Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e382e302f32322d3232203d3e2036333036.roa
File:                     3138362e32342e382e302f32322d3232203d3e2036333036.roa (raw, json)
Hash identifier:          NEXaSqG43EXGUk/HgQV2Hwpct4fZ6jbAHZ3e7beNlxw=
Subject key identifier:   F5:5F:99:D0:DE:A4:29:69:F5:AF:84:6E:38:78:59:2D:35:62:67:2D
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       4F6A5468149DD08A65F08F18AA2F307F3A49C2EA
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e382e302f32322d3232203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:42:00 +0000
ROA not before:           Tue 05 Mar 2024 17:37:00 +0000
ROA not after:            Tue 04 Mar 2025 17:42:00 +0000
asID:                     6306
IP address blocks:        186.24.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6a:54:68:14:9d:d0:8a:65:f0:8f:18:aa:2f:30:7f:3a:49:c2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:37:00 2024 GMT
            Not After : Mar  4 17:42:00 2025 GMT
        Subject: CN=F55F99D0DEA42969F5AF846E3878592D3562672D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:9f:a1:8a:59:59:02:17:d4:71:45:2d:86:
                    bb:05:38:80:46:c3:f2:94:2d:9b:bc:5f:05:96:f4:
                    2e:1a:0c:34:c8:0b:20:d4:b1:6d:4a:b6:a7:61:48:
                    8f:84:0d:20:8d:24:a4:4a:f4:00:40:e6:79:74:f9:
                    13:7e:ea:08:f7:78:99:d9:55:f2:1f:55:14:f9:3d:
                    54:ec:8d:b9:bd:f2:1f:ae:81:7f:7c:6e:d6:b3:c0:
                    3e:e4:6b:50:0e:c0:84:56:d2:ca:95:d5:15:03:19:
                    6a:77:bd:2e:b8:11:90:e5:4d:16:94:6d:46:26:42:
                    fd:1d:4a:29:f3:0d:3c:fe:fb:00:7a:56:20:fa:8d:
                    75:fd:f7:eb:35:bd:3e:d2:76:9f:f5:52:6b:1d:91:
                    2a:8d:5f:ae:53:b9:15:12:70:6c:99:e9:bf:25:a9:
                    6f:5c:a5:73:95:bd:63:0c:5a:3d:2b:24:0d:26:03:
                    fc:d1:77:83:cf:dd:ba:1c:69:54:2c:21:93:05:77:
                    9e:f3:87:c1:eb:b4:4a:50:35:d5:ba:02:43:7f:d9:
                    6f:da:19:c7:a8:fc:93:4e:0c:5f:f4:ce:16:38:d2:
                    f3:a7:7e:e1:7b:05:be:68:e3:71:09:25:9d:4f:3b:
                    92:07:99:b4:68:8d:13:bd:3d:02:ae:fe:54:77:ff:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5F:99:D0:DE:A4:29:69:F5:AF:84:6E:38:78:59:2D:35:62:67:2D
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e382e302f32322d3232203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.24.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:d7:6b:d0:eb:bf:f5:b1:5d:38:ad:c9:4e:b9:36:48:28:3b:
         d6:e7:9c:65:04:29:65:6a:00:49:54:92:98:18:dd:bb:ab:da:
         bf:61:ce:af:59:c7:28:ab:b3:26:06:5c:c9:3e:ad:ef:19:b3:
         02:81:96:15:72:b0:e4:7e:b4:d0:e3:8f:15:f9:7c:93:3c:76:
         63:18:f1:5c:45:92:74:e9:50:26:17:9b:34:43:4b:b3:4a:3e:
         ae:79:31:74:8f:08:06:4f:a1:28:c7:58:fc:3c:48:d0:11:9a:
         78:cb:64:db:bc:94:b8:39:a3:f7:d4:70:f2:62:a1:5f:e7:1f:
         d2:69:1f:e2:3f:d4:29:95:55:de:f4:34:2d:b4:15:40:f0:a2:
         05:4d:81:d6:92:45:d9:7f:dd:8d:e4:e9:f6:cb:9d:72:51:c1:
         0c:8b:a5:72:9b:40:62:8f:ad:b1:75:5b:68:6d:37:f3:fa:26:
         94:4d:f4:73:64:00:c6:54:d2:c0:81:a1:2d:3f:38:2c:20:41:
         ed:6f:fe:65:38:d1:74:ce:96:ed:d8:b0:c1:cd:02:f1:e5:c3:
         60:b7:82:f6:7a:54:ad:30:1c:42:52:16:76:a6:a4:96:51:09:
         d2:56:a3:df:ed:95:0c:77:ac:36:c7:5e:55:e1:86:76:23:d6:
         0d:de:2c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 20:11:07 2024 by rpki-client on console-ams.rpki-client.org