Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3132382e302f31382d3230203d3e2036333036.roa
File:                     3230302e37312e3132382e302f31382d3230203d3e2036333036.roa (raw, json)
Hash identifier:          M4gLKQoCE22KGtlb8rRKzRNmhP5Uj8X9lMpdJCVgKhw=
Subject key identifier:   1B:62:E0:F6:19:1A:DA:7C:BE:29:76:4E:12:E3:1F:24:BF:97:75:F3
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       0F06D8127E110A7541A5EB20BE935EDF9D712419
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3132382e302f31382d3230203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:58 +0000
ROA not before:           Tue 05 Mar 2024 17:36:58 +0000
ROA not after:            Tue 04 Mar 2025 17:41:58 +0000
asID:                     6306
IP address blocks:        200.71.128.0/18 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:06:d8:12:7e:11:0a:75:41:a5:eb:20:be:93:5e:df:9d:71:24:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:58 2024 GMT
            Not After : Mar  4 17:41:58 2025 GMT
        Subject: CN=1B62E0F6191ADA7CBE29764E12E31F24BF9775F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:77:e0:0e:c1:25:b7:91:da:6d:24:16:4a:
                    f5:ca:7d:a4:f0:cd:cf:2d:35:d2:ac:1e:b6:e0:70:
                    f3:b2:1c:6e:ff:0f:ce:27:c3:be:9b:59:80:79:88:
                    f3:c3:53:4e:14:4a:84:17:9d:97:34:05:bc:42:81:
                    b7:73:6b:23:b2:86:b3:24:71:09:e2:84:66:63:33:
                    71:71:5a:4b:25:88:b1:91:e2:44:a2:04:c5:9a:68:
                    76:1f:a6:9f:0d:2a:ac:e9:6e:29:ec:f3:4b:69:aa:
                    19:40:15:c4:b8:c7:7d:2a:be:b3:f3:52:97:66:de:
                    38:cf:6d:d7:77:bc:13:33:9c:f3:2c:01:00:5a:b3:
                    b3:fb:8a:41:2c:f0:d9:fb:04:8f:1f:eb:eb:82:60:
                    1d:04:93:0d:e0:8c:a6:ac:b4:3a:ad:98:52:b9:2a:
                    84:3a:3c:5c:ee:36:df:fd:13:3b:25:3c:5f:88:cc:
                    b0:5a:2e:c7:7d:82:37:c1:c6:9b:e5:2a:5e:1a:a4:
                    f8:80:ee:2e:68:f4:07:d1:a0:19:6f:39:c9:a1:3f:
                    08:60:42:1f:04:81:56:04:8c:c7:ec:63:dc:64:9e:
                    eb:37:ac:12:54:21:4a:0d:70:34:57:28:30:e4:5b:
                    9a:d5:9f:df:af:ca:3b:0b:6c:9a:ce:55:ed:cf:0a:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:62:E0:F6:19:1A:DA:7C:BE:29:76:4E:12:E3:1F:24:BF:97:75:F3
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3132382e302f31382d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9b:1d:3f:94:9c:a1:63:96:23:d1:d2:fa:93:0c:f3:cf:98:22:
         28:68:5d:60:a1:23:48:74:3e:bb:cf:f5:f4:bd:dc:27:28:90:
         ce:ec:7e:0b:f1:20:49:88:7a:8d:25:62:5b:ee:c3:b4:52:65:
         d7:e7:87:d5:bd:bf:dd:ae:7f:86:cc:8e:ff:8e:e9:5d:32:67:
         60:c8:0b:e7:0a:0c:38:da:e5:a0:8a:4a:1c:90:ad:0c:02:a8:
         4b:46:f4:ce:5b:0a:15:09:13:95:62:14:fa:fc:5e:c9:51:d0:
         e8:8b:ce:9a:ae:d0:0c:49:49:74:d0:1d:a0:61:e2:ee:39:40:
         77:8f:93:7d:8f:cf:7e:e4:bc:90:be:3e:26:e5:1c:f1:92:2b:
         60:b0:d3:64:10:9d:34:51:b7:70:a6:92:ed:2e:db:dc:09:74:
         97:af:60:61:c8:46:0c:54:60:f9:58:5b:99:9a:9c:9f:fa:5c:
         37:e8:7a:0d:11:ca:e3:a9:e8:6c:07:10:7c:e6:9c:8b:27:9a:
         4a:6a:3e:7b:a5:25:25:75:54:a7:55:3f:df:1d:89:df:84:41:
         bd:3f:96:4a:e4:72:d6:dd:73:cc:56:e2:01:36:0c:ca:5b:2b:
         dd:e7:c4:c5:88:1f:0d:93:39:29:ba:12:bf:ff:e2:3a:0b:68:
         40:de:4a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:09 2024 by rpki-client on console-fra.rpki-client.org