Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e33322e302f32322d3232203d3e2036333036.roa
File:                     3138362e32342e33322e302f32322d3232203d3e2036333036.roa (raw, json)
Hash identifier:          iEzgnPFy/5cycEq6VIfqBopVJnDW/t1RegeurCsU7nU=
Subject key identifier:   0E:C6:F3:DA:33:93:1F:A8:D4:67:E0:4E:E7:67:76:CB:2B:A3:00:54
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       64EC21BC291C4949F315E01BD48AC7D7763EEAFE
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e33322e302f32322d3232203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:32:59 +0000
ROA not before:           Tue 04 Feb 2025 18:27:59 +0000
ROA not after:            Tue 03 Feb 2026 18:32:59 +0000
asID:                     6306
IP address blocks:        186.24.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ec:21:bc:29:1c:49:49:f3:15:e0:1b:d4:8a:c7:d7:76:3e:ea:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:27:59 2025 GMT
            Not After : Feb  3 18:32:59 2026 GMT
        Subject: CN=0EC6F3DA33931FA8D467E04EE76776CB2BA30054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:43:04:8d:6a:fc:39:49:b1:15:6c:6b:49:
                    12:98:cb:5b:c6:c0:28:3f:f6:39:0c:4e:8d:6a:bd:
                    05:2f:ea:d4:5e:cc:e2:13:02:8b:74:16:5e:8b:fa:
                    22:45:c6:2d:7f:dd:54:20:fb:ce:ef:0d:41:66:25:
                    28:35:09:04:60:5a:af:40:09:5d:04:87:af:bb:91:
                    15:4d:c5:bb:f4:bc:9b:f3:b3:9a:27:a1:92:f1:d6:
                    5a:7c:1b:09:e1:e0:cd:d4:c3:8d:52:a8:9a:21:9d:
                    dd:92:6a:13:10:ad:48:e7:2a:93:9e:9e:10:d2:37:
                    e8:c9:e0:ff:a5:57:8d:ca:1d:a4:2a:d8:2f:83:13:
                    60:e2:2c:93:6c:7b:49:11:64:86:29:c1:a0:0d:d3:
                    7d:88:38:0a:47:e7:30:f7:73:1a:b7:57:6e:0c:64:
                    0a:26:fd:d1:d8:1d:10:73:0d:19:54:fe:4d:10:dd:
                    72:61:9f:79:97:c5:c2:4d:ff:33:c1:c9:a0:e6:44:
                    c6:65:1c:87:eb:23:9c:a2:e4:bc:6f:31:ec:9c:cc:
                    59:95:40:61:a7:c1:e4:6c:ce:4e:ec:cf:0c:40:8c:
                    07:1b:c4:72:b0:b4:65:70:eb:fc:ae:e3:f5:d1:db:
                    97:0a:b3:e5:e3:e3:00:75:00:9c:bf:f6:e0:d7:d1:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C6:F3:DA:33:93:1F:A8:D4:67:E0:4E:E7:67:76:CB:2B:A3:00:54
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e33322e302f32322d3232203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.24.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:33:b8:9b:5d:ce:3f:5c:43:f1:1d:59:8f:b3:c1:de:f8:7e:
         2a:9b:f7:e7:8a:1b:17:7d:d1:16:3b:d0:e8:8d:c9:26:16:9e:
         4c:dc:2e:d1:09:1d:e6:53:09:4c:b1:c4:cf:f5:60:c0:c8:3b:
         14:cf:a8:77:79:99:27:e5:92:22:37:22:fd:75:47:89:a9:84:
         1f:b1:67:50:c1:e3:e4:7a:a1:44:e0:a3:b0:1e:ee:64:2b:a0:
         f4:52:e4:7e:2e:7a:6c:2b:11:d9:b4:e3:b7:30:c8:03:52:6c:
         6a:fc:e7:39:7b:e7:a1:60:f3:ec:da:e6:bd:53:08:fe:f4:59:
         ee:df:61:15:4e:80:77:5b:d2:d3:32:47:9d:2b:07:83:51:3c:
         46:21:10:bf:15:d3:7f:52:98:75:36:e5:9b:4a:6a:19:fc:55:
         b2:be:38:19:80:02:22:2f:48:9a:05:38:ce:10:52:66:d4:0a:
         08:25:af:5b:5a:6d:bc:5b:07:e6:e1:cb:5c:0d:82:9f:53:12:
         6e:cd:86:62:a6:d8:db:7e:27:e5:c5:c9:37:a2:e3:a0:7c:24:
         61:b4:8e:59:cd:4e:37:af:7d:9f:9c:77:0b:e0:b0:d0:1c:86:
         eb:1d:8f:99:85:10:94:21:da:ed:bc:9f:12:2f:38:5e:72:fb:
         10:29:36:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:00 2025 by rpki-client