzAeFw0yNTAyMDQxODI4MDNaFw0yNjAyMDMxODMzMDNaMDMxMTAvBgNV
BAMTKEZFMzY3QUJGMkQ2OTE4MTU5MTUxQTZFQTU5OEQzMkZCRkRDRDE1QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT1bQcQa2q0QbAiNQEBX46qyi9
2OwBf6k2lOnwTkCS8bNmHC9L+TXJ21dVn237aR3q/qmAh/j4/fDlbNncO/kthRw+
9wS1/ycaOPPGzplI7qUB+iYBvOpm/DRrhKKwsEfhk8qsXeA/9kLcPdruxDzBqlQK
g7ZR47GlOPabKZp+meegnmCNPIMaTERMd7cmqoldVjrw9/8TLaVD+iCwD/7bO1BU
/tDvv8I7rJ0cY47Kw/f2cAuOMzi7zYTkx0KHjJkLtyg1eTnHD3IQBlBcoBDLEhOP
FeGb32wSVWwNRC1O3lHu4ehrNzpPrSKJR1vUliA+zdDq9cYygb8A+GVd6muPAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQU/jZ6vy1pGBWRUabqWY0y+/3NFbYwHwYDVR0j
BBgwFoAUNXBantcG/UVyWnLZ2D7x2bmhLpwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUZBRDZFNkNEN0NFNTUxNjQzRDA0RDVERkI4MTY2OUUz
NUIzQUNERDFCOTM3NkIzN0MzMjQ1MzE5QTBFMzY0LzAvMzU3MDVBOUVENzA2RkQ0
NTcyNUE3MkQ5RDgzRUYxRDlCOUExMkU5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTcwNUE5RUQ3MDZGRDQ1NzI1
QTcyRDlEODNFRjFEOUI5QTEyRTlDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGQUQ2RTZDRDdDRTU1MTY0M0QwNEQ1REZCODE2NjlFMzVCM0FDREQx
QjkzNzZCMzdDMzI0NTMxOUEwRTM2NC8wLzMxMzgzNjJlMzEzNjM0MmUzMDJlMzAy
ZjMxMzUyZDMxMzUyMDNkM2UyMDM2MzMzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBuqQwDQYJKoZI
hvcNAQELBQADggEBAFW/X5OWkTCF7uyEgfglxRG3xh2/zFUE5hB9q0kjjabUReJt
XIdfxi57o3uvq+BwhBhEoHr+oPp6JTcNVm59emeqKZ9Bq+lm1mV1k1FO7S8lXrVA
OjY5n3/qHZD1uc8xwCj6nqqtKyhFhG0wgUgRwCDjCTMNjoa+qp1eD6cDNcPflcuh
5+sIT1HCD/kp0PTlaObpBhWSYYj8T0XdttoYGGThkFNcf4Nqw9yPDR4yN5+FKMtr
Mb0eMmYfce3Iob7N9uKvB41QXy/u1W4S8ziXad4/3ULOvj3CcPVDddHCifPHWvDy
AjHXXeVrLVXmTQMDcPZ1EhUU4H95tWF/lDbj0Js=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:41 2025 by rpki-client