Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33312e3132382e302f31392d3139203d3e2036333036.roa
File:                     3230302e33312e3132382e302f31392d3139203d3e2036333036.roa (raw, json)
Hash identifier:          mFDTqVX08L117whpnEeIcdT9MZ+ICIJKA7u0JJNZPM8=
Subject key identifier:   64:7D:C4:B5:63:82:FC:FA:84:10:83:75:89:FC:48:1C:96:EA:77:A3
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       022739340EC77F8AC25B28E7AA780DB3A81FFBD2
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33312e3132382e302f31392d3139203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:51 +0000
ROA not before:           Tue 05 Mar 2024 17:36:51 +0000
ROA not after:            Tue 04 Mar 2025 17:41:51 +0000
asID:                     6306
IP address blocks:        200.31.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:27:39:34:0e:c7:7f:8a:c2:5b:28:e7:aa:78:0d:b3:a8:1f:fb:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:51 2024 GMT
            Not After : Mar  4 17:41:51 2025 GMT
        Subject: CN=647DC4B56382FCFA8410837589FC481C96EA77A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:17:8a:a2:48:ee:5c:41:44:b4:dc:e4:a2:
                    1e:a2:a5:1c:41:f4:56:53:18:2d:6c:92:f7:80:38:
                    6f:4f:6d:4a:74:00:7e:07:c3:c3:20:54:d7:a0:5f:
                    9e:41:1a:76:75:93:ae:09:01:9d:11:a6:1c:c8:1f:
                    03:94:17:4e:c3:dd:64:cf:d9:d0:cd:d2:3e:23:52:
                    2e:65:a7:e9:bf:f5:f7:8f:24:1b:1e:de:c2:01:02:
                    fa:98:9b:f1:ce:5e:4c:84:dd:d6:1e:a2:0a:1e:c2:
                    f2:7a:29:24:93:4f:11:70:e8:c9:19:f5:27:e9:55:
                    92:16:11:70:25:23:8a:03:d5:96:c5:66:6f:4d:81:
                    70:bd:1a:17:29:56:35:64:f4:b4:ff:ec:1e:4e:a2:
                    ab:cf:5e:28:20:16:c6:04:03:a0:3a:2f:c7:ea:66:
                    06:45:3d:1d:3c:3a:19:cc:0c:bb:60:25:b5:78:e5:
                    48:ec:d2:fe:4c:e1:da:52:54:63:0a:b2:86:cc:94:
                    72:ad:81:82:db:a3:c7:c9:39:a5:7d:d6:8b:7f:bd:
                    ae:b4:72:30:3b:d0:f2:21:f3:57:9f:db:db:6f:15:
                    c4:9a:c8:77:e9:b3:cf:ab:63:63:37:c8:aa:77:42:
                    73:d5:86:ac:0d:ac:8f:34:0d:35:46:1d:df:8a:d7:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7D:C4:B5:63:82:FC:FA:84:10:83:75:89:FC:48:1C:96:EA:77:A3
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33312e3132382e302f31392d3139203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:29:74:8d:6d:92:5d:45:0c:d7:42:ce:c2:bd:d7:b2:73:63:
         71:a9:d5:0b:d3:f2:b0:6d:41:2a:8a:d4:be:17:2e:e9:2e:fb:
         82:15:b0:ad:89:e7:ec:9c:2a:53:48:a8:fd:96:d5:36:c3:32:
