Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3134342e302f32302d3232203d3e2036333036.roa
File:                     3230302e37312e3134342e302f32302d3232203d3e2036333036.roa (raw, json)
Hash identifier:          aViFWEn8XFai8+QRDqXacV4PXYo0iF4WR/5pZCrirRY=
Subject key identifier:   67:2D:82:3D:F9:4B:1A:FF:D4:7D:57:CA:84:60:41:69:8E:0D:74:CC
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       47D91095116B6E2A732FB911B8C864FD5348CED7
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3134342e302f32302d3232203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:55 +0000
ROA not before:           Tue 05 Mar 2024 17:36:55 +0000
ROA not after:            Tue 04 Mar 2025 17:41:55 +0000
asID:                     6306
IP address blocks:        200.71.144.0/20 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d9:10:95:11:6b:6e:2a:73:2f:b9:11:b8:c8:64:fd:53:48:ce:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:55 2024 GMT
            Not After : Mar  4 17:41:55 2025 GMT
        Subject: CN=672D823DF94B1AFFD47D57CA846041698E0D74CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:95:bc:be:44:e5:1e:f8:13:4d:29:00:df:
                    07:b6:d4:07:5e:75:e0:cd:31:8d:d8:1f:c7:91:54:
                    4d:78:b3:e3:46:3c:ad:64:11:05:b1:1f:d0:94:24:
                    cd:bc:33:30:c2:66:c5:96:77:a9:3b:d6:97:44:b5:
                    2e:b0:3c:9c:66:5e:9f:be:94:1f:ac:98:24:79:54:
                    18:cb:e0:77:69:2f:74:32:f2:03:15:a0:e4:22:de:
                    ad:88:94:43:b6:e0:39:fb:2a:fe:df:47:59:30:b1:
                    d7:be:ce:5b:d1:51:87:23:2f:51:b8:f7:8f:5f:e1:
                    3e:ba:c8:ae:b4:66:de:22:47:7f:6c:68:71:20:55:
                    12:2c:cc:9b:f7:04:8c:3a:52:32:10:4d:ad:d2:fb:
                    a2:52:87:ad:ef:17:5a:40:ea:d8:16:b9:e4:28:96:
                    2d:70:0e:40:b7:ce:aa:a0:3f:c3:0b:05:6e:53:30:
                    ff:16:59:64:b7:9c:a6:f4:07:09:8a:1c:14:db:7f:
                    73:07:b8:08:f6:90:2e:4f:b5:05:2d:55:fd:c7:9c:
                    46:97:de:33:c5:cc:76:77:88:11:dc:40:d6:a7:5c:
                    f1:a0:f1:9a:4e:52:3d:ab:eb:3c:b5:b0:3e:92:1b:
                    62:32:53:e0:88:b3:d4:64:e8:7f:4c:44:ec:93:51:
                    a0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2D:82:3D:F9:4B:1A:FF:D4:7D:57:CA:84:60:41:69:8E:0D:74:CC
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3134342e302f32302d3232203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:b0:83:36:37:50:e2:3f:28:a3:e8:2f:85:fc:be:ad:d3:cc:
         f3:fb:da:94:b2:11:23:1a:15:6c:1b:b2:83:8f:97:f8:bb:65:
         2f:bf:8d:96:f0:13:b8:75:b0:77:6a:54:41:15:54:eb:ae:d1:
