Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32352e302e302f31362d3137203d3e2036333036.roa
File:                     3138362e32352e302e302f31362d3137203d3e2036333036.roa (raw, json)
Hash identifier:          7cjZFJlltFY7HjnW1+/mZO2Fpa55khjPptpfcZx7Q8E=
Subject key identifier:   B0:3F:76:9E:47:62:89:A3:C7:3F:47:8E:BA:CF:65:28:2D:99:75:47
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       0D3ECA194F6355D4A33076B351C9FED3C5D8C29E
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32352e302e302f31362d3137203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:54 +0000
ROA not before:           Tue 05 Mar 2024 17:36:54 +0000
ROA not after:            Tue 04 Mar 2025 17:41:54 +0000
asID:                     6306
IP address blocks:        186.25.0.0/16 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3e:ca:19:4f:63:55:d4:a3:30:76:b3:51:c9:fe:d3:c5:d8:c2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:54 2024 GMT
            Not After : Mar  4 17:41:54 2025 GMT
        Subject: CN=B03F769E476289A3C73F478EBACF65282D997547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:fd:be:0f:ba:e2:47:b9:09:e5:ab:d0:b2:
                    52:be:43:ee:39:51:88:ed:c9:4a:65:3e:70:18:0d:
                    cb:7f:33:0d:e4:ad:07:36:c1:b7:28:88:08:d1:2c:
                    02:95:aa:b9:b6:73:57:15:43:1e:95:be:ef:54:31:
                    83:d2:49:8a:b6:7a:ea:34:7e:d9:a9:68:03:c9:c6:
                    f5:b4:e2:72:f0:6a:e6:7c:ad:46:0d:e6:ab:36:23:
                    72:18:ab:42:50:84:dc:bb:89:77:6a:46:af:86:25:
                    05:a0:03:d6:b6:0a:4a:5e:c8:fd:f8:9b:ed:12:da:
                    00:d6:78:43:2c:43:da:9b:05:e9:b4:fc:41:cc:b6:
                    47:06:15:f2:15:05:3e:1b:67:05:48:90:13:9d:c9:
                    ec:fd:b7:56:a6:24:aa:24:e1:e4:18:e2:71:be:42:
                    b5:7c:10:9f:f1:61:4a:aa:8d:41:44:b3:51:52:54:
                    3d:32:37:08:5a:ec:c1:dc:85:7e:f4:22:63:50:63:
                    db:93:9e:e6:af:16:6f:6f:69:e7:06:f5:78:b8:b8:
                    46:b8:fc:23:2f:99:77:bc:aa:0c:22:db:7b:d2:a5:
                    b3:d5:e5:1c:3d:f8:89:c5:ae:82:d0:49:ea:9e:94:
                    10:9c:2f:b2:20:d5:ae:a7:70:e4:1a:54:fe:f2:f6:
                    dc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3F:76:9E:47:62:89:A3:C7:3F:47:8E:BA:CF:65:28:2D:99:75:47
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32352e302e302f31362d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.25.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b8:e3:21:42:7f:3a:a7:77:33:c7:cc:30:6a:82:5f:79:92:72:
         34:94:6a:d6:b0:ee:54:67:a8:eb:87:3c:12:27:12:7e:f5:9e:
         0a:59:ce:89:27:68:9a:de:9d:ca:c4:5d:dd:32:16:a7:cc:58:
         f3:73:36:aa:02:34:9b:cf:11:0c:e2:94:e6:81:14:39:0e:f5:
         26:63:e7:e5:cf:83:f9:b1:7e:e6:54:3f:72:38:03:59:35:80:
         53:98:e9:3e:69:1a:6d:d8:4e:64:ec:9e:57:af:f1:84:91:b7:
         d1:73:b4:15:79:89:84:5f:b7:5f:cd:c5:a0:96:92:12:dc:3c:
         85:83:ed:43:8d:8b:ba:1c:b6:1f:2b:99:b9:80:2f:7f:16:70:
         b2:b8:80:5f:99:60:b9:ea:8e:b9:54:02:57:e3:f0:66:f9:8b:
         7c:c4:85:4f:38:16:4b:2f:01:e8:db:9d:f0:84:38:f3:0d:9f:
         87:07:88:a7:c7:7e:11:2e:47:3f:64:95:7a:3b:e8:51:65:e4:
         87:b5:e9:4c:28:a7:40:49:af:37:1c:f6:fc:71:3c:6b:e0:b4:
         9d:2d:d5:f6:20:28:46:18:81:06:0b:bd:95:11:9b:58:9a:ab:
         67:ef:d1:31:d3:21:29:35:ce:c8:2a:58:0b:82:7e:4e:5e:ce:
         29:14:38:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:46 2024 by rpki-client on console-fra.rpki-client.org