Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3138342e302f32322d3232203d3e2036333036.roa
File:                     3230302e37312e3138342e302f32322d3232203d3e2036333036.roa (raw, json)
Hash identifier:          KEwdZCpQEmFVVMZ7uYqW0cFD+IHzhr1K1Panen/bdNk=
Subject key identifier:   70:62:C1:D7:CF:29:A7:A2:CD:7D:32:2A:C7:79:BC:78:11:6D:ED:A2
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       7D97766F3D20EA9244BDD59E29164B5EA70F2712
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3138342e302f32322d3232203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:48 +0000
ROA not before:           Tue 05 Mar 2024 17:36:48 +0000
ROA not after:            Tue 04 Mar 2025 17:41:48 +0000
asID:                     6306
IP address blocks:        200.71.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:97:76:6f:3d:20:ea:92:44:bd:d5:9e:29:16:4b:5e:a7:0f:27:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:48 2024 GMT
            Not After : Mar  4 17:41:48 2025 GMT
        Subject: CN=7062C1D7CF29A7A2CD7D322AC779BC78116DEDA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:37:4f:7c:aa:d9:36:20:6a:a7:e1:9a:b7:
                    6a:9b:c0:97:4b:9b:4c:fe:95:1b:25:3d:9e:48:60:
                    e0:97:da:e1:c2:7e:21:ee:28:fe:90:d2:2a:33:18:
                    26:89:d8:48:d2:59:80:54:70:c4:07:87:1e:3d:26:
                    1f:eb:4d:03:23:f5:d8:be:3e:79:da:a3:fb:ce:26:
                    7c:0c:8f:44:c9:cc:42:9f:39:f5:1b:df:02:85:ba:
                    55:72:c3:71:24:db:6f:0b:39:79:2f:1c:e6:60:eb:
                    8e:11:1b:99:71:d2:4f:19:fd:31:b0:b0:1f:fd:71:
                    a7:cd:07:2f:b2:14:33:45:39:6d:43:80:36:0e:f4:
                    68:eb:27:c1:4f:00:35:11:f0:6c:21:80:0d:53:58:
                    50:33:5e:9e:0a:60:fc:5c:e6:09:91:49:a7:5a:cd:
                    89:68:95:24:11:9d:a8:53:2f:98:78:e2:8b:d3:28:
                    82:7a:71:ed:25:46:bb:b2:c9:d0:cf:44:d6:e9:c7:
                    06:41:81:e9:8c:05:b2:4c:6a:07:11:cf:cb:c9:b0:
                    11:4b:fd:e7:ec:df:0f:3f:4e:1c:31:ec:0b:22:4f:
                    23:0b:7a:f3:49:d1:f2:6a:cc:08:53:2d:07:89:40:
                    4d:a5:25:c9:43:c4:92:79:d1:58:87:28:32:3b:9e:
                    88:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:62:C1:D7:CF:29:A7:A2:CD:7D:32:2A:C7:79:BC:78:11:6D:ED:A2
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3138342e302f32322d3232203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:a5:64:f2:af:14:d0:05:5c:f3:4c:d9:8b:bb:01:05:2b:13:
         f0:60:11:2c:40:80:36:16:a2:df:11:5d:17:79:42:86:25:5d:
         7f:5e:8a:fd:66:fa:88:cf:b7:c7:f1:d3:77:8e:d2:46:35:25:
         03:be:ad:be:78:9e:6a:f0:f2:d0:e9:a5:13:ad:d9:c5:3b:98:
         e9:dc:16:41:40:ad:97:be:38:48:bc:0d:54:d1:5e:ac:67:e3:
         ca:e0:ad:e0:f0:a2:da:d4:a6:bd:d2:0d:39:c7:32:11:be:35:
         99:03:8f:0a:d7:ae:bb:ac:e6:79:72:98:be:af:c1:22:cb:8f:
         a0:d3:e0:08:95:d4:08:1d:8f:61:03:ad:1a:81:1d:0b:d0:66:
         e9:e0:d9:9e:9d:9b:b5:05:bd:59:72:e1:f4:6f:e4:f5:c5:e7:
         d8:e9:80:5d:ec:77:b2:64:83:6b:e2:a1:1c:4f:40:0c:12:24:
         17:c5:cb:f9:47:d2:5a:b0:6a:ed:24:e6:d8:47:db:d4:b3:24:
         7e:18:71:1c:94:1c:68:50:c1:ab:f3:01:43:96:f9:b9:15:d9:
         fd:d7:31:23:a8:83:0a:89:02:79:8a:af:2d:7c:85:69:53:6d:
         46:6c:a6:c9:28:1e:4b:3e:18:02:b5:5a:af:2a:a3:24:ec:c2:
         43:f4:72:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:46 2024 by rpki-client on console-fra.rpki-client.org