         19:8e:8f:ea:c2:73:ac:c7:24:34:84:ea:39:fd:c0:54:8a:7f:
         62:ba:e5:f0:ec:60:b5:5f:b8:7b:50:09:e7:61:2d:31:78:02:
         1b:57:e6:ce:9f:bd:cc:f0:10:60:75:15:b6:a5:3d:76:1d:0c:
         ba:7e:6b:17:f0:9d:6d:6a:5a:e8:3f:7c:c3:38:f6:c4:b9:9c:
         8a:64:56:50:a7:bd:ca:64:6f:98:cb:32:7d:3e:16:69:8b:f7:
         78:5c:5e:cf:40:d3:fc:00:8e:f1:44:a4:1b:14:85:ad:23:82:
         9f:67:fe:12:d1:9f:25:ba:26:b5:73:8d:08:7e:f7:44:ad:32:
         70:c7:b3:3f:7d:1d:3f:12:19:27:d0:ba:84:0a:e2:6e:bf:80:
         d2:57:cf:f5:fd:e3:07:28:6e:d7:b8:3a:35:4c:d2:e4:90:02:
         40:02:89:a4:d7:26:09:75:32:c8:ff:73:a6:92:ff:af:35:9d:
         b8:17:09:2f:35:22:4c:a2:ca:6f:36:49:66:5d:b6:b1:51:ec:
         e7:fa:97:91
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUR9kQlRFrbipzL7kRuMhk/VNIztcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3MDVBOUVENzA2RkQ0NTcyNUE3MkQ5RDgzRUYxRDlC
OUExMkU5QzAeFw0yNDAzMDUxNzM2NTVaFw0yNTAzMDQxNzQxNTVaMDMxMTAvBgNV
BAMTKDY3MkQ4MjNERjk0QjFBRkZENDdENTdDQTg0NjA0MTY5OEUwRDc0Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxZW8vkTlHvgTTSkA3we21Ade
deDNMY3YH8eRVE14s+NGPK1kEQWxH9CUJM28MzDCZsWWd6k71pdEtS6wPJxmXp++
lB+smCR5VBjL4HdpL3Qy8gMVoOQi3q2IlEO24Dn7Kv7fR1kwsde+zlvRUYcjL1G4
949f4T66yK60Zt4iR39saHEgVRIszJv3BIw6UjIQTa3S+6JSh63vF1pA6tgWueQo
li1wDkC3zqqgP8MLBW5TMP8WWWS3nKb0BwmKHBTbf3MHuAj2kC5PtQUtVf3HnEaX
3jPFzHZ3iBHcQNanXPGg8ZpOUj2r6zy1sD6SG2IyU+CIs9Rk6H9MROyTUaAjAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUZy2CPflLGv/UfVfKhGBBaY4NdMwwHwYDVR0j
BBgwFoAUNXBantcG/UVyWnLZ2D7x2bmhLpwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUZBRDZFNkNEN0NFNTUxNjQzRDA0RDVERkI4MTY2OUUz
NUIzQUNERDFCOTM3NkIzN0MzMjQ1MzE5QTBFMzY0LzAvMzU3MDVBOUVENzA2RkQ0
NTcyNUE3MkQ5RDgzRUYxRDlCOUExMkU5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTcwNUE5RUQ3MDZGRDQ1NzI1
QTcyRDlEODNFRjFEOUI5QTEyRTlDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGQUQ2RTZDRDdDRTU1MTY0M0QwNEQ1REZCODE2NjlFMzVCM0FDREQx
QjkzNzZCMzdDMzI0NTMxOUEwRTM2NC8wLzMyMzAzMDJlMzczMTJlMzEzNDM0MmUz
MDJmMzIzMDJkMzIzMjIwM2QzZTIwMzYzMzMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATIR5AwDQYJ
KoZIhvcNAQELBQADggEBAAuwgzY3UOI/KKPoL4X8vq3TzPP72pSyESMaFWwbsoOP
l/i7ZS+/jZbwE7h1sHdqVEEVVOuu0RmOj+rCc6zHJDSE6jn9wFSKf2K65fDsYLVf
uHtQCedhLTF4AhtX5s6fvczwEGB1FbalPXYdDLp+axfwnW1qWug/fMM49sS5nIpk
VlCnvcpkb5jLMn0+FmmL93hcXs9A0/wAjvFEpBsUha0jgp9n/hLRnyW6JrVzjQh+
90StMnDHsz99HT8SGSfQuoQK4m6/gNJXz/X94wcobte4OjVM0uSQAkACiaTXJgl1
Msj/c6aS/681nbgXCS81Ikyiym82SWZdtrFR7Of6l5E=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:56 2024 by rpki-client on console-ams.rpki-client.org