Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37382e302f32342d3234203d3e20323633313537.roa
File:                     34352e3233392e37382e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          21WdGV5XpAhQROBUp/9WK78quW+EtFOYhQB62jIIR9M=
Subject key identifier:   C5:E9:70:2F:28:84:25:33:B3:1D:CF:C6:3D:CC:4A:3B:22:EC:D0:BB
Certificate issuer:       /CN=DC06AA51EF6432276CF284539A2DF591490740C4
Certificate serial:       117A9CF8E448ED984C95E2D6B719378B6D1536B8
Authority key identifier: DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37382e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 04 Feb 2025 18:07:12 +0000
ROA not before:           Tue 04 Feb 2025 18:02:12 +0000
ROA not after:            Tue 03 Feb 2026 18:07:12 +0000
asID:                     263157
IP address blocks:        45.239.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7a:9c:f8:e4:48:ed:98:4c:95:e2:d6:b7:19:37:8b:6d:15:36:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC06AA51EF6432276CF284539A2DF591490740C4
        Validity
            Not Before: Feb  4 18:02:12 2025 GMT
            Not After : Feb  3 18:07:12 2026 GMT
        Subject: CN=C5E9702F28842533B31DCFC63DCC4A3B22ECD0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4e:f6:85:75:64:60:15:8f:88:3d:38:6a:15:
                    9d:28:07:55:38:0f:8b:a8:11:9c:4b:ad:25:50:5d:
                    9a:75:4b:b7:c8:fb:00:58:a5:ae:22:c8:d8:18:f5:
                    0d:b8:59:a4:0b:07:e0:e5:dc:60:ff:fb:eb:d7:a9:
                    9e:ce:b0:55:80:37:a4:fa:97:a8:08:c2:4b:b5:1b:
                    c7:4d:25:50:66:f1:7c:e4:ac:60:46:a9:16:ac:10:
                    52:ae:27:fb:e8:3b:72:f7:53:51:bd:4a:80:c2:07:
                    3c:d5:a0:91:6f:9f:ad:67:4f:50:82:d9:e7:5a:ee:
                    86:9b:4e:39:09:44:d7:a2:ff:90:ea:fe:21:77:39:
                    27:19:b8:1f:2d:b7:cf:1c:c7:ff:b4:1a:c3:d1:27:
                    63:00:4e:9c:59:b2:cc:8e:da:ec:d3:3f:38:55:e3:
                    7c:b3:da:fe:8f:23:48:1c:32:bf:ed:c6:fe:d1:9d:
                    f5:5d:3d:e2:fb:1d:8b:c0:b4:2c:0c:66:3f:fb:b7:
                    4f:46:2f:f5:77:4b:3d:24:cb:0f:22:d1:18:ba:63:
                    ec:89:a7:85:56:46:f5:6d:d1:15:36:73:f8:be:43:
                    04:d4:e0:fd:66:bd:9a:23:ac:bf:3f:8c:38:b4:3f:
                    3c:2a:90:26:14:2f:dc:0e:6e:2d:94:4c:c3:f4:a5:
                    9e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E9:70:2F:28:84:25:33:B3:1D:CF:C6:3D:CC:4A:3B:22:EC:D0:BB
            X509v3 Authority Key Identifier:
                keyid:DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37382e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:7a:46:8a:b8:f0:70:84:17:8c:da:8c:d8:d1:34:14:b0:c9:
         05:15:d6:af:a7:22:5c:d4:ea:df:c6:53:ef:86:b8:85:bd:95:
         0f:74:11:73:f8:6a:0f:7c:82:02:76:a7:45:7a:fc:64:55:27:
         07:18:38:d3:e2:03:9e:c4:89:0c:81:2b:a8:11:30:81:85:b4:
         22:62:60:18:33:46:be:a2:10:5a:92:96:fc:0d:72:c2:13:31:
         c5:9d:44:dd:0b:4c:09:c6:41:c2:d2:2f:d3:0d:92:2f:cc:f8:
         3e:90:ac:6b:89:73:15:d7:cd:cd:04:2c:e5:a3:a1:3f:6c:b5:
         5d:51:55:9f:90:f6:1f:2b:46:80:09:96:fb:cb:d8:25:cc:ed:
         ec:45:20:fd:dd:19:1a:44:e7:cc:14:65:c8:92:55:7d:65:b5:
         5d:23:96:35:c3:8f:c1:7c:c7:d5:af:12:07:cf:5e:f8:67:0c:
         cb:23:52:e6:e1:87:21:a5:77:7e:37:54:98:0d:b2:1d:c6:e4:
         c8:48:06:49:4e:08:c9:a5:6f:0d:10:44:a2:41:c2:c3:c4:dd:
         a9:9f:db:8f:64:a6:2a:1d:63:77:6b:71:40:c9:57:5e:08:af:
         6b:a6:dc:ff:da:c9:4b:d7:1b:1d:ce:eb:f5:8a:6f:86:4d:49:
         d4:b6:33:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:54:20 2025 by rpki-client