Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e36342e302f32322d3232203d3e2036333036.roa
File:                     3138362e32342e36342e302f32322d3232203d3e2036333036.roa (raw, json)
Hash identifier:          DIEBoS5K+sH8EsROicHosqNJv9mHKFPJk7APZUfajwU=
Subject key identifier:   93:08:B9:EC:7C:9C:A4:4A:60:AA:D0:B2:8D:AA:4C:33:AF:CA:7A:04
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       6D849F3838B3609A48D0906AFC48DE6FC60BCA64
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e36342e302f32322d3232203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:33:07 +0000
ROA not before:           Tue 04 Feb 2025 18:28:07 +0000
ROA not after:            Tue 03 Feb 2026 18:33:07 +0000
asID:                     6306
IP address blocks:        186.24.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:84:9f:38:38:b3:60:9a:48:d0:90:6a:fc:48:de:6f:c6:0b:ca:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:28:07 2025 GMT
            Not After : Feb  3 18:33:07 2026 GMT
        Subject: CN=9308B9EC7C9CA44A60AAD0B28DAA4C33AFCA7A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:61:30:6f:73:bf:e9:c9:ad:4e:83:20:5f:
                    2f:7e:f2:47:43:65:de:ea:92:ca:70:7f:b5:0d:a3:
                    96:78:35:00:d0:e9:26:2e:8b:8f:9c:45:7b:78:97:
                    e6:29:5b:81:51:07:65:e7:62:a2:59:4c:a7:50:fd:
                    70:96:3a:bd:ec:5d:45:2a:a3:27:c4:6b:81:8d:1c:
                    e5:d5:5f:e0:66:f8:b7:c1:6a:d9:ea:de:f6:e3:b2:
                    2c:4c:25:d2:ad:c7:f9:02:63:6e:2d:b9:ba:94:52:
                    ce:31:6e:36:28:aa:d3:b8:92:cc:9a:28:a3:28:bc:
                    e0:0e:a6:c8:c6:25:36:cd:71:3b:80:8d:42:41:f7:
                    68:cf:c1:56:5b:79:d6:8f:ea:69:ee:4d:74:81:74:
                    b6:e7:96:78:77:d7:12:2b:cc:30:c9:48:8b:2a:51:
                    06:8f:8e:a8:9d:ae:e6:62:3b:4f:c5:71:8d:5b:9e:
                    3b:3a:7f:1d:8b:72:d2:65:02:0f:44:8d:17:e4:e8:
                    2d:3a:81:9e:cb:cb:82:b9:3c:88:7d:d3:25:cf:0f:
                    92:bd:28:45:b8:d4:d3:da:b1:11:40:b4:ed:9c:16:
                    2b:53:25:c4:aa:45:9d:63:a5:27:cb:c1:f7:b0:7f:
                    b6:7e:c0:1a:0e:fd:43:e5:66:32:8c:5c:74:ab:ba:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:08:B9:EC:7C:9C:A4:4A:60:AA:D0:B2:8D:AA:4C:33:AF:CA:7A:04
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e36342e302f32322d3232203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.24.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:7b:ae:6d:13:5e:3a:a2:37:cf:cb:88:01:f3:5f:35:82:
         f0:f1:c7:58:25:97:7a:60:fc:c7:1e:8d:92:c6:1c:19:d3:e0:
