Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136362e302e302f31362d3234203d3e2036333036.roa
File:                     3138362e3136362e302e302f31362d3234203d3e2036333036.roa (raw, json)
Hash identifier:          vt/EFXwSz6oErJzpYjW5piPV1WT13bMPbEdjMDE89L4=
Subject key identifier:   C7:4F:F2:95:D4:38:C9:75:3D:8E:CA:6D:C0:7D:3A:AF:0D:EB:BB:94
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       0ECD7DAC73D4949C982FE48E30D851335DEBC70E
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136362e302e302f31362d3234203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:57 +0000
ROA not before:           Tue 05 Mar 2024 17:36:57 +0000
ROA not after:            Tue 04 Mar 2025 17:41:57 +0000
asID:                     6306
IP address blocks:        186.166.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cd:7d:ac:73:d4:94:9c:98:2f:e4:8e:30:d8:51:33:5d:eb:c7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:57 2024 GMT
            Not After : Mar  4 17:41:57 2025 GMT
        Subject: CN=C74FF295D438C9753D8ECA6DC07D3AAF0DEBBB94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:93:42:58:96:3a:df:2e:10:6e:2f:3f:10:
                    76:77:89:bd:a5:40:22:5f:81:ea:29:a8:97:0c:f1:
                    ba:10:4f:a3:f3:51:0d:ae:65:9e:da:c6:78:6a:a0:
                    6c:63:20:92:d1:3c:82:94:47:db:d1:cd:2d:eb:4e:
                    fa:ae:69:7a:7e:05:40:ff:4f:88:ea:c3:76:22:af:
                    ad:60:dd:c1:30:bd:f3:0f:5b:51:73:9b:8a:22:5d:
                    8a:6f:bb:bd:8d:1c:72:1d:72:cb:5e:19:9a:ee:c6:
                    cc:9a:84:38:e8:d4:54:38:e7:af:d1:b7:6c:a5:8a:
                    c5:61:e1:d3:bc:60:5f:99:c0:b9:2b:f2:cd:a3:55:
                    2f:c8:b3:c7:be:09:ff:52:61:57:4b:5f:33:64:34:
                    0b:74:18:98:85:d5:30:81:25:4d:0c:ba:84:85:98:
                    bf:7d:e0:44:f9:f4:9d:13:54:2b:c0:6c:f3:50:9a:
                    6e:74:46:21:04:30:91:d8:8b:85:2f:ed:2c:2c:2a:
                    e7:64:e5:9a:3a:a7:30:89:66:8e:16:cd:02:90:be:
                    4b:47:f9:3c:81:c3:b8:2b:ce:0b:bd:69:9b:30:78:
                    b6:12:ed:75:d4:0e:87:c0:a5:7b:51:84:04:b5:55:
                    cd:33:68:88:1f:7c:42:eb:98:48:7d:50:6e:aa:b9:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4F:F2:95:D4:38:C9:75:3D:8E:CA:6D:C0:7D:3A:AF:0D:EB:BB:94
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136362e302e302f31362d3234203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:47:1d:e0:db:80:b5:b4:f2:43:ce:f6:66:8b:20:b2:af:c8:
         08:4f:96:a1:82:72:1d:29:5b:4a:6c:59:69:73:90:ee:7e:b2:
         01:12:8e:d5:45:20:8a:b8:30:b4:a1:62:f5:3c:de:63:cd:93:
