Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33352e36342e302f31382d3233203d3e2036333036.roa
File:                     3230302e33352e36342e302f31382d3233203d3e2036333036.roa (raw, json)
Hash identifier:          DRXplxnvydB7dU71+a04P70BniFa21zeFz03MDb/DAY=
Subject key identifier:   D6:A4:48:4D:FD:A7:7F:05:8E:F7:21:C7:D0:CC:4A:FA:5B:F6:68:93
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       764D916DCF95EEDDABDF1850F2B6ED1AAF1744
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33352e36342e302f31382d3233203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:57 +0000
ROA not before:           Tue 05 Mar 2024 17:36:57 +0000
ROA not after:            Tue 04 Mar 2025 17:41:57 +0000
asID:                     6306
IP address blocks:        200.35.64.0/18 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4d:91:6d:cf:95:ee:dd:ab:df:18:50:f2:b6:ed:1a:af:17:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:57 2024 GMT
            Not After : Mar  4 17:41:57 2025 GMT
        Subject: CN=D6A4484DFDA77F058EF721C7D0CC4AFA5BF66893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:38:c0:26:ef:7e:30:b7:c9:74:60:70:32:
                    13:a9:f4:b3:f5:b5:9c:ed:69:e8:36:24:5f:00:a4:
                    f7:f4:de:7e:c4:30:c5:1c:ee:49:4c:4f:dd:e7:e6:
                    1f:91:68:ca:7f:22:f9:51:c5:5c:54:30:80:37:0a:
                    a1:36:3c:e2:dc:57:2b:ba:17:50:ae:e5:a6:6a:d5:
                    bd:1e:c5:05:da:0f:55:d0:d1:30:c0:d8:7d:51:89:
                    f7:55:f1:51:ba:4a:5c:8f:0f:a6:3a:8e:e5:f8:25:
                    9b:25:a3:f6:c2:7a:b8:72:c9:e6:3c:89:4a:13:a2:
                    c2:c8:d9:c4:08:75:1c:e2:f1:ea:10:b8:e8:07:2d:
                    26:5b:5e:b6:58:19:05:b7:7f:ca:07:07:15:6e:03:
                    3a:bb:5d:78:f0:c4:81:14:49:fd:f1:f5:ed:96:e9:
                    1e:69:ee:59:65:20:90:bc:24:3d:ce:a4:c7:89:4c:
                    ac:35:26:74:c3:a9:db:3a:35:af:42:da:8b:1d:26:
                    b5:55:d0:21:99:39:85:b1:a9:2a:af:df:1e:20:ae:
                    6c:fb:67:62:f9:ca:ff:79:c2:dd:3f:f5:e4:e8:65:
                    e3:a5:84:c8:86:51:9c:7b:f5:5a:5a:fe:da:94:15:
                    3c:31:d6:d2:17:2f:89:17:fd:60:0a:cb:d7:11:9e:
                    e0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A4:48:4D:FD:A7:7F:05:8E:F7:21:C7:D0:CC:4A:FA:5B:F6:68:93
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33352e36342e302f31382d3233203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:9f:7a:a3:bb:c2:fc:62:29:38:88:be:f5:45:7c:cd:63:85:
         b6:42:f3:a3:42:ae:e1:38:4c:8d:20:c9:03:c9:e5:ee:39:df:
         b4:80:de:28:da:5a:8d:9b:d0:b5:5c:7b:8a:4a:a2:67:02:1c:
         2b:53:49:7d:36:14:9f:ba:69:95:ac:e7:d5:67:90:9c:7c:6d:
         f7:f2:ef:66:e0:18:8c:5b:4c:ed:4d:cc:0d:a9:a3:fe:25:59:
         ba:5f:9e:59:83:c8:ba:f1:08:a0:12:25:1e:be:d2:f0:87:d4:
         34:e8:ec:e7:3d:97:7c:28:c0:71:04:44:83:72:25:15:4c:ba:
         20:34:31:41:ae:e7:5d:0a:02:62:b8:15:85:d0:31:63:41:70:
         62:8f:f9:f8:78:48:4b:27:90:f5:e6:15:a9:aa:ee:2e:d4:9a:
         fe:16:86:d7:94:58:1b:11:aa:2b:7d:65:b1:0c:dc:47:a1:d9:
         97:66:8b:c8:39:26:e2:b4:c3:9c:8d:ae:05:4d:b4:9b:6f:ad:
         4f:b6:cb:fb:dc:ed:b1:a3:3d:01:26:b4:87:c9:3b:52:88:27:
         4a:8e:da:aa:e3:4f:f1:c2:ed:c5:2b:cf:6e:d9:c8:46:a1:76:
         99:f4:ac:7b:30:54:87:30:d7:12:5c:c2:cc:3a:9e:34:e9:6b:
         c7:d1:9d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:47:41 2024 by rpki-client on console-fra.rpki-client.org