Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/3230372e3234382e3131342e302f32332d3233203d3e203238343538.roa
File:                     3230372e3234382e3131342e302f32332d3233203d3e203238343538.roa (raw, json)
Hash identifier:          32qdDHMfYx3Q+cinC1dxyhb+Uxw6lLQ/MxlNkSUeZmM=
Subject key identifier:   CF:11:5F:90:E2:0F:7A:3A:DC:9D:22:6D:8E:DA:1C:A6:A7:8D:B6:C4
Certificate issuer:       /CN=03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9
Certificate serial:       08AB1DEA9985B6D7A31AAF5273794C6AB62D4F81
Authority key identifier: 03:C9:CC:4E:E8:A5:1F:F2:8A:7D:58:11:EF:AB:0F:0C:70:5F:0D:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/3230372e3234382e3131342e302f32332d3233203d3e203238343538.roa
Signing time:             Tue 05 Mar 2024 18:13:55 +0000
ROA not before:           Tue 05 Mar 2024 18:08:55 +0000
ROA not after:            Tue 04 Mar 2025 18:13:55 +0000
asID:                     28458
IP address blocks:        207.248.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ab:1d:ea:99:85:b6:d7:a3:1a:af:52:73:79:4c:6a:b6:2d:4f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9
        Validity
            Not Before: Mar  5 18:08:55 2024 GMT
            Not After : Mar  4 18:13:55 2025 GMT
        Subject: CN=CF115F90E20F7A3ADC9D226D8EDA1CA6A78DB6C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:d5:05:91:c3:7f:52:11:d9:49:39:f3:59:
                    21:9c:4e:93:b0:53:7b:3d:80:91:1d:e8:ba:ee:2f:
                    9f:4c:da:11:b3:17:c3:57:f8:33:2c:04:fc:91:c1:
                    73:1e:9f:7d:8d:34:5b:45:c5:16:57:64:ce:a4:e9:
                    1e:da:0a:f4:83:9a:4c:69:af:b8:92:cd:ef:f9:a5:
                    89:b4:e2:7b:53:f8:d2:17:2d:0f:b3:9a:5b:88:1c:
                    b5:e0:55:70:7d:33:ee:15:fb:bd:84:1c:d6:74:69:
                    d4:16:16:5c:1e:6e:ce:82:2b:5a:1c:a3:54:b5:d7:
                    d8:55:ab:ca:e1:e7:e5:d2:c5:74:ed:78:ce:ae:c7:
                    f2:1f:8b:35:83:0c:bb:6b:30:4b:29:60:e6:3b:04:
                    66:10:75:9c:ee:6a:98:0b:6e:95:9e:00:a2:8f:c9:
                    d7:1b:19:2a:17:9a:e8:dc:2e:b7:2b:5d:2e:9b:f9:
                    14:79:c9:30:b5:7c:f9:5f:98:e8:9e:d2:92:28:e9:
                    19:91:63:5d:cf:d3:31:0e:11:f3:00:90:4c:27:96:
                    02:9d:5b:76:cf:e5:53:58:b7:29:4b:14:1a:cc:a8:
                    b8:e5:c5:4a:d3:a8:04:a7:72:d4:d9:dd:83:a5:e1:
                    87:c7:a6:e1:6e:8f:17:b6:27:c6:a0:d1:cb:ff:43:
                    62:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:11:5F:90:E2:0F:7A:3A:DC:9D:22:6D:8E:DA:1C:A6:A7:8D:B6:C4
            X509v3 Authority Key Identifier:
                keyid:03:C9:CC:4E:E8:A5:1F:F2:8A:7D:58:11:EF:AB:0F:0C:70:5F:0D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/3230372e3234382e3131342e302f32332d3233203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:ea:61:92:af:87:35:64:68:f7:e8:4b:e0:de:2d:46:4f:36:
         e5:0e:7d:4c:51:8d:b1:e0:49:04:a2:22:64:fd:6f:17:42:15:
         19:21:41:08:e0:46:fa:ea:69:07:2d:e5:23:49:be:69:5a:6b:
         07:5d:78:fe:3f:1f:91:9b:9d:86:27:f7:df:94:ad:86:ad:51:
         9e:11:5b:fb:44:6f:ac:c3:50:cf:16:b3:a2:f8:5e:9b:7e:3b:
         ba:96:40:ed:82:62:a2:54:04:06:ab:ca:b6:e5:41:d0:66:72:
         aa:b0:48:98:ed:98:f3:7f:ea:f4:c7:e3:cf:00:f2:4e:09:2e:
         b6:09:7a:14:d9:c5:9c:0e:53:fa:65:43:b2:8e:37:43:33:ff:
         5b:18:fd:09:05:28:55:38:e4:af:c3:9e:47:7a:77:d9:86:7d:
         97:0e:c3:d4:dc:e2:b9:c3:71:ea:f7:12:00:8b:cf:57:83:5a:
         f6:de:32:78:8f:14:40:13:62:c3:d9:f6:dd:38:41:c7:44:0b:
         5b:17:76:62:75:b6:ba:e2:a3:15:a1:fa:eb:56:df:c0:88:cd:
         02:f2:6d:a5:4c:ae:ff:d1:81:e7:4b:ae:76:1c:8e:f7:b9:90:
         d5:b1:14:af:f8:ce:7a:1e:0f:6f:cc:34:81:38:4a:8d:94:e1:
         25:4d:7d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:32:31 2024 by rpki-client on console-fra.rpki-client.org