Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33312e3132382e302f32302d3230203d3e2036333036.roa
File:                     3230302e33312e3132382e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          F48ibE1NNoz/pHiu2x9tq3lAH0+cDc2DmvV4s8KfBb8=
Subject key identifier:   7E:56:CC:EF:10:E7:61:70:18:31:26:57:A8:8B:D7:AB:FF:A3:97:13
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       337164CBAB8C47EC086D599AE66CFA418A3473EC
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33312e3132382e302f32302d3230203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:42:02 +0000
ROA not before:           Tue 05 Mar 2024 17:37:02 +0000
ROA not after:            Tue 04 Mar 2025 17:42:02 +0000
asID:                     6306
IP address blocks:        200.31.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:71:64:cb:ab:8c:47:ec:08:6d:59:9a:e6:6c:fa:41:8a:34:73:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:37:02 2024 GMT
            Not After : Mar  4 17:42:02 2025 GMT
        Subject: CN=7E56CCEF10E7617018312657A88BD7ABFFA39713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:6e:5b:94:85:03:8b:b5:08:63:4d:a6:fb:
                    f5:c7:49:3d:f6:f5:d8:ec:e4:aa:85:f9:d4:3a:ef:
                    66:45:82:fe:3d:8d:7d:cd:20:fc:eb:ad:2a:be:be:
                    09:7b:a4:ad:70:45:72:0a:a8:e3:4a:51:cd:5b:f1:
                    df:d3:48:4f:96:08:a9:4c:ed:32:60:65:90:3b:fc:
                    22:73:47:8e:0e:79:f6:36:85:5b:17:25:d4:be:6b:
                    6b:07:f1:67:5e:24:7c:ce:78:b1:ad:de:f6:33:58:
                    e9:3d:2d:4a:2a:ea:c9:3c:ef:66:08:d8:c6:29:4d:
                    eb:98:3d:41:0c:49:86:da:58:e4:a7:ca:b5:99:c3:
                    fc:37:be:88:f8:9e:1a:3e:36:91:b5:42:20:e5:7c:
                    31:3d:62:0c:a2:67:fc:a7:b4:a0:dc:36:16:76:a9:
                    99:b8:51:18:13:b8:c8:d1:17:6c:87:f7:36:60:13:
                    a9:9c:15:44:08:84:59:3d:4d:67:59:01:8c:3a:9c:
                    f1:26:c1:04:7d:38:e0:43:8a:fb:3a:52:2e:f9:56:
                    34:c6:b6:fb:43:b5:6e:0f:77:34:27:69:23:b9:f9:
                    24:e9:10:e2:fc:53:56:7a:35:02:d3:80:4f:c9:15:
                    6c:1b:52:65:93:b6:e5:09:64:16:13:04:bf:0d:9e:
                    9c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:56:CC:EF:10:E7:61:70:18:31:26:57:A8:8B:D7:AB:FF:A3:97:13
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33312e3132382e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:1c:58:7d:39:cb:45:28:33:16:2b:f2:4d:d0:c7:b7:e5:3d:
         04:a2:72:e1:6f:5b:f1:5c:fc:34:0c:43:ba:5f:20:d1:17:c3:
         ba:8e:c9:3d:e0:85:b7:bd:23:bd:8a:07:0d:ae:39:be:d1:1e:
         51:d4:ec:b0:14:ab:76:4b:d3:39:11:47:75:1a:fa:23:7a:c4:
         ef:33:e4:5c:b2:78:7b:97:1a:7a:6d:0c:e9:ef:b2:58:fe:eb:
         e2:ea:a0:b7:56:39:1e:1e:c7:f8:09:5c:dc:37:31:9d:29:e0:
         81:05:cf:d0:30:7f:52:74:cb:ed:81:ff:02:81:66:b9:01:8b:
         44:36:83:3c:35:70:41:82:f1:b8:50:06:76:56:f2:32:48:3e:
         3a:7f:13:e3:10:a3:07:5b:59:80:7f:25:03:68:0e:96:0b:d1:
         f5:0d:ca:d0:46:86:20:05:a0:cd:df:ae:0c:5b:3c:2a:40:ae:
         df:29:c3:53:44:1d:f4:e5:13:64:a2:dd:a9:ad:61:10:8b:d9:
         eb:3d:44:82:59:af:01:9f:6d:88:d1:4a:7a:41:e8:09:b8:4e:
         6a:8f:af:e4:30:62:38:33:ae:29:10:45:b1:5c:1c:3f:81:3e:
         96:e8:88:f8:d0:26:17:25:f0:d3:d6:8f:dc:b5:a3:d4:85:a4:
         d5:74:29:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:47:41 2024 by rpki-client on console-fra.rpki-client.org