Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e302e302f32322d3234203d3e203634313339.roa
File:                     3230372e3234382e302e302f32322d3234203d3e203634313339.roa (raw, json)
Hash identifier:          ysBb0U5WWNZYG4c01BlARq+XX2MKx0dhgXTP9YxgWfw=
Subject key identifier:   85:1C:7D:72:EF:DA:22:D7:EC:96:46:81:9D:E6:D2:08:F4:3E:0D:2F
Certificate issuer:       /CN=367EAE467C8B549D5E6615661A70C865954F55EE
Certificate serial:       4579CD8E01D7DE4CD99273CCCDE8212F88B562DA
Authority key identifier: 36:7E:AE:46:7C:8B:54:9D:5E:66:15:66:1A:70:C8:65:95:4F:55:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/367EAE467C8B549D5E6615661A70C865954F55EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e302e302f32322d3234203d3e203634313339.roa
Signing time:             Tue 05 Mar 2024 18:08:55 +0000
ROA not before:           Tue 05 Mar 2024 18:03:55 +0000
ROA not after:            Tue 04 Mar 2025 18:08:55 +0000
asID:                     64139
IP address blocks:        207.248.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/367EAE467C8B549D5E6615661A70C865954F55EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/367EAE467C8B549D5E6615661A70C865954F55EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/367EAE467C8B549D5E6615661A70C865954F55EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:79:cd:8e:01:d7:de:4c:d9:92:73:cc:cd:e8:21:2f:88:b5:62:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367EAE467C8B549D5E6615661A70C865954F55EE
        Validity
            Not Before: Mar  5 18:03:55 2024 GMT
            Not After : Mar  4 18:08:55 2025 GMT
        Subject: CN=851C7D72EFDA22D7EC9646819DE6D208F43E0D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:96:96:bd:99:c1:82:d2:c9:57:69:51:2d:
                    69:aa:31:4f:d5:31:03:17:69:46:10:a1:c1:7f:56:
                    18:89:dc:1c:94:7a:24:89:39:7b:7b:26:2c:28:47:
                    5f:40:4d:8c:4f:01:31:6b:54:38:73:6c:35:31:78:
                    64:b9:58:e5:6a:77:cc:e4:61:69:9b:0e:4f:52:df:
                    c8:e3:28:f8:ab:fe:e8:0b:3a:5e:41:ca:0e:ab:dd:
                    04:8a:c7:03:4a:43:07:bc:da:45:f5:9e:eb:ca:17:
                    1b:1a:8f:bc:e3:8f:2c:70:82:cc:42:1b:82:ac:1d:
                    f8:a5:e6:0f:5b:6e:c7:1e:b1:e0:7e:4a:b4:97:0d:
                    4a:d5:97:00:4b:54:2c:77:ee:72:fa:6e:25:8a:bb:
                    62:0d:90:19:df:a9:5d:cc:d8:ed:e0:cc:ca:69:f8:
                    37:5b:66:18:67:bf:2b:f0:7b:45:17:5c:b4:ca:09:
                    a6:fc:d0:b1:11:d4:66:62:3d:48:62:19:21:92:4b:
                    38:cc:8f:12:35:31:be:ee:b7:9d:84:f8:d8:45:cc:
                    c8:74:c9:18:af:01:35:6a:da:a2:82:97:61:9f:51:
                    08:fa:fe:89:67:42:ae:6c:21:24:f2:b9:22:45:24:
                    5d:5c:a5:52:f7:ca:0f:02:b9:51:cb:af:79:64:c9:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1C:7D:72:EF:DA:22:D7:EC:96:46:81:9D:E6:D2:08:F4:3E:0D:2F
            X509v3 Authority Key Identifier:
                keyid:36:7E:AE:46:7C:8B:54:9D:5E:66:15:66:1A:70:C8:65:95:4F:55:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/367EAE467C8B549D5E6615661A70C865954F55EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/367EAE467C8B549D5E6615661A70C865954F55EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e302e302f32322d3234203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:55:c5:c1:92:cb:00:9c:94:2f:87:b8:66:05:ff:a3:26:f9:
         05:2a:c7:43:b1:4c:50:d9:72:23:fc:a4:63:7a:01:68:4f:6c:
         e4:fd:e5:04:df:ec:49:c7:29:ed:86:e3:e7:f5:28:b3:fe:d2:
         d7:4c:2b:c3:7d:fb:5f:1c:fd:d5:ba:00:0a:04:6d:bf:53:ba:
         12:41:54:b6:83:fc:1c:c0:80:08:d3:f0:c3:62:f8:3a:b5:e5:
         7e:f3:e6:c7:89:86:9b:71:cb:3e:13:34:25:f3:47:60:74:8d:
         e0:58:dd:b3:51:50:16:55:a9:11:57:62:ed:2d:04:1f:83:ae:
         7d:ed:b6:98:3c:0b:f7:c1:e1:56:71:cc:cc:8e:00:99:2b:d1:
         5c:a4:2b:57:51:e3:e8:b0:17:cd:fd:5f:0e:f7:ab:3d:d3:9c:
         cb:07:b5:cb:9c:9b:59:f5:e0:3e:c6:66:f5:2b:05:26:20:e2:
         d6:1f:97:fa:77:fe:1e:6c:9f:1b:04:a5:6c:47:94:35:75:b3:
         8f:8f:eb:7f:3a:3d:60:3d:37:fb:2f:30:69:01:0b:34:b5:e9:
         ba:2d:be:70:05:c3:58:70:7a:78:30:04:bd:87:76:f2:f9:3c:
         4f:c0:46:45:01:c6:8b:e6:f9:b3:69:42:67:b8:a0:1d:67:97:
         3c:5c:de:bb
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIURXnNjgHX3kzZknPMzeghL4i1YtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY3RUFFNDY3QzhCNTQ5RDVFNjYxNTY2MUE3MEM4NjU5
NTRGNTVFRTAeFw0yNDAzMDUxODAzNTVaFw0yNTAzMDQxODA4NTVaMDMxMTAvBgNV
BAMTKDg1MUM3RDcyRUZEQTIyRDdFQzk2NDY4MTlERTZEMjA4RjQzRTBEMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClWJaWvZnBgtLJV2lRLWmqMU/V
MQMXaUYQocF/VhiJ3ByUeiSJOXt7JiwoR19ATYxPATFrVDhzbDUxeGS5WOVqd8zk
YWmbDk9S38jjKPir/ugLOl5Byg6r3QSKxwNKQwe82kX1nuvKFxsaj7zjjyxwgsxC
G4KsHfil5g9bbsceseB+SrSXDUrVlwBLVCx37nL6biWKu2INkBnfqV3M2O3gzMpp
+DdbZhhnvyvwe0UXXLTKCab80LER1GZiPUhiGSGSSzjMjxI1Mb7ut52E+NhFzMh0
yRivATVq2qKCl2GfUQj6/olnQq5sISTyuSJFJF1cpVL3yg8CuVHLr3lkyQPTAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUhRx9cu/aItfslkaBnebSCPQ+DS8wHwYDVR0j
BBgwFoAUNn6uRnyLVJ1eZhVmGnDIZZVