Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e36342e302f32302d3230203d3e2036333036.roa
File:                     3138362e32342e36342e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          pIrYK9fo1T4g+SWrzk9320IJLR5vV63r8PeMv/pm4kM=
Subject key identifier:   BB:7A:CE:28:29:B1:FC:6E:69:55:F7:ED:C4:8A:8D:90:B6:42:79:7A
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       1BF081DA3F429C4C007D2B8300F8B1131BF15AB2
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e36342e302f32302d3230203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:33:02 +0000
ROA not before:           Tue 04 Feb 2025 18:28:02 +0000
ROA not after:            Tue 03 Feb 2026 18:33:02 +0000
asID:                     6306
IP address blocks:        186.24.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 16:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f0:81:da:3f:42:9c:4c:00:7d:2b:83:00:f8:b1:13:1b:f1:5a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:28:02 2025 GMT
            Not After : Feb  3 18:33:02 2026 GMT
        Subject: CN=BB7ACE2829B1FC6E6955F7EDC48A8D90B642797A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:a4:eb:5f:2c:84:f3:fa:3f:57:e8:c2:df:
                    07:41:20:ba:5f:8c:65:a5:81:3f:17:15:d9:5e:2d:
                    53:cc:bc:b0:bb:d5:7b:f5:c9:3e:d6:13:07:4c:83:
                    c0:8d:50:a6:99:02:92:63:bb:f6:5f:b0:74:70:be:
                    a1:df:c2:c8:ae:75:da:45:5d:78:6a:36:58:8b:d4:
                    63:78:4f:6b:e4:65:44:f3:a0:81:8d:a3:cd:59:6b:
                    ef:a2:d0:86:b4:96:bc:76:38:ef:98:ae:e0:f5:0f:
                    fe:d8:df:1a:23:dc:72:29:78:02:3a:53:64:9a:fa:
                    29:b0:98:59:f4:06:7a:e7:8d:c8:ca:2d:28:81:de:
                    a7:4a:18:bf:cf:8e:e4:1f:47:94:c4:85:12:c3:31:
                    38:dd:f2:26:f6:4d:99:cb:36:8f:0f:1e:51:88:2f:
                    eb:89:b9:da:b3:30:76:94:b7:b4:6e:55:37:10:03:
                    ea:88:9c:32:b2:00:ad:21:ac:d6:f5:ab:ec:4a:99:
                    c7:da:9e:24:0b:a9:4a:d3:dd:be:67:98:40:28:da:
                    80:30:d8:f9:45:78:37:2d:bb:43:ff:ef:cd:2a:16:
                    c6:47:c6:a5:a8:b4:bf:31:05:c9:b8:7b:36:7a:25:
                    dc:a9:50:32:e4:3b:7c:1d:86:a7:e4:71:c1:c9:24:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7A:CE:28:29:B1:FC:6E:69:55:F7:ED:C4:8A:8D:90:B6:42:79:7A
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e36342e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.24.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b9:79:7f:e2:e1:e8:f0:cf:85:5a:20:fe:ec:b4:e9:40:2a:40:
         82:e1:4f:b2:01:54:49:d4:b4:67:ea:98:41:6e:60:74:bd:c5:
         f0:32:c2:ef:10:d4:6b:3d:e5:d1:76:21:6d:e5:d7:8e:44:58:
         51:9a:b5:b4:f6:79:21:38:a5:7e:a0:cb:41:67:3e:ff:ea:fa:
         1a:7c:85:dd:87:d4:d9:ee:ee:8b:e1:4a:3c:21:5b:d6:dd:7d:
         38:d4:38:9f:25:67:c2:9d:c6:93:d7:01:e2:6c:57:ff:df:ec:
         9f:e1:b7:ba:1f:01:2a:2e:c6:b4:16:4b:79:dd:17:be:ea:79:
         43:a2:76:a9:95:21:d0:e8:cd:69:78:72:d6:47:a1:22:bb:ad:
         63:8a:de:fc:7d:e8:48:8f:f5:71:fa:31:0b:6b:ab:32:ab:1f:
         fd:42:9b:85:d3:98:30:b5:fb:61:83:32:8b:f1:93:32:04:2a:
         a0:15:ae:2b:84:06:ef:8c:8f:9a:73:7b:9a:bb:ab:f6:3a:28:
         cd:7b:61:30:59:5b:ec:ce:c7:3f:7b:0b:5b:40:76:29:d9:d2:
         18:7b:ba:b9:28:b4:a1:cc:3f:6f:21:6a:05:78:21:08:b5:00:
         75:3d:de:74:40:d5:11:83:e3:19:19:87:0f:f9:35:80:fc:d8:
         42:dd:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:40 2025 by rpki-client