Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36342e302f32342d3234203d3e203232383934.roa
File:                     3230372e3234382e36342e302f32342d3234203d3e203232383934.roa (raw, json)
Hash identifier:          wWk2JOhQQmkS7EYT0q4LmBelf3jaKyvFxer767cDK/o=
Subject key identifier:   9C:7E:15:3A:61:A5:71:DE:A2:9B:83:B8:C4:F1:7E:47:C9:C4:55:DB
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       55325E10313C521364EDD17311CB327B979D2344
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36342e302f32342d3234203d3e203232383934.roa
Signing time:             Fri 26 Apr 2024 23:10:01 +0000
ROA not before:           Fri 26 Apr 2024 23:05:01 +0000
ROA not after:            Fri 25 Apr 2025 23:10:01 +0000
asID:                     22894
IP address blocks:        207.248.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:32:5e:10:31:3c:52:13:64:ed:d1:73:11:cb:32:7b:97:9d:23:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 23:05:01 2024 GMT
            Not After : Apr 25 23:10:01 2025 GMT
        Subject: CN=9C7E153A61A571DEA29B83B8C4F17E47C9C455DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:12:58:53:fb:a0:fd:b7:93:23:78:12:aa:cb:
                    0c:f8:ba:99:c9:06:0a:64:c8:e1:32:57:2d:fd:cf:
                    69:f2:81:ca:01:90:ff:e1:04:18:d4:f8:db:3b:dc:
                    9c:ee:ba:5f:52:1a:e5:e1:fa:4c:d0:a1:67:6b:48:
                    36:42:62:72:ae:9c:13:1c:ca:07:b9:fa:cf:8a:f7:
                    99:9b:9b:c4:f9:fc:17:21:a2:a5:ff:85:e9:53:1c:
                    e4:87:14:fe:e3:75:74:b8:e1:57:ba:99:ab:c4:de:
                    69:a7:91:e8:0f:99:1c:94:6b:05:2d:02:03:66:6d:
                    39:a3:c4:b5:e5:b7:ae:86:6c:4d:8d:37:56:b5:8e:
                    1f:62:c5:9f:85:3c:1c:b2:9e:91:42:5e:a6:2d:67:
                    72:f0:69:4d:d0:2c:4e:80:f3:78:89:c5:bc:52:0e:
                    d2:2a:1f:fd:35:fa:80:76:98:0e:49:2c:bf:e0:ba:
                    e1:ca:26:3e:b2:5a:7f:1c:a8:01:b6:ce:76:d8:4c:
                    cb:af:0b:81:f4:53:99:af:59:3b:e7:44:17:d1:eb:
                    ae:1e:97:60:f1:66:8b:6e:43:af:46:c9:4f:35:7d:
                    60:65:37:53:2b:a9:65:e1:cf:f2:ee:cb:3a:04:51:
                    1f:3d:bc:93:5a:59:94:ee:d7:3b:82:d6:68:88:14:
                    c1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7E:15:3A:61:A5:71:DE:A2:9B:83:B8:C4:F1:7E:47:C9:C4:55:DB
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36342e302f32342d3234203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:11:ca:91:57:a2:17:ff:31:38:0c:2a:16:96:a1:37:79:a4:
         cb:af:cb:25:75:8c:2c:d8:9e:c8:b8:8a:4c:1c:5a:ec:f8:31:
         3b:02:08:18:41:16:b5:e9:c3:43:91:9d:90:62:45:90:bb:85:
         64:2f:b7:61:c0:b4:87:ea:cc:0d:9b:de:1c:8e:11:2c:9a:35:
         fd:6b:1a:9e:23:51:24:39:50:3d:25:db:aa:29:ab:fb:14:09:
         76:b2:36:f7:4d:56:c9:73:89:77:57:bf:e6:e1:a2:60:a8:d8:
         c0:06:a5:86:ef:f6:fd:4a:4c:30:44:cd:60:7b:87:bd:4c:aa:
         e9:bf:06:67:65:92:fc:5d:12:a3:53:49:14:54:d9:48:2a:43:
         c0:fa:ad:c3:fb:13:73:38:d7:0d:f5:63:b4:84:bd:07:f6:6a:
         a6:b4:6f:3a:1f:db:14:b7:b4:89:77:3c:a6:c3:26:66:38:72:
         45:30:cb:7d:ce:ed:23:b9:a9:69:e5:fc:52:b0:20:61:bf:ef:
         34:f0:64:36:c3:a7:82:6c:1d:c9:d0:8c:d7:db:f2:53:a5:3d:
         8e:0a:03:bf:23:ba:59:cc:5a:15:33:e2:d9:d8:8a:a6:18:a6:
         01:2d:9c:d1:86:20:65:dd:01:78:79:88:54:fb:fa:44:98:09:
         92:e6:ac:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org