Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3133362e302f32312d3232203d3e2036333036.roa
File:                     3230302e37312e3133362e302f32312d3232203d3e2036333036.roa (raw, json)
Hash identifier:          d6xLwULD3Yv9RVtMdzN9Umlb4QtobWJWXZ0Viz77Rf4=
Subject key identifier:   91:A4:3F:BE:8F:51:37:74:A1:07:CD:F7:77:5C:AE:58:16:90:F7:44
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       4E8EEBDAFC7337E5E407845AC70E0EEDB2D5717C
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3133362e302f32312d3232203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:58 +0000
ROA not before:           Tue 05 Mar 2024 17:36:58 +0000
ROA not after:            Tue 04 Mar 2025 17:41:58 +0000
asID:                     6306
IP address blocks:        200.71.136.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8e:eb:da:fc:73:37:e5:e4:07:84:5a:c7:0e:0e:ed:b2:d5:71:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:58 2024 GMT
            Not After : Mar  4 17:41:58 2025 GMT
        Subject: CN=91A43FBE8F513774A107CDF7775CAE581690F744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6c:bc:36:a6:9e:33:03:db:d5:d3:18:3b:51:
                    6b:6e:e8:46:95:79:8b:6c:c2:ef:07:87:28:60:c0:
                    6d:dd:d9:55:a0:e6:87:97:c6:a7:6f:3a:32:16:05:
                    06:d3:68:6d:16:a3:08:ec:12:9b:a9:6e:4c:e5:ff:
                    69:ab:f0:89:12:37:ae:b4:68:c3:55:30:ca:26:b1:
                    f6:2c:d8:f6:1c:ca:d7:5b:e3:70:82:8c:1b:51:5c:
                    cb:b7:16:5e:d7:dc:8a:2e:41:f9:88:68:96:d3:27:
                    eb:07:6c:60:4e:aa:0c:ad:2f:e4:ca:69:bb:08:b1:
                    2c:4c:a5:2c:21:25:20:e5:51:9e:ff:0a:54:90:13:
                    8a:23:d4:33:81:ae:cf:70:55:eb:86:ae:4e:b6:50:
                    df:c2:cd:26:93:fb:a2:42:f1:59:82:a6:3b:1b:03:
                    c9:77:58:6f:0a:87:9f:2f:3e:9a:18:de:3a:b3:28:
                    19:51:c3:9a:e1:ed:36:4c:89:14:7c:df:d9:90:7f:
                    00:38:e5:4a:fa:2c:33:09:a2:18:d0:29:3e:25:a4:
                    4b:be:8b:9c:12:50:8a:5a:48:0e:e5:3b:b2:d6:36:
                    ff:b6:12:2a:b9:20:b3:1b:e1:74:21:e4:6b:a1:38:
                    83:0a:bd:46:81:71:a4:7a:09:05:72:12:32:44:94:
                    08:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A4:3F:BE:8F:51:37:74:A1:07:CD:F7:77:5C:AE:58:16:90:F7:44
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3133362e302f32312d3232203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:57:bd:60:1b:9e:1b:38:5b:58:33:d7:52:57:23:46:c4:af:
         08:48:51:d1:bb:79:f2:f0:99:37:a9:a7:a0:ee:d2:c0:23:dd:
         82:bd:65:11:ea:e9:1f:2d:83:99:79:ed:78:4e:44:86:de:c0:
         ec:ab:8d:08:99:7a:a3:5d:29:6f:f6:c5:68:9d:63:22:d1:5c:
         18:10:43:a8:d9:28:a8:40:0c:58:ac:ab:3a:45:44:12:e8:68:
         66:5d:00:c8:24:ba:c6:73:26:f5:19:45:3c:bd:ef:49:08:4b:
         04:f5:d3:c0:90:74:7e:3a:c4:1b:51:6c:f7:c9:06:03:01:12:
         75:d5:bd:c7:2a:7e:4b:96:65:16:e8:5a:7c:b5:36:43:dd:bc:
         58:f1:4c:b9:05:88:5d:f1:37:a1:8a:71:23:dc:78:04:da:07:
         72:17:a0:06:d9:01:6d:91:14:4a:4c:ab:72:39:a0:33:00:20:
         d2:7a:88:8f:1e:d9:0f:59:87:86:72:d9:b0:f1:51:10:a1:42:
         d2:77:59:8d:34:79:18:86:48:2e:01:9c:84:4b:46:78:9e:67:
         11:4b:9f:5d:48:76:f3:99:1b:be:61:0b:b1:c1:de:88:aa:73:
         ec:c5:3f:b6:0d:f4:32:ce:79:4a:0c:ea:19:a4:6e:fe:3a:8c:
         5b:9c:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:06:59 2024 by rpki-client on console-ams.rpki-client.org