         a7:7e:a2:59:69:fa:95:3e:53:6a:e2:cb:7f:c1:93:ae:d4:5c:
         77:11:e2:11:6d:19:e8:8e:c9:92:a3:4e:c9:8b:8d:1d:cd:ce:
         be:67:21:da:8d:5a:e6:d2:31:f7:a2:72:b1:3a:cd:dc:81:84:
         fd:d9:c3:66:41:3d:54:ab:ae:31:6f:5f:0e:12:28:ec:bf:b9:
         4e:42:74:98:86:30:d1:85:78:01:a2:75:8b:50:8c:1c:06:90:
         28:5a:7c:3e:01:f2:95:14:73:c4:f9:29:28:76:ce:67:9a:d6:
         c9:47:f2:20:3c:29:7d:95:00:36:e5:98:d6:66:03:ec:66:89:
         4e:9d:db:06:96:47:38:31:18:38:88:30:cd:f5:30:57:b9:a5:
         67:0c:26:e7:cb:df:ff:42:90:10:3f:7a:8d:82:19:42:76:36:
         57:5b:f5:83:b2:32:9a:75:1d:82:df:f5:f9:02:16:f1:71:f6:
         9a:89:1f:bb:a8:43:d8:2f:ff:94:88:6b:0d:6e:a5:2b:9b:ee:
         40:6c:cc:9b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUAic5NA7Hf4rCWyjnqngNs6gf+9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3MDVBOUVENzA2RkQ0NTcyNUE3MkQ5RDgzRUYxRDlC
OUExMkU5QzAeFw0yNDAzMDUxNzM2NTFaFw0yNTAzMDQxNzQxNTFaMDMxMTAvBgNV
BAMTKDY0N0RDNEI1NjM4MkZDRkE4NDEwODM3NTg5RkM0ODFDOTZFQTc3QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnBeKokjuXEFEtNzkoh6ipRxB
9FZTGC1skveAOG9PbUp0AH4Hw8MgVNegX55BGnZ1k64JAZ0RphzIHwOUF07D3WTP
2dDN0j4jUi5lp+m/9fePJBse3sIBAvqYm/HOXkyE3dYeogoewvJ6KSSTTxFw6MkZ
9SfpVZIWEXAlI4oD1ZbFZm9NgXC9GhcpVjVk9LT/7B5OoqvPXiggFsYEA6A6L8fq
ZgZFPR08OhnMDLtgJbV45Ujs0v5M4dpSVGMKsobMlHKtgYLbo8fJOaV91ot/va60
cjA70PIh81ef29tvFcSayHfps8+rY2M3yKp3QnPVhqwNrI80DTVGHd+K19qhAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUZH3EtWOC/PqEEIN1ifxIHJbqd6MwHwYDVR0j
BBgwFoAUNXBantcG/UVyWnLZ2D7x2bmhLpwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUZBRDZFNkNEN0NFNTUxNjQzRDA0RDVERkI4MTY2OUUz
NUIzQUNERDFCOTM3NkIzN0MzMjQ1MzE5QTBFMzY0LzAvMzU3MDVBOUVENzA2RkQ0
NTcyNUE3MkQ5RDgzRUYxRDlCOUExMkU5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTcwNUE5RUQ3MDZGRDQ1NzI1
QTcyRDlEODNFRjFEOUI5QTEyRTlDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGQUQ2RTZDRDdDRTU1MTY0M0QwNEQ1REZCODE2NjlFMzVCM0FDREQx
QjkzNzZCMzdDMzI0NTMxOUEwRTM2NC8wLzMyMzAzMDJlMzMzMTJlMzEzMjM4MmUz
MDJmMzEzOTJkMzEzOTIwM2QzZTIwMzYzMzMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXIH4AwDQYJ
KoZIhvcNAQELBQADggEBAAEpdI1tkl1FDNdCzsK917JzY3Gp1QvT8rBtQSqK1L4X
Luku+4IVsK2J5+ycKlNIqP2W1TbDMqd+ollp+pU+U2riy3/Bk67UXHcR4hFtGeiO
yZKjTsmLjR3Nzr5nIdqNWubSMfeicrE6zdyBhP3Zw2ZBPVSrrjFvXw4SKOy/uU5C
dJiGMNGFeAGidYtQjBwGkChafD4B8pUUc8T5KSh2zmea1slH8iA8KX2VADblmNZm
A+xmiU6d2waWRzgxGDiIMM31MFe5pWcMJufL3/9CkBA/eo2CGUJ2Nldb9YOyMpp1
HYLf9fkCFvFx9pqJH7uoQ9gv/5SIaw1upSub7kBszJs=
-----END CERTIFICATE-----
Generated at Wed May 15 03:06:59 2024 by rpki-client on console-ams.rpki-client.org