Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e31322e302f32322d3232203d3e2036333036.roa
File:                     3138362e32342e31322e302f32322d3232203d3e2036333036.roa (raw, json)
Hash identifier:          QLhqFRYmftEdfUbKZTHAk95VxaqJyHLbIdcteJ7qKkU=
Subject key identifier:   60:D6:AA:07:9B:0B:47:71:5F:39:C8:F5:AE:6D:00:1B:DE:4B:68:EF
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       5F0565FBF5F2D3025C09D01F37038C9F18A311A1
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e31322e302f32322d3232203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:50 +0000
ROA not before:           Tue 05 Mar 2024 17:36:50 +0000
ROA not after:            Tue 04 Mar 2025 17:41:50 +0000
asID:                     6306
IP address blocks:        186.24.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:05:65:fb:f5:f2:d3:02:5c:09:d0:1f:37:03:8c:9f:18:a3:11:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:50 2024 GMT
            Not After : Mar  4 17:41:50 2025 GMT
        Subject: CN=60D6AA079B0B47715F39C8F5AE6D001BDE4B68EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:4d:10:50:5d:36:c3:a8:41:46:93:f6:e4:
                    30:d3:7e:27:ea:5a:f9:0a:81:4d:32:06:fb:54:47:
                    c9:10:2d:d5:29:a5:d0:bc:8e:6d:be:dd:75:a2:de:
                    17:f9:b8:06:2e:68:d8:cc:60:d6:78:f0:ed:89:3c:
                    81:4e:52:b3:90:d8:13:43:22:eb:46:f4:49:5f:c0:
                    52:36:da:5f:8c:bd:01:dd:c9:90:23:9d:5c:b1:81:
                    98:34:9b:25:1a:b3:91:93:42:06:cd:05:02:b0:04:
                    98:60:a6:c7:61:c5:71:1f:13:d8:1b:29:76:fc:7a:
                    d9:be:30:a6:67:06:c3:36:46:76:d7:ea:22:7a:62:
                    c8:69:3e:9f:6c:2e:19:a5:77:ab:88:31:b9:d7:b1:
                    27:be:0f:d8:a2:9b:66:c5:c9:13:06:b0:65:5f:42:
                    c6:31:69:b6:e4:65:57:44:dc:c6:34:7a:a7:f6:6a:
                    53:a7:7a:1c:25:62:fd:5b:72:f7:7c:b7:7c:07:91:
                    79:de:fd:2d:32:f1:4d:17:86:a3:e6:79:b4:01:a2:
                    2b:2d:42:06:26:c1:a0:79:e6:3d:11:00:52:06:39:
                    d4:9d:e2:46:14:e5:d8:96:f8:04:f4:df:e2:45:fd:
                    ad:7a:d6:c9:e4:95:d4:36:25:c9:ff:24:99:0d:69:
                    4f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D6:AA:07:9B:0B:47:71:5F:39:C8:F5:AE:6D:00:1B:DE:4B:68:EF
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e31322e302f32322d3232203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.24.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:43:65:43:c5:ba:b9:dc:f7:2f:8a:f2:e1:97:be:6f:5c:03:
         ac:66:15:24:d6:4a:26:0c:a3:22:a4:59:0a:83:2c:89:73:c0:
         34:2b:f6:95:01:95:2f:73:ef:f2:5a:56:2d:f1:9d:31:63:e1:
         d5:3b:89:8c:5f:a6:5a:ce:91:da:f0:66:a8:18:13:e6:04:be:
         87:4d:b5:91:84:04:bf:29:6c:24:f0:e9:3a:77:79:a6:6b:f8:
         ee:97:76:44:12:05:03:0b:dd:57:3a:23:85:9c:ef:db:19:e4:
         ac:fd:2e:42:1d:32:17:8e:6a:ce:e2:13:d9:fd:d5:6c:0c:d6:
         42:ee:da:f8:e1:79:50:13:83:ac:02:bd:94:48:12:16:ec:00:
         b0:3d:91:2f:fd:da:a2:7d:eb:a1:8c:42:1a:e5:81:46:75:5c:
         b5:95:ec:ae:60:e9:bb:81:6d:4b:21:0b:43:28:b0:61:28:06:
         c9:41:3d:1a:35:e2:99:5a:d4:78:c6:0a:dd:ed:8e:ad:09:14:
         28:ce:8c:17:14:ff:98:d2:e4:e1:30:c2:77:cc:bb:fc:2a:cc:
         8d:0e:a2:5d:d6:d8:e8:51:0c:da:90:30:9e:e0:4f:77:10:21:
         f2:bd:fc:1b:33:00:a6:9e:00:81:6e:85:14:97:68:b6:d8:d1:
         74:bf:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:47:41 2024 by rpki-client on console-fra.rpki-client.org