         f6:5f:9b:e8:31:3e:6d:0e:b2:86:24:e1:1a:63:68:9a:2c:fd:
         15:ab:68:27:2c:11:cc:7e:d4:7e:a9:b1:1c:64:66:65:e6:f7:
         43:98:ab:84:d4:c7:45:e9:8d:9e:9f:6f:a5:fe:1e:82:34:34:
         a8:7a:57:cf:c7:e7:61:2a:c2:58:5c:23:0c:22:46:df:8d:bf:
         05:17:ad:11:19:b7:8a:7c:a6:33:61:93:e6:50:82:29:52:24:
         ab:fb:80:8c:19:1f:f9:d0:0b:1e:6d:ee:3e:d7:7a:52:a5:cc:
         6d:04:ac:bd:a1:99:20:8f:36:4f:85:4a:17:e1:5b:c4:2a:db:
         25:2a:88:d0:76:0b:12:0b:12:47:6f:5e:99:f3:82:e5:3f:90:
         26:98:2b:df:84:f2:75:c4:38:d6:ca:ff:69:b3:a1:1d:6f:ed:
         d5:30:60:f6:ee:2f:04:cd:ab:e9:18:37:fc:b8:57:18:b4:b4:
         ba:6e:03:c1:9b:b4:df:f9:e4:9f:3e:1e:91:a8:50:28:9e:59:
         85:e6:d0:44
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUDs19rHPUlJyYL+SOMNhRM13rxw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3MDVBOUVENzA2RkQ0NTcyNUE3MkQ5RDgzRUYxRDlC
OUExMkU5QzAeFw0yNDAzMDUxNzM2NTdaFw0yNTAzMDQxNzQxNTdaMDMxMTAvBgNV
BAMTKEM3NEZGMjk1RDQzOEM5NzUzRDhFQ0E2REMwN0QzQUFGMERFQkJCOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaDpNCWJY63y4Qbi8/EHZ3ib2l
QCJfgeopqJcM8boQT6PzUQ2uZZ7axnhqoGxjIJLRPIKUR9vRzS3rTvquaXp+BUD/
T4jqw3Yir61g3cEwvfMPW1Fzm4oiXYpvu72NHHIdcsteGZruxsyahDjo1FQ456/R
t2ylisVh4dO8YF+ZwLkr8s2jVS/Is8e+Cf9SYVdLXzNkNAt0GJiF1TCBJU0MuoSF
mL994ET59J0TVCvAbPNQmm50RiEEMJHYi4Uv7SwsKudk5Zo6pzCJZo4WzQKQvktH
+TyBw7grzgu9aZsweLYS7XXUDofApXtRhAS1Vc0zaIgffELrmEh9UG6qudipAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUx0/yldQ4yXU9jsptwH06rw3ru5QwHwYDVR0j
BBgwFoAUNXBantcG/UVyWnLZ2D7x2bmhLpwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUZBRDZFNkNEN0NFNTUxNjQzRDA0RDVERkI4MTY2OUUz
NUIzQUNERDFCOTM3NkIzN0MzMjQ1MzE5QTBFMzY0LzAvMzU3MDVBOUVENzA2RkQ0
NTcyNUE3MkQ5RDgzRUYxRDlCOUExMkU5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTcwNUE5RUQ3MDZGRDQ1NzI1
QTcyRDlEODNFRjFEOUI5QTEyRTlDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGQUQ2RTZDRDdDRTU1MTY0M0QwNEQ1REZCODE2NjlFMzVCM0FDREQx
QjkzNzZCMzdDMzI0NTMxOUEwRTM2NC8wLzMxMzgzNjJlMzEzNjM2MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDM2MzMzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAuqYwDQYJKoZI
hvcNAQELBQADggEBAEZHHeDbgLW08kPO9maLILKvyAhPlqGCch0pW0psWWlzkO5+
sgESjtVFIIq4MLShYvU83mPNk/Zfm+gxPm0OsoYk4RpjaJos/RWraCcsEcx+1H6p
sRxkZmXm90OYq4TUx0XpjZ6fb6X+HoI0NKh6V8/H52EqwlhcIwwiRt+NvwUXrREZ
t4p8pjNhk+ZQgilSJKv7gIwZH/nQCx5t7j7XelKlzG0ErL2hmSCPNk+FShfhW8Qq
2yUqiNB2CxILEkdvXpnzguU/kCaYK9+E8nXEONbK/2mzoR1v7dUwYPbuLwTNq+kY
N/y4Vxi0tLpuA8GbtN/55J8+HpGoUCieWYXm0EQ=
-----END CERTIFICATE-----
Generated at Wed May 15 03:47:41 2024 by rpki-client on console-fra.rpki-client.org