Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06DCDA4C3E90EB50B968307B087BC07F683FD9B30C74A9D6D512503CD635EA42/0/34352e37312e3130362e302f32342d3234203d3e20323635383630.roa
File:                     34352e37312e3130362e302f32342d3234203d3e20323635383630.roa (raw, json)
Hash identifier:          OIGAdMmjkFjV3O+5Q/sJy2ldG4xHprjC2e3mBWiG5MQ=
Subject key identifier:   33:E6:F0:1B:48:40:82:E9:C6:2F:E3:5D:78:4E:36:F7:F5:88:DE:63
Certificate issuer:       /CN=039FCC56D856FC5158B83C5510CDFD4E4F78AB7B
Certificate serial:       5C7063DBF3C485B2605E2C5DE37C81BC186F7FC2
Authority key identifier: 03:9F:CC:56:D8:56:FC:51:58:B8:3C:55:10:CD:FD:4E:4F:78:AB:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/039FCC56D856FC5158B83C5510CDFD4E4F78AB7B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06DCDA4C3E90EB50B968307B087BC07F683FD9B30C74A9D6D512503CD635EA42/0/34352e37312e3130362e302f32342d3234203d3e20323635383630.roa
Signing time:             Tue 04 Feb 2025 18:14:38 +0000
ROA not before:           Tue 04 Feb 2025 18:09:38 +0000
ROA not after:            Tue 03 Feb 2026 18:14:38 +0000
asID:                     265860
IP address blocks:        45.71.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06DCDA4C3E90EB50B968307B087BC07F683FD9B30C74A9D6D512503CD635EA42/0/039FCC56D856FC5158B83C5510CDFD4E4F78AB7B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06DCDA4C3E90EB50B968307B087BC07F683FD9B30C74A9D6D512503CD635EA42/0/039FCC56D856FC5158B83C5510CDFD4E4F78AB7B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/039FCC56D856FC5158B83C5510CDFD4E4F78AB7B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 16:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:70:63:db:f3:c4:85:b2:60:5e:2c:5d:e3:7c:81:bc:18:6f:7f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039FCC56D856FC5158B83C5510CDFD4E4F78AB7B
        Validity
            Not Before: Feb  4 18:09:38 2025 GMT
            Not After : Feb  3 18:14:38 2026 GMT
        Subject: CN=33E6F01B484082E9C62FE35D784E36F7F588DE63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:d8:23:de:87:2c:3c:aa:89:58:54:39:4d:
                    d7:c2:da:a7:e2:a9:34:af:d2:54:59:26:e1:36:23:
                    d3:f9:26:1c:07:89:b6:3f:be:1d:4d:9f:01:f4:93:
                    24:0a:32:97:5f:f8:a5:83:4a:7a:4d:d7:ce:6a:e3:
                    ad:5e:fd:72:ea:01:a2:4d:43:6f:9d:47:7c:df:26:
                    99:55:75:1c:ee:56:6f:23:95:ee:41:91:5f:8c:f1:
                    e4:9f:1b:87:e4:40:3e:97:fc:1c:4f:78:b1:a3:4f:
                    3d:b6:13:0c:79:01:26:e5:01:3a:cd:eb:5e:9c:06:
                    e1:18:dd:b4:3d:fb:32:4c:03:58:13:bc:56:0c:71:
                    6e:9a:9f:86:5f:c4:96:5f:7d:1e:41:a6:5e:0a:cf:
                    c0:f6:32:b1:a2:38:ab:75:b6:f0:ad:3f:9e:d2:a7:
                    dd:48:97:9e:53:af:9e:17:16:df:75:0b:cb:df:2b:
                    f3:43:42:52:18:86:f7:b8:b7:51:53:0e:2c:9d:1c:
                    20:ca:38:fa:bc:71:51:a4:3b:84:ad:4d:2c:b8:19:
                    27:7b:2c:0c:4b:66:d0:14:2f:7d:5e:f8:74:35:d2:
                    7f:57:e3:67:5e:37:b1:f2:c5:38:3a:40:52:0b:30:
                    d1:0c:57:80:5f:c8:75:08:a8:0c:9e:1d:e7:01:7a:
                    cc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E6:F0:1B:48:40:82:E9:C6:2F:E3:5D:78:4E:36:F7:F5:88:DE:63
            X509v3 Authority Key Identifier:
                keyid:03:9F:CC:56:D8:56:FC:51:58:B8:3C:55:10:CD:FD:4E:4F:78:AB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06DCDA4C3E90EB50B968307B087BC07F683FD9B30C74A9D6D512503CD635EA42/0/039FCC56D856FC5158B83C5510CDFD4E4F78AB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/039FCC56D856FC5158B83C5510CDFD4E4F78AB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06DCDA4C3E90EB50B968307B087BC07F683FD9B30C74A9D6D512503CD635EA42/0/34352e37312e3130362e302f32342d3234203d3e20323635383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:da:b7:95:31:7c:86:35:4b:96:46:ab:04:d3:f8:34:ca:ec:
         66:3e:ef:8b:de:0e:31:09:5c:2f:05:b3:23:1d:b9:c6:2c:02:
         56:b8:18:fc:c2:b0:d2:5f:42:bb:e5:2f:08:36:02:73:7b:e2:
         e8:56:d2:85:e4:5b:a7:c3:0b:7f:d7:b5:ae:45:a3:c9:5d:9a:
         4a:61:e5:f6:52:6d:f6:9d:34:b3:ec:ff:e7:7c:74:df:8f:3f:
         c8:0c:aa:31:9b:c6:60:18:90:9e:39:30:b1:64:72:73:dc:15:
         2f:1d:b7:a6:31:15:07:92:fb:1b:bc:4c:e8:33:f2:3d:e1:76:
         8b:a1:4c:19:1d:e7:09:2a:1b:db:1d:ba:a0:e9:c1:a5:36:1d:
         4e:39:f7:41:a4:c7:e3:ad:b2:ff:62:83:52:bc:1c:3c:ed:52:
         47:8e:4f:aa:d0:88:e9:56:41:56:72:a6:f9:f2:4f:52:40:f2:
         b6:5b:ab:5e:f6:26:30:46:0b:92:ba:fd:8b:ea:e1:43:48:ab:
         e8:85:52:20:31:a7:94:b1:dc:27:9d:0e:3d:ae:aa:86:5c:31:
         00:cd:a5:e7:87:e0:57:8e:1b:ad:88:09:f5:9c:51:3e:79:9e:
         94:16:ee:d7:6f:69:16:0d:a0:e3:77:1d:e1:db:9d:21:68:a1:
         f5:d2:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:51 2025 by rpki-client