Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36352e302f32342d3234203d3e203238353131.roa
File:                     3230372e3234382e36352e302f32342d3234203d3e203238353131.roa (raw, json)
Hash identifier:          EZ/Nqx89Sh9+98c70YkUVdrDoHsFw6ZCovlbyJaKYf0=
Subject key identifier:   87:14:24:CD:1C:F5:30:3A:08:18:26:01:A8:62:EF:B5:A8:1A:36:25
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       7A2C3E09D31AD47E60F3D5B72138BDB3D1C75540
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36352e302f32342d3234203d3e203238353131.roa
Signing time:             Fri 26 Apr 2024 22:45:00 +0000
ROA not before:           Fri 26 Apr 2024 22:40:00 +0000
ROA not after:            Fri 25 Apr 2025 22:45:00 +0000
asID:                     28511
IP address blocks:        207.248.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2c:3e:09:d3:1a:d4:7e:60:f3:d5:b7:21:38:bd:b3:d1:c7:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 22:40:00 2024 GMT
            Not After : Apr 25 22:45:00 2025 GMT
        Subject: CN=871424CD1CF5303A08182601A862EFB5A81A3625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:d9:ac:bc:dc:87:6e:0d:f6:5e:b4:5a:24:
                    6d:d4:80:30:27:ea:54:2b:ae:ab:d8:8b:be:16:7e:
                    4b:02:3e:06:48:4f:d5:a0:68:f4:a2:1a:34:b1:ad:
                    fb:d2:13:62:0b:2e:98:a2:a0:d0:0f:5c:59:1e:8a:
                    ff:5d:fe:b2:f0:d6:e6:e1:3d:3a:fd:1b:2e:06:3e:
                    b6:fd:92:1e:e1:8f:f3:31:2f:88:5d:51:39:54:e7:
                    ba:10:77:d9:f7:03:69:cc:cf:2d:9d:c4:50:09:91:
                    e1:5d:b8:16:9a:6b:b9:8f:fa:08:be:2a:19:a9:29:
                    a9:58:8d:2e:e7:4a:ac:16:a6:f6:b2:4a:bf:51:70:
                    16:38:33:83:f9:04:58:59:5c:b8:ae:b8:70:1a:30:
                    4d:0c:ef:2e:6b:d9:f5:52:75:08:55:09:fc:6b:19:
                    16:5c:63:1f:1f:80:2a:28:03:b6:b4:89:ff:cb:e8:
                    bf:32:15:ff:48:f2:40:cd:7f:60:8e:66:f4:95:c9:
                    bc:2c:8d:b5:88:51:9b:db:58:be:06:6c:e8:ef:da:
                    5c:c6:6b:ca:9c:a7:de:fa:58:89:fe:ce:be:9e:49:
                    ea:59:00:a3:ea:d1:99:81:2d:13:f7:20:46:db:af:
                    72:ab:1b:54:02:94:c5:72:7a:ca:10:62:81:e4:cc:
                    0a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:14:24:CD:1C:F5:30:3A:08:18:26:01:A8:62:EF:B5:A8:1A:36:25
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36352e302f32342d3234203d3e203238353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:8a:b5:fb:dd:18:65:52:98:e7:96:8e:12:80:a3:f6:fb:eb:
         88:e1:42:91:cd:52:9f:d5:16:bb:8a:89:be:8f:b5:d2:35:0e:
         63:5b:3b:0c:c5:3a:21:38:9f:6c:de:b9:d2:19:64:e0:5b:e8:
         ab:c0:25:8d:62:e4:1e:e9:39:98:d1:b0:ef:46:8a:7a:f6:e4:
         62:17:60:32:95:70:13:dd:95:21:9f:95:f8:0b:e0:c6:b5:e8:
         1b:3e:0d:80:e7:ae:f4:87:9f:49:8e:89:7b:2a:c5:a7:a1:35:
         73:85:f2:45:0d:10:20:14:9d:88:df:39:77:e3:af:63:bf:8e:
         05:be:9d:95:ee:87:0b:a4:ec:9d:45:09:ed:a7:fd:4c:74:3d:
         f2:a7:48:60:3e:7e:66:3c:a2:d1:e3:13:79:76:15:60:38:e6:
         3e:fb:fe:65:98:43:75:35:5f:87:2d:56:2b:18:88:93:d1:5a:
         b5:c2:a8:bb:9b:b6:71:d1:99:d5:40:c3:23:f5:dc:a9:7b:9c:
         b0:00:04:b4:96:a1:d4:a8:8e:72:bd:30:1c:9b:f5:f0:99:47:
         4c:65:79:fe:68:85:79:b2:ad:69:ae:b3:4f:df:2b:8c:fe:03:
         0e:21:f0:5e:ad:90:29:dc:34:9e:5c:63:f3:13:a7:2d:a1:f8:
         3d:6b:bd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org