Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36342e302f32342d3234203d3e203238353131.roa
File:                     3230372e3234382e36342e302f32342d3234203d3e203238353131.roa (raw, json)
Hash identifier:          xXmMHWbAj/7mbwYUxrChnBmyif51qajflm4B3Iywt0g=
Subject key identifier:   74:9E:E6:C2:BC:68:F0:03:44:7F:06:B5:0B:3F:0E:35:06:1D:A9:F9
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       6ABFBB39E2966BA03F5763D4D9AB0259B2A961FE
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36342e302f32342d3234203d3e203238353131.roa
Signing time:             Fri 26 Apr 2024 23:10:00 +0000
ROA not before:           Fri 26 Apr 2024 23:05:00 +0000
ROA not after:            Fri 25 Apr 2025 23:10:00 +0000
asID:                     28511
IP address blocks:        207.248.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bf:bb:39:e2:96:6b:a0:3f:57:63:d4:d9:ab:02:59:b2:a9:61:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 23:05:00 2024 GMT
            Not After : Apr 25 23:10:00 2025 GMT
        Subject: CN=749EE6C2BC68F003447F06B50B3F0E35061DA9F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:9b:44:06:c3:7c:1b:ad:7e:24:3b:58:13:
                    6e:98:e0:07:8f:b6:8b:0f:0b:44:4c:13:a8:00:99:
                    8c:e6:0a:cb:f2:24:f2:69:c9:a6:04:e1:c2:58:f3:
                    d3:0e:f2:2d:f6:2c:dc:7e:de:c0:bb:53:f2:56:e0:
                    d9:4c:b3:8d:1f:41:3d:1c:32:77:07:93:17:65:24:
                    07:ba:4d:96:d1:d5:f2:2e:f0:ad:3a:d2:ca:68:b6:
                    32:94:92:ee:49:0d:a2:f8:0d:fd:0d:70:49:56:eb:
                    91:7a:db:9c:64:4e:14:74:d0:f7:0d:d7:4e:ab:d5:
                    ae:eb:67:bf:66:ef:48:05:1c:c3:49:75:5a:a8:6c:
                    f8:19:69:23:ee:ab:e4:02:e3:d8:cc:84:8f:dd:f1:
                    c7:9d:1c:bf:d6:1b:a8:3d:6f:d7:4f:f5:ca:e3:b6:
                    01:76:c3:51:55:87:fa:eb:14:54:11:35:a1:cd:c3:
                    3e:4e:a9:15:8d:c1:af:0d:64:08:1b:f4:b6:9a:a3:
                    5b:8a:93:55:f7:09:18:88:f3:68:fd:33:bf:d5:bc:
                    de:10:74:a3:6f:41:4c:a2:54:9b:a7:8b:38:9c:e0:
                    01:14:de:83:66:8e:cb:34:2f:62:78:a0:3c:50:51:
                    93:5d:40:ec:58:09:47:a8:34:43:cb:63:e9:82:3c:
                    0c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9E:E6:C2:BC:68:F0:03:44:7F:06:B5:0B:3F:0E:35:06:1D:A9:F9
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36342e302f32342d3234203d3e203238353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:2b:2e:61:27:49:71:9f:b7:8e:fb:e9:9f:92:43:6d:e4:a4:
         8b:4e:2d:f7:98:a0:87:4b:a0:96:d0:55:0b:66:76:5c:86:da:
         e3:70:20:3e:b5:66:30:cc:32:e8:76:73:c2:c3:8a:3d:ae:25:
         49:ef:f9:e0:c6:24:b2:cd:c0:da:12:8d:4a:d5:ee:8b:45:5a:
         e0:32:53:1b:06:f5:e3:36:29:4b:82:bf:46:48:15:a5:cf:20:
         eb:39:56:90:89:00:79:e4:36:35:b2:c4:a1:c7:b6:c5:d9:3d:
         b6:90:d7:1f:34:d9:67:e0:cd:a3:8c:ed:de:fc:40:b1:ca:9f:
         b9:4a:48:bf:6e:21:53:51:b9:b2:8b:2e:e5:ba:cf:f4:30:32:
         af:a2:ce:d3:5c:c5:14:d5:ff:1e:57:bc:63:09:d4:49:5f:f0:
         00:87:93:b6:6c:ab:98:94:e7:3c:9e:e1:f7:26:09:97:6c:0f:
         ed:18:f6:95:e6:f2:62:82:fb:ce:d1:0d:5a:24:18:bc:2c:f0:
         57:48:f6:8f:f9:d9:d2:ca:77:95:06:3e:1e:43:58:8c:5b:ae:
         7b:fb:d6:9c:4b:b5:85:f2:42:28:63:5b:ea:d3:49:2e:8e:3b:
         6f:5b:72:fe:a1:91:6e:06:0f:8d:88:cf:fc:c4:d8:5d:c8:a9:
         77:09:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:36 2024 by rpki-client on console-ams.rpki-client.org