Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e302e302f31372d3137203d3e2036333036.roa
File:                     3138362e32342e302e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier:          LWMc7hQVvon1ZMDHK4QTXuZQasoHBb0GqFVmSQuhbTU=
Subject key identifier:   E4:88:C4:D1:A8:E1:EA:0E:69:31:EB:21:25:B7:36:F5:2A:69:2C:98
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       7286C4A8F272F911F086563E580C72183DF219F2
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e302e302f31372d3137203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:57 +0000
ROA not before:           Tue 05 Mar 2024 17:36:57 +0000
ROA not after:            Tue 04 Mar 2025 17:41:57 +0000
asID:                     6306
IP address blocks:        186.24.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:86:c4:a8:f2:72:f9:11:f0:86:56:3e:58:0c:72:18:3d:f2:19:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:57 2024 GMT
            Not After : Mar  4 17:41:57 2025 GMT
        Subject: CN=E488C4D1A8E1EA0E6931EB2125B736F52A692C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:4e:4c:49:de:47:e4:40:74:4a:ec:07:f5:
                    ac:fc:0d:be:83:c1:f0:64:e8:9e:05:1a:a0:ed:e4:
                    06:00:d1:8b:a1:34:72:33:d5:91:1d:c2:ce:4f:cd:
                    8e:66:d5:2e:87:e0:1d:e5:44:f7:43:6c:8f:0d:2c:
                    c4:c7:49:2d:f0:cc:7e:53:45:32:11:52:18:70:e6:
                    5d:2b:e6:1c:fe:54:be:35:dd:c6:6f:ba:dd:17:ff:
                    56:00:81:0a:1e:7d:70:43:e5:7f:1e:b1:2c:f3:5a:
                    11:a4:95:82:60:de:6c:f3:62:5f:66:31:12:65:16:
                    40:a6:5f:13:8b:08:ff:55:c8:60:c8:18:5a:20:e0:
                    d0:9e:08:94:2f:cb:9c:77:17:e2:37:bc:5e:d9:2f:
                    35:35:ef:83:bc:58:51:e4:1e:a5:4c:a9:55:f7:c8:
                    0f:83:5e:1d:d8:52:06:4f:7c:43:29:e7:2c:be:65:
                    a1:0a:a8:c4:a3:4c:bc:33:b8:c4:35:8a:0a:4a:d0:
                    c9:c6:6d:24:5f:3d:86:03:29:63:89:b8:35:56:2b:
                    a1:53:7c:09:35:4c:2d:b9:b2:c6:88:3e:6a:f8:2d:
                    f2:67:12:67:2f:ed:55:61:f7:86:f9:25:bc:eb:39:
                    a0:c3:36:76:a9:3e:17:a7:e0:df:32:99:cd:9e:01:
                    56:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:88:C4:D1:A8:E1:EA:0E:69:31:EB:21:25:B7:36:F5:2A:69:2C:98
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e302e302f31372d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.24.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9c:45:6f:ee:e8:35:5c:0f:f4:35:14:3f:cf:dd:80:c7:23:45:
         b9:7d:88:29:70:d5:33:4e:dd:8e:40:ce:0a:b5:83:66:04:eb:
         8f:16:ee:65:d6:62:7d:4f:6c:38:e9:d0:8d:f2:ab:d5:2e:b8:
         e8:57:50:2b:96:2b:9a:69:c8:37:89:55:fe:a7:d1:93:bb:75:
         3b:58:80:b0:83:65:ac:ed:b5:ac:ae:d2:c7:6a:cd:e1:da:59:
         00:4f:95:f5:3f:b3:9c:94:2d:c5:4e:fe:ba:06:93:cd:d2:83:
         9c:16:96:3b:ae:ce:74:50:96:ea:a3:22:b3:a1:cb:61:eb:ae:
         b9:af:aa:d3:9b:38:0b:c9:1a:84:19:82:51:47:1a:f0:b2:24:
         90:91:10:cb:93:7e:11:ee:c2:8e:6d:9b:3c:ac:98:a7:37:97:
         24:90:58:bc:73:32:0c:5a:53:33:cc:cc:14:56:1a:73:74:aa:
         61:0d:46:33:9e:26:a9:61:47:3a:e8:48:c2:df:2c:c6:36:2a:
         11:2a:29:b3:48:cc:a2:9f:25:64:08:bf:03:5d:31:04:97:82:
         d6:c1:5b:d1:3e:6c:4d:97:02:c4:1a:96:32:f6:24:da:34:4a:
         61:27:fb:9e:7d:11:54:0a:e2:38:ae:36:a3:95:99:09:3e:48:
         df:25:8b:63
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUcobEqPJy+RHwhlY+WAxyGD3yGfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3MDVBOUVENzA2RkQ0NTcyNUE3MkQ5RDgzRUYxRDlC
OUExMkU5QzAeFw0yNDAzMDUxNzM2NTdaFw0yNTAzMDQxNzQxNTdaMDMxMTAvBgNV
BAMTKEU0ODhDNEQxQThFMUVBMEU2OTMxRUIyMTI1QjczNkY1MkE2OTJDOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaE5MSd5H5EB0SuwH9az8Db6D
wfBk6J4FGqDt5AYA0YuhNHIz1ZEdws5PzY5m1S6H4B3lRPdDbI8NLMTHSS3wzH5T
RTIRUhhw5l0r5hz+VL413cZvut0X/1YAgQoefXBD5X8esSzzWhGklYJg3mzzYl9m
MRJlFkCmXxOLCP9VyGDIGFog4NCeCJQvy5x3F+I3vF7ZLzU174O8WFHkHqVMqVX3
yA+DXh3YUgZPfEMp5yy+ZaEKqMSjTLwzuMQ1igpK0MnGbSRfPYYDKWOJuDVWK6FT
fAk1TC25ssaIPmr4LfJnEmcv7VVh94b5JbzrOaDDNnapPhen4N8ymc2eAVY3AgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQU5IjE0ajh6g5pMeshJbc29SppLJgwHwYDVR0j
BBgwFoAUNXBantcG/UVyWnLZ2D7x2bmhLpwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUZBRDZFNkNEN0NFNTUxNjQzRDA0RDVERkI4MTY2OUUz
NUIzQUNERDFCOTM3NkIzN0MzMjQ1MzE5QTBFMzY0LzAvMzU3MDVBOUVENzA2RkQ0
NTcyNUE3MkQ5RDgzRUYxRDlCOUExMkU5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTcwNUE5RUQ3MDZGRDQ1NzI1
QTcyRDlEODNFRjFEOUI5QTEyRTlDLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGQUQ2RTZDRDdDRTU1MTY0M0QwNEQ1REZCODE2NjlFMzVCM0FDREQx
QjkzNzZCMzdDMzI0NTMxOUEwRTM2NC8wLzMxMzgzNjJlMzIzNDJlMzAyZTMwMmYz
MTM3MmQzMTM3MjAzZDNlMjAzNjMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7oYADANBgkqhkiG
9w0BAQsFAAOCAQEAnEVv7ug1XA/0NRQ/z92AxyNFuX2IKXDVM07djkDOCrWDZgTr
jxbuZdZifU9sOOnQjfKr1S646FdQK5YrmmnIN4lV/qfRk7t1O1iAsINlrO21rK7S
x2rN4dpZAE+V9T+znJQtxU7+ugaTzdKDnBaWO67OdFCW6qMis6HLYeuuua+q05s4
C8kahBmCUUca8LIkkJEQy5N+Ee7Cjm2bPKyYpzeXJJBYvHMyDFpTM8zMFFYac3Sq
YQ1GM54mqWFHOuhIwt8sxjYqESops0jMop8lZAi/A10xBJeC1sFb0T5sTZcCxBqW
MvYk2jRKYSf7nn0RVAriOK42o5WZCT5I3yWLYw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:56 2024 by rpki-client on console-ams.rpki-client.org