         60:ee:d7:ba:4d:f3:5c:b2:50:61:ac:41:1d:b6:f9:54:18:b3:
         c1:10:74:94:8b:69:7f:03:92:00:1a:ed:31:cf:ba:26:f1:d4:
         19:ae:83:4b:a2:ec:20:65:7c:d5:0d:fa:8e:14:20:30:cd:20:
         df:8c:38:ba:e3:f8:a1:17:eb:11:3d:f2:af:de:00:cc:5a:59:
         90:af:16:a6:ea:e9:1d:c1:4c:95:ed:50:a8:53:18:f5:eb:c3:
         aa:f0:e7:9f:79:5d:70:51:81:cc:a0:6c:85:91:04:6d:b7:17:
         f4:b1:4b:c7:77:90:a0:0a:c1:49:09:f3:8c:18:b5:0d:89:6f:
         df:7a:c6:ff:c2:9c:22:b2:5e:68:73:65:c1:e6:d7:e6:ea:d1:
         c6:0b:66:3a:0f:72:53:70:57:e2:3d:59:d3:e6:ce:5f:16:1e:
         35:aa:2b:08:e6:bb:d2:09:b0:03:9d:8c:f3:83:a7:c9:b7:21:
         77:16:a7:59:5c:f1:93:d0:84:d5:40:13:61:47:bc:27:83:e9:
         b7:dc:da:a8:05:fb:ed:01:54:0a:97:d1:a3:71:8e:e0:48:4b:
         4d:b1:f6:32
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUbYSfODizYJpI0JBq/Ejeb8YLymQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3MDVBOUVENzA2RkQ0NTcyNUE3MkQ5RDgzRUYxRDlC
OUExMkU5QzAeFw0yNTAyMDQxODI4MDdaFw0yNjAyMDMxODMzMDdaMDMxMTAvBgNV
BAMTKDkzMDhCOUVDN0M5Q0E0NEE2MEFBRDBCMjhEQUE0QzMzQUZDQTdBMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8GEwb3O/6cmtToMgXy9+8kdD
Zd7qkspwf7UNo5Z4NQDQ6SYui4+cRXt4l+YpW4FRB2XnYqJZTKdQ/XCWOr3sXUUq
oyfEa4GNHOXVX+Bm+LfBatnq3vbjsixMJdKtx/kCY24tubqUUs4xbjYoqtO4ksya
KKMovOAOpsjGJTbNcTuAjUJB92jPwVZbedaP6mnuTXSBdLbnlnh31xIrzDDJSIsq
UQaPjqidruZiO0/FcY1bnjs6fx2LctJlAg9EjRfk6C06gZ7Ly4K5PIh90yXPD5K9
KEW41NPasRFAtO2cFitTJcSqRZ1jpSfLwfewf7Z+wBoO/UPlZjKMXHSruqZhAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUkwi57HycpEpgqtCyjapMM6/KegQwHwYDVR0j
BBgwFoAUNXBantcG/UVyWnLZ2D7x2bmhLpwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUZBRDZFNkNEN0NFNTUxNjQzRDA0RDVERkI4MTY2OUUz
NUIzQUNERDFCOTM3NkIzN0MzMjQ1MzE5QTBFMzY0LzAvMzU3MDVBOUVENzA2RkQ0
NTcyNUE3MkQ5RDgzRUYxRDlCOUExMkU5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTcwNUE5RUQ3MDZGRDQ1NzI1
QTcyRDlEODNFRjFEOUI5QTEyRTlDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGQUQ2RTZDRDdDRTU1MTY0M0QwNEQ1REZCODE2NjlFMzVCM0FDREQx
QjkzNzZCMzdDMzI0NTMxOUEwRTM2NC8wLzMxMzgzNjJlMzIzNDJlMzYzNDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDM2MzMzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuhhAMA0GCSqG
SIb3DQEBCwUAA4IBAQBg0nuubRNeOqI3z8uIAfNfNYLw8cdYJZd6YPzHHo2SxhwZ
0+Bg7te6TfNcslBhrEEdtvlUGLPBEHSUi2l/A5IAGu0xz7om8dQZroNLouwgZXzV
DfqOFCAwzSDfjDi64/ihF+sRPfKv3gDMWlmQrxam6ukdwUyV7VCoUxj168Oq8Oef
eV1wUYHMoGyFkQRttxf0sUvHd5CgCsFJCfOMGLUNiW/fesb/wpwisl5oc2XB5tfm
6tHGC2Y6D3JTcFfiPVnT5s5fFh41qisI5rvSCbADnYzzg6fJtyF3FqdZXPGT0ITV
QBNhR7wng+m33NqoBfvtAVQKl9GjcY7gSEtNsfYy
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:28 2025 by rpki-client