Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36342e302f32342d3234203d3e203535303032.roa
File:                     3230372e3234382e36342e302f32342d3234203d3e203535303032.roa (raw, json)
Hash identifier:          LNxC+l6iZ2PorsYU11BYXytK+OXu3sv6LtqvRMyS6yI=
Subject key identifier:   26:38:CB:6E:AA:7A:D0:03:63:52:3A:B0:02:F9:86:2C:FA:BA:1E:AA
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       0BE60B871D46B3CB41D3AC6B405FB415E3D3453A
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36342e302f32342d3234203d3e203535303032.roa
Signing time:             Fri 26 Apr 2024 23:10:00 +0000
ROA not before:           Fri 26 Apr 2024 23:05:00 +0000
ROA not after:            Fri 25 Apr 2025 23:10:00 +0000
asID:                     55002
IP address blocks:        207.248.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 00:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e6:0b:87:1d:46:b3:cb:41:d3:ac:6b:40:5f:b4:15:e3:d3:45:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 23:05:00 2024 GMT
            Not After : Apr 25 23:10:00 2025 GMT
        Subject: CN=2638CB6EAA7AD00363523AB002F9862CFABA1EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:d2:b0:02:7a:5d:16:09:0e:4b:39:53:d0:
                    6e:df:78:2d:83:84:66:78:f9:38:48:1a:b2:33:c6:
                    88:0c:23:f0:38:3b:d0:cc:bf:ed:08:d9:ab:13:40:
                    24:7f:4b:9a:71:bb:fb:70:a4:ce:40:24:10:e9:2f:
                    b3:c6:6c:a2:18:b1:a1:3f:89:7c:bc:8f:5a:d4:4e:
                    1a:ce:ff:8c:82:a3:3b:4a:69:b2:89:b7:fd:ac:87:
                    bb:fa:f3:fb:6f:35:10:ca:27:83:5f:8d:e3:40:9c:
                    97:76:9d:13:db:77:68:45:d0:67:a9:1f:c2:bc:6d:
                    31:0a:c2:8e:06:ac:94:8a:49:18:7f:e3:51:73:ec:
                    47:2f:d0:05:8d:b8:e9:d0:ff:d3:6a:c1:c3:f2:2e:
                    ac:34:d4:7a:8d:f2:8c:d5:1e:e3:e8:47:b2:ad:e9:
                    38:12:22:94:e6:25:2c:c9:fa:24:2c:0f:22:f8:c7:
                    37:f7:5a:24:48:ce:b8:30:b8:d0:89:91:53:79:dd:
                    c4:fb:f9:66:24:ba:4a:e8:75:03:19:5f:73:b8:e7:
                    9c:e8:79:7d:f4:1e:f3:e8:d7:53:86:43:6b:40:1d:
                    f5:f6:a7:61:7a:18:a7:2b:cd:4c:a1:d4:a6:c9:c0:
                    d2:fa:ce:df:77:96:5a:c7:8d:e9:1b:26:a8:38:06:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:38:CB:6E:AA:7A:D0:03:63:52:3A:B0:02:F9:86:2C:FA:BA:1E:AA
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36342e302f32342d3234203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:82:69:7b:0f:b5:0f:73:ab:f2:8b:71:5d:5b:a3:49:28:36:
         c4:f8:33:46:2a:57:13:8a:c3:f1:be:78:bd:99:5f:5a:62:60:
         79:00:2d:11:1a:40:0d:8d:67:b9:50:4b:2c:e0:a1:c4:b7:e6:
         87:5d:0f:f0:7d:cf:b1:13:01:db:55:63:1c:2e:95:e9:08:44:
         66:bb:6f:e5:6d:d1:27:67:d3:b9:b7:7c:a7:17:73:97:84:38:
         f0:22:06:f5:64:22:15:c0:6e:fb:67:39:10:6e:5c:0a:18:fd:
         8b:70:f0:fe:3a:80:df:15:cc:e4:36:cb:11:ff:40:73:b7:f0:
         00:fc:6e:30:0d:62:04:9b:1f:f0:8a:01:f4:87:53:8e:a9:71:
         d1:37:e4:65:f4:f3:39:79:7f:26:ad:40:33:b3:e0:d6:fa:a0:
         be:85:f7:d3:ce:2e:97:ad:82:c2:fb:7f:97:32:4a:92:f2:b8:
         8b:dc:ff:9b:8b:9e:13:7a:34:f1:44:fc:3f:fd:be:c6:c7:ea:
         d3:14:19:48:29:77:aa:d5:d4:48:6a:71:38:1f:89:31:a7:34:
         77:33:ae:0c:9c:49:aa:2f:91:b5:b2:6b:71:32:58:f0:69:56:
         98:8c:74:7a:28:f4:ff:10:9d:01:90:fd:a3:7a:a2:ac:be:91:
         37:92:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:05:17 2024 by rpki-client on console-ams.rpki-client.org