Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e36342e302f32302d3230203d3e2036333036.roa
File:                     3138362e32342e36342e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          5fGjRFX+b6r/nZ8oMUEakmA2cgviu0496f/7CA3I4Fo=
Subject key identifier:   9C:59:FF:23:1C:C0:5A:F6:DB:96:CF:B2:5E:73:AA:7A:84:5F:70:F6
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       3CC1CC75A6C97DE8A351696461A63511273CD6C6
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e36342e302f32302d3230203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:55 +0000
ROA not before:           Tue 05 Mar 2024 17:36:55 +0000
ROA not after:            Tue 04 Mar 2025 17:41:55 +0000
asID:                     6306
IP address blocks:        186.24.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c1:cc:75:a6:c9:7d:e8:a3:51:69:64:61:a6:35:11:27:3c:d6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:55 2024 GMT
            Not After : Mar  4 17:41:55 2025 GMT
        Subject: CN=9C59FF231CC05AF6DB96CFB25E73AA7A845F70F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:26:09:24:2c:ca:76:d0:77:96:a7:31:57:
                    fb:0e:22:50:76:5b:27:69:b2:60:4b:ea:e0:4e:12:
                    c0:3f:90:fc:35:13:37:57:fa:25:62:db:60:ba:df:
                    5b:70:e0:a1:0e:08:84:f8:32:41:47:18:cc:cb:08:
                    98:f9:2f:e4:5c:d5:d4:16:e5:63:5e:64:e1:8c:7c:
                    d8:60:19:8f:62:4c:a7:40:84:42:be:1b:6c:4b:db:
                    71:ba:11:dd:83:da:18:75:10:77:29:2c:9d:94:6b:
                    8d:77:a0:cf:51:7a:26:24:a0:79:42:51:23:ec:f6:
                    08:09:c9:6f:90:64:51:03:95:cc:84:66:01:7b:bd:
                    77:a2:9a:5c:f1:54:7e:6e:38:c7:fe:c2:b7:2d:47:
                    79:ec:48:fb:09:14:0c:02:d5:c9:d6:00:a6:a5:30:
                    c2:22:f9:9f:88:fb:63:cb:dd:0b:a3:19:23:a6:9d:
                    21:ef:01:aa:0d:d5:75:84:4f:4f:cc:68:eb:cd:c9:
                    cc:70:94:cd:13:2e:76:65:7e:43:76:4f:83:fe:f3:
                    2d:95:d2:09:92:c0:5d:35:8e:c0:ad:05:39:93:79:
                    cf:9a:b1:b6:6d:67:01:1a:42:e9:52:e4:f8:d2:ee:
                    71:76:ca:50:61:6a:e2:32:b1:93:b1:b8:a7:66:2a:
                    d9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:59:FF:23:1C:C0:5A:F6:DB:96:CF:B2:5E:73:AA:7A:84:5F:70:F6
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e36342e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.24.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:bf:d7:00:58:64:4b:ab:c2:1d:ad:35:92:df:b9:7f:af:37:
         31:61:3a:ce:88:12:7d:52:3c:14:40:2f:5c:a0:d9:7b:eb:d6:
         7c:b4:b9:32:6b:5e:24:66:9d:32:ba:05:3a:93:16:2e:62:b0:
         94:83:93:2c:71:7a:7c:da:1f:6a:f6:7c:d3:f6:09:23:e6:cf:
         87:13:70:5d:c0:42:5d:1d:e5:07:5c:e8:c5:a4:b5:fe:60:af:
         b6:37:ce:0e:73:a2:ec:34:08:21:5b:a4:12:4b:76:52:80:c8:
         3f:1d:ef:41:f5:05:46:33:4a:59:bb:a1:bb:e9:25:f7:fa:2b:
         a2:c3:96:fd:bf:7e:04:5d:7b:65:d3:51:3e:cf:44:28:85:81:
         0b:ab:b1:fa:fe:f0:53:56:bf:b4:ca:c3:0e:07:3f:48:21:3f:
         47:50:81:d3:db:f0:2b:1f:5f:92:f5:ce:5e:c3:e3:6a:c4:31:
         ca:c7:9e:e8:5b:ae:22:72:ca:59:18:fb:74:b3:6f:ce:d7:16:
         8a:84:36:3d:a9:8e:18:b5:49:d8:e4:b2:cb:15:9e:d0:d0:a8:
         9c:34:25:16:f6:4d:59:11:47:58:56:f1:48:86:7f:d6:9e:5d:
         90:03:c3:d4:e0:be:87:85:2d:fc:f2:f0:7c:e6:d0:5c:bc:0e:
         0a:d5:ea:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 20:11:07 2024 by rpki-client on console-ams.rpki-client.org