Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36352e302f32342d3234203d3e203232383934.roa
File:                     3230372e3234382e36352e302f32342d3234203d3e203232383934.roa (raw, json)
Hash identifier:          uzWPIW405G6GcX8d2TikF65+U469A+HtylKrs/RXMn0=
Subject key identifier:   9B:46:9B:07:9A:97:DC:66:40:7A:BD:9D:B9:00:47:7F:0F:18:51:90
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       32CB2CFBB19489DEF789685BE8231AAC67052729
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36352e302f32342d3234203d3e203232383934.roa
Signing time:             Fri 26 Apr 2024 22:45:01 +0000
ROA not before:           Fri 26 Apr 2024 22:40:01 +0000
ROA not after:            Fri 25 Apr 2025 22:45:01 +0000
asID:                     22894
IP address blocks:        207.248.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cb:2c:fb:b1:94:89:de:f7:89:68:5b:e8:23:1a:ac:67:05:27:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 22:40:01 2024 GMT
            Not After : Apr 25 22:45:01 2025 GMT
        Subject: CN=9B469B079A97DC66407ABD9DB900477F0F185190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:59:ca:63:87:f6:dc:2d:48:c8:19:3c:62:
                    33:9e:a4:a7:a5:82:70:ab:b6:df:58:29:f2:1d:c6:
                    73:22:e2:40:3f:7e:f7:a8:9d:b4:4d:f4:ce:39:3a:
                    8e:5c:83:31:01:29:97:00:94:06:97:3a:68:9b:2f:
                    2d:95:bf:a6:d4:f6:ab:c5:d4:75:d1:45:4c:20:c1:
                    eb:d8:3c:6e:44:7a:9d:8b:08:05:23:71:a8:d7:f2:
                    da:7e:64:79:bd:25:64:90:49:5b:df:e6:aa:ae:9d:
                    d8:03:58:8f:c0:02:16:f7:64:84:df:23:05:7c:32:
                    50:cb:15:44:0a:89:ef:75:2b:3d:84:6c:bd:6b:87:
                    cb:86:89:86:52:c1:7a:6a:f0:43:6c:f7:91:9c:68:
                    f8:42:85:a3:cb:1c:07:b5:fe:0e:5a:e4:73:5a:c7:
                    02:a8:eb:1a:a9:ab:8f:12:ec:cb:59:b6:f8:32:f9:
                    6c:04:b5:eb:2d:74:fb:f9:bd:92:93:e4:06:9f:bd:
                    87:15:fa:1f:c7:07:ad:34:f8:87:a5:86:da:db:4d:
                    5b:e7:85:07:7d:20:47:4c:c9:c2:74:73:84:d8:1a:
                    84:a0:09:98:6e:74:29:1e:09:60:40:74:8a:a3:3d:
                    1c:ba:f1:c1:7c:7d:49:89:b0:3c:9a:d9:b5:66:09:
                    7f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:46:9B:07:9A:97:DC:66:40:7A:BD:9D:B9:00:47:7F:0F:18:51:90
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36352e302f32342d3234203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:df:fb:53:09:b9:7d:21:f8:69:ef:82:c6:f1:a7:f1:6e:04:
         70:09:93:46:db:16:28:47:c3:03:98:47:29:2b:cc:c7:47:c9:
         fc:30:ab:a5:f9:ca:01:94:4d:12:36:ba:9b:c2:74:dc:40:a8:
         65:e3:14:27:49:8a:7c:6c:d6:d1:20:d7:82:79:a5:c2:f9:c9:
         76:8a:16:a1:0a:41:ca:c8:b3:a1:bf:25:0f:ab:99:bb:12:0f:
         22:ae:82:35:23:19:c2:6a:26:b9:a2:40:b4:37:f9:5c:d6:65:
         92:d1:c5:13:da:e3:b3:03:d2:4f:be:fe:54:e4:69:96:c3:1b:
         2d:9f:58:f4:13:ec:71:fa:58:f9:7c:a4:33:bc:79:ce:5b:6a:
         bc:c3:fa:4e:65:48:a5:64:55:df:13:3b:4a:f3:bf:ac:98:75:
         67:b8:de:50:06:10:81:e5:a7:33:94:00:c5:58:c1:ac:73:11:
         ae:ce:ac:18:e4:c0:ac:e9:a9:52:25:d1:ca:d8:0a:dd:1d:01:
         a5:e3:c4:7d:95:b0:fa:18:04:90:7c:77:25:43:ce:d8:bf:78:
         ec:74:3e:e6:6b:3f:b4:72:ff:35:e8:61:c5:6b:fc:da:69:d3:
         66:d2:b6:0b:68:4f:e8:64:7a:b9:4a:dc:c5:8d:4e:14:67:af:
         32:a4:1c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:25 2024 by rpki-client on console-ams.rpki-client.org