Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3138342e302e302f31342d3135203d3e2036333036.roa
File:                     3138362e3138342e302e302f31342d3135203d3e2036333036.roa (raw, json)
Hash identifier:          PKaXiE7nBStalRpr8wxL3L5707FK2RSDTS3kitTWf8E=
Subject key identifier:   56:56:39:C0:CC:9C:E5:D4:8F:D2:2F:32:2D:FD:19:55:74:E5:14:28
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       77CD94D694A69699AF042FC86F845E8FA0F26AAA
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3138342e302e302f31342d3135203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:53 +0000
ROA not before:           Tue 05 Mar 2024 17:36:53 +0000
ROA not after:            Tue 04 Mar 2025 17:41:53 +0000
asID:                     6306
IP address blocks:        186.184.0.0/14 maxlen: 15

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cd:94:d6:94:a6:96:99:af:04:2f:c8:6f:84:5e:8f:a0:f2:6a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:53 2024 GMT
            Not After : Mar  4 17:41:53 2025 GMT
        Subject: CN=565639C0CC9CE5D48FD22F322DFD195574E51428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:f9:4f:ed:3c:a9:f2:8c:a8:1a:b9:a2:d6:
                    ae:ec:7f:9c:42:7a:89:8f:52:f5:a8:b8:5f:f0:81:
                    ac:81:c9:6f:d0:63:d5:e1:28:49:5a:67:e3:c8:94:
                    bb:73:b7:e1:37:cc:42:d4:c3:28:fe:66:96:99:59:
                    08:b6:fe:07:59:8a:da:0c:5d:25:e9:10:91:89:ba:
                    bd:77:fa:f9:ce:1d:08:b9:4b:fb:4a:57:3d:bb:e8:
                    f0:4a:76:b9:dd:2e:ac:2d:f1:ff:c1:23:4f:3a:b4:
                    ea:d2:53:b8:86:01:a6:a1:46:5f:cc:0e:27:63:48:
                    f9:7d:17:ca:74:57:18:2c:f0:8f:7d:9e:e8:84:69:
                    78:36:08:21:85:15:0d:5b:8f:1d:19:fc:ec:30:45:
                    04:ab:42:df:ce:41:01:f3:e8:63:14:d1:f8:07:14:
                    72:bf:06:b0:31:22:ff:83:45:85:01:8c:94:fb:2d:
                    f0:19:87:47:c8:18:cd:29:19:f5:aa:0a:1a:fb:a5:
                    c7:47:28:02:e4:df:da:75:79:ce:96:e9:2b:31:cc:
                    7f:5a:17:f9:f6:6b:a0:6f:4c:13:93:8c:2e:4c:b3:
                    0a:7d:9a:45:02:9d:10:a5:1a:20:1a:e7:ee:f3:79:
                    c8:db:84:c4:22:05:5e:ca:57:38:0c:41:49:f2:d6:
                    f2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:56:39:C0:CC:9C:E5:D4:8F:D2:2F:32:2D:FD:19:55:74:E5:14:28
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3138342e302e302f31342d3135203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.184.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         4c:68:0f:49:91:ea:e8:1b:43:51:b4:9c:6f:94:06:ee:b6:36:
         ee:4f:6f:0b:e6:d7:c5:8b:63:3c:93:2e:44:66:5b:40:8f:ca:
         fc:01:93:43:37:6c:cf:27:89:19:45:33:d7:3a:96:ab:33:57:
         32:bb:53:66:83:94:4c:cb:41:ab:d6:e6:4b:31:45:d8:2a:c5:
         6d:26:d4:45:7e:d8:21:d8:39:e8:21:c8:dd:7f:4c:cb:46:e5:
         5d:ec:ba:b0:a6:76:7e:ff:99:b6:4c:7d:ef:19:59:0b:ce:dd:
         30:10:7c:5a:55:87:46:0b:49:31:9f:13:cc:c9:49:d4:55:22:
         77:ca:b0:a4:f6:57:b1:dc:b5:98:25:98:fe:a0:a2:c5:d4:88:
         36:27:36:ba:dc:8c:0c:66:a1:38:aa:33:74:4c:21:9e:33:96:
         94:2d:9e:35:12:d9:bf:ca:e1:be:b3:72:2e:0d:74:3d:e1:b4:
         41:fa:3f:f5:b6:e2:3d:ea:17:bd:8f:0b:2f:22:b7:06:0d:42:
         e6:5c:2f:a6:90:18:b4:85:13:09:16:9c:82:4d:07:3a:32:0f:
         3d:cb:0f:93:f3:20:98:45:56:f1:50:a5:e1:10:2c:16:2a:e8:
         a6:50:b5:dc:8b:98:3a:09:25:71:59:e4:29:33:8f:3c:16:7a:
         75:c4:ca:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:56 2024 by rpki-client on console-ams.rpki-client.org