Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3233302e32342e302f32312d3234203d3e203233323433.roa
File:                     3134382e3233302e32342e302f32312d3234203d3e203233323433.roa (raw, json)
Hash identifier:          l6bOekDlCnOTVZYTc8t49IEQCTfLwLASwz5gyIjyrgQ=
Subject key identifier:   79:C3:6D:74:7D:C3:DB:C7:26:42:1D:7D:43:99:CE:23:F9:8A:19:D6
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       7DFE66444659F69C771AA6ED621F59A767A0D537
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3233302e32342e302f32312d3234203d3e203233323433.roa
Signing time:             Wed 30 Oct 2024 16:30:00 +0000
ROA not before:           Wed 30 Oct 2024 16:25:00 +0000
ROA not after:            Wed 29 Oct 2025 16:30:00 +0000
asID:                     23243
IP address blocks:        148.230.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fe:66:44:46:59:f6:9c:77:1a:a6:ed:62:1f:59:a7:67:a0:d5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Oct 30 16:25:00 2024 GMT
            Not After : Oct 29 16:30:00 2025 GMT
        Subject: CN=79C36D747DC3DBC726421D7D4399CE23F98A19D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:8a:23:00:cd:61:50:40:8b:1a:ae:d5:07:
                    8f:8e:dc:c2:6f:0f:75:6c:43:d3:10:b6:b3:45:e9:
                    24:74:27:e2:b7:41:41:c4:92:1c:25:dc:d9:e7:f4:
                    b9:c4:70:b2:7c:14:92:22:35:9c:c8:59:e4:ce:6c:
                    7b:a2:d0:7d:ee:01:45:79:56:a2:a9:ca:e2:91:d9:
                    37:cf:2d:e4:40:d3:07:9e:b1:82:f2:75:a0:14:73:
                    42:cf:05:0c:9e:35:cb:88:8b:b9:08:c6:a8:89:d6:
                    38:ee:5e:b0:4e:28:4f:af:b1:b3:5b:d6:f8:d8:0e:
                    c2:1b:55:28:e5:c7:43:44:d5:41:a9:89:a7:ee:95:
                    b9:83:88:cb:4d:90:07:81:ef:06:12:b4:d5:e9:99:
                    cd:82:39:5b:f9:c1:db:20:bb:9c:ec:f5:4c:03:88:
                    d5:d2:15:78:de:ff:3e:d0:7d:79:67:93:35:78:f2:
                    8a:73:2f:67:3c:41:2a:d8:f5:40:a4:1f:c4:a9:a6:
                    99:d6:c5:1f:5b:b0:6c:a9:5c:26:6e:07:01:3b:5a:
                    d8:e5:d4:8a:1d:f6:74:0b:bb:f4:e8:d7:7d:a5:6f:
                    05:cb:35:7d:77:fa:3e:ea:ef:88:10:be:b2:63:3a:
                    d9:c1:be:51:4f:81:83:3e:ce:3c:35:99:63:78:26:
                    8a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C3:6D:74:7D:C3:DB:C7:26:42:1D:7D:43:99:CE:23:F9:8A:19:D6
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3233302e32342e302f32312d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.230.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:a5:0e:62:9a:33:ff:9d:49:9e:f2:fe:c9:9b:89:ad:ec:f9:
         94:ab:d9:33:35:ef:99:84:8c:b4:78:2f:8d:c4:ec:e3:3b:81:
         9d:61:cc:f9:bf:06:56:9b:14:87:e4:82:bf:11:20:f1:38:ea:
         74:d7:b5:61:ee:a0:99:d4:ea:6d:f6:c1:6d:59:c3:52:3f:c5:
         1e:a9:31:ad:1d:82:15:bd:ff:2b:dd:37:c5:ca:9f:af:b7:5a:
         7f:43:68:13:f9:28:65:bb:f4:95:c0:bb:ec:0e:49:a4:09:68:
         cf:41:b1:d8:46:c9:f6:f6:78:48:74:c8:ed:03:49:56:84:98:
         29:7a:8b:d6:2e:80:4d:89:47:ec:8e:ef:61:f2:0c:aa:ca:a7:
         b6:2b:c9:aa:b0:7c:8a:9c:7a:44:37:88:1c:f0:16:3b:74:b3:
         2b:5e:08:a1:45:8b:57:72:3a:3b:a1:ec:d1:35:3a:2d:27:93:
         0d:eb:e4:47:b4:37:7b:c8:6a:32:1c:4a:1b:65:18:af:4e:3b:
         24:cd:8b:fd:1a:80:84:fb:5d:8a:c5:b3:ae:c0:17:93:cd:8a:
         f8:ae:e2:08:0b:a5:c3:14:4f:0a:2b:a7:94:ba:56:1d:bd:a1:
         f8:ac:46:c1:b7:00:1b:c4:0e:2f:29:55:a8:fd:2f:39:d8:3b:
         38:4a:cd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:53 2024 by rpki-client on console-fra.rpki-client.org