Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/3230372e3234382e3131352e302f32342d3234203d3e203238343538.roa
File:                     3230372e3234382e3131352e302f32342d3234203d3e203238343538.roa (raw, json)
Hash identifier:          MFn3jh4NXW/d3CyiXB6s7kNJ9WW6t91+ihWZhn7tWTk=
Subject key identifier:   64:66:D0:2D:86:55:8D:15:D7:E4:78:B3:10:7B:1E:A6:8D:11:E7:66
Certificate issuer:       /CN=03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9
Certificate serial:       31CE28ADD57853EF98B3BD1E8832F232808331B1
Authority key identifier: 03:C9:CC:4E:E8:A5:1F:F2:8A:7D:58:11:EF:AB:0F:0C:70:5F:0D:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/3230372e3234382e3131352e302f32342d3234203d3e203238343538.roa
Signing time:             Tue 05 Mar 2024 18:13:55 +0000
ROA not before:           Tue 05 Mar 2024 18:08:55 +0000
ROA not after:            Tue 04 Mar 2025 18:13:55 +0000
asID:                     28458
IP address blocks:        207.248.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ce:28:ad:d5:78:53:ef:98:b3:bd:1e:88:32:f2:32:80:83:31:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9
        Validity
            Not Before: Mar  5 18:08:55 2024 GMT
            Not After : Mar  4 18:13:55 2025 GMT
        Subject: CN=6466D02D86558D15D7E478B3107B1EA68D11E766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:6f:d2:32:9d:6a:61:a0:ae:14:ca:fe:0a:
                    9d:24:09:a2:d5:e1:85:25:fb:8d:58:33:f5:e5:97:
                    e8:bf:a8:2f:1f:b2:43:fd:b8:ee:4a:59:3e:28:ea:
                    79:9d:c9:ab:6e:84:38:13:1a:02:0f:e2:89:7e:36:
                    9f:99:c1:8e:36:f4:92:0e:d7:8e:6b:fe:7e:b5:2a:
                    0c:d3:43:ba:e6:16:bf:ec:6f:32:b8:cd:5a:48:c9:
                    e5:e2:23:ac:0a:51:4c:59:c3:a8:a6:7e:cd:93:4e:
                    2b:2b:74:ba:06:d9:17:df:cd:3e:30:2f:56:bb:d5:
                    2b:e2:d4:00:b6:a0:29:c7:d6:ec:64:cf:27:32:c8:
                    0d:72:18:bc:f1:d5:16:24:51:f1:f5:44:8e:8b:24:
                    1d:68:bc:b7:90:49:51:99:f4:81:f6:8d:21:2f:57:
                    c6:22:f7:34:36:ff:cd:f3:4c:ee:30:56:ef:86:5e:
                    c4:9c:45:aa:09:21:8b:00:69:1e:a3:06:b7:17:36:
                    85:45:01:c9:86:b0:86:bd:51:e7:44:d6:33:93:08:
                    cc:51:b2:7b:66:f7:72:b0:2c:cb:d9:f4:54:f8:8d:
                    db:f3:0a:4d:80:45:fe:91:4c:3e:6d:83:75:fb:02:
                    50:23:dc:31:c4:18:79:cb:f6:9f:52:73:14:9e:7a:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:66:D0:2D:86:55:8D:15:D7:E4:78:B3:10:7B:1E:A6:8D:11:E7:66
            X509v3 Authority Key Identifier:
                keyid:03:C9:CC:4E:E8:A5:1F:F2:8A:7D:58:11:EF:AB:0F:0C:70:5F:0D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/3230372e3234382e3131352e302f32342d3234203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:88:b1:af:70:5a:89:09:48:f2:d1:ce:5b:30:50:f0:9f:
         e6:6a:a1:c1:7d:ee:51:b4:7b:53:8d:8f:a7:1f:44:cc:00:33:
         07:cb:e2:61:52:62:6d:91:15:01:4c:96:48:18:68:5e:90:fc:
         9b:f5:c9:39:a2:5b:b9:5a:ea:cd:e9:91:93:9b:ce:4a:9f:c9:
         d6:04:aa:ba:e1:89:27:5d:79:7b:a8:af:a5:08:38:a5:12:b4:
         3e:f9:78:ba:7d:dc:19:3f:8e:0e:25:5b:6e:e0:0d:51:ae:ad:
         d1:d4:ac:e9:98:ee:36:5a:4f:41:65:8d:57:90:f2:69:27:0f:
         52:c7:94:9d:7c:d0:06:f9:58:0c:dc:9c:72:24:df:bb:87:47:
         ff:df:61:41:2d:dd:77:b9:6c:97:78:a5:f5:ec:68:23:f2:df:
         2b:c1:e0:88:fb:2a:ac:2c:15:8f:1a:4d:60:41:3a:11:ab:de:
         a5:23:68:13:15:bb:42:dd:3f:1c:b7:ff:a5:d6:1c:6c:f8:a1:
         e7:8d:16:4d:bb:3f:19:b2:3f:b4:a6:a4:97:28:44:58:33:a1:
         fc:80:81:f5:13:cf:13:51:e8:b9:33:9e:d2:31:7c:33:8f:ea:
         6e:37:62:be:0c:fd:5b:67:02:d2:20:4d:e8:91:c2:aa:a8:1f:
         c2:b5:8d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:32:31 2024 by rpki-client on console-fra.rpki-client.org