Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3136302e302f32322d3232203d3e2036333036.roa
File:                     3230302e37312e3136302e302f32322d3232203d3e2036333036.roa (raw, json)
Hash identifier:          /aGeuXF8//6mTxTkSPQwrrzhDe34yItwrGLPaQ6cYpM=
Subject key identifier:   70:9C:1B:5A:6F:78:3E:DD:C8:08:C6:CB:AF:4F:58:CF:45:0D:E7:6D
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       2AA73EEC34B2337E6E3B3FFBA535B965D02B4EA3
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3136302e302f32322d3232203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:42:00 +0000
ROA not before:           Tue 05 Mar 2024 17:37:00 +0000
ROA not after:            Tue 04 Mar 2025 17:42:00 +0000
asID:                     6306
IP address blocks:        200.71.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a7:3e:ec:34:b2:33:7e:6e:3b:3f:fb:a5:35:b9:65:d0:2b:4e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:37:00 2024 GMT
            Not After : Mar  4 17:42:00 2025 GMT
        Subject: CN=709C1B5A6F783EDDC808C6CBAF4F58CF450DE76D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:82:ad:12:24:97:65:69:18:0e:24:55:30:
                    3d:ce:60:99:06:99:48:4c:be:f7:50:bc:31:eb:e4:
                    bb:8d:11:11:bc:d1:c9:cd:29:c2:4f:12:d8:1a:73:
                    05:23:71:13:78:ba:15:81:2b:ea:7c:34:8c:4a:15:
                    85:f6:1d:c6:0c:4d:62:78:02:4c:e5:cf:ce:f2:b0:
                    02:3e:8e:05:53:df:56:d6:7d:21:fd:6d:b3:29:5c:
                    d9:35:06:60:7a:7a:22:90:94:5a:6b:00:6c:0a:c2:
                    39:c0:ce:20:5a:ff:5d:7c:ae:76:9f:60:5c:d6:6f:
                    f2:c8:5e:0a:04:aa:1b:d1:be:3a:bf:8a:11:2d:c4:
                    11:b8:85:0e:f4:25:2a:2f:fe:de:1a:72:f2:2f:fc:
                    47:b4:cb:93:5a:e7:89:ad:13:45:8d:ea:90:0a:11:
                    5f:8c:19:cd:44:6b:6b:b5:60:34:27:38:36:53:82:
                    c4:06:ae:00:50:85:e6:51:45:99:a2:54:63:b2:3c:
                    f7:24:26:3a:cf:62:83:f6:85:8b:73:59:ec:be:e2:
                    82:1a:38:36:eb:9b:ea:76:d4:66:8b:d4:61:ce:5e:
                    27:ca:d9:f3:89:b8:11:76:ee:e0:69:f0:12:4b:33:
                    99:40:f2:c6:2d:32:f5:cf:dd:16:57:4c:a8:42:04:
                    85:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9C:1B:5A:6F:78:3E:DD:C8:08:C6:CB:AF:4F:58:CF:45:0D:E7:6D
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3136302e302f32322d3232203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:68:b9:1b:00:16:5d:86:19:1a:49:37:41:d5:26:fa:fe:57:
         af:be:34:c1:8a:2d:d9:f2:42:78:ea:fd:5f:49:d3:fa:87:8a:
         86:40:dd:1b:46:22:b9:6e:99:88:0f:ec:66:b9:86:22:00:2f:
         c9:80:12:1e:00:3d:26:78:b7:34:7d:a0:37:8f:e1:25:36:a8:
         3c:a7:58:cd:f2:90:ff:ba:4f:be:f0:88:76:6d:41:a6:4b:7f:
         23:8d:b9:17:af:8d:58:a4:7b:4c:0d:8e:4c:0d:0a:7d:b2:d8:
         52:c5:d6:8f:b7:ad:37:a6:01:21:37:0f:dc:a6:2e:0c:92:33:
         2c:10:da:36:58:9c:b4:d5:69:2c:a6:5c:f6:06:68:c4:a7:e6:
         06:d6:ee:8f:b4:eb:52:9a:a9:cb:ea:46:d4:8d:c9:e8:4f:4e:
         98:03:07:dc:eb:90:e5:a1:74:b6:4d:7b:33:02:e0:73:fb:5a:
         d8:e3:c4:13:66:df:49:9b:98:1b:3a:54:bd:14:ea:ef:3f:2c:
         d6:13:d8:e0:bf:b1:00:67:95:2c:da:33:8a:2a:7f:cf:c2:81:
         05:b3:42:11:23:af:de:c6:f7:19:55:b0:ce:a4:c7:92:00:71:
         8b:48:6e:db:43:c5:f4:f5:a6:e6:5e:a5:5e:90:e7:5e:cf:4d:
         a2:a6:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:06:59 2024 by rpki-client on console-ams.rpki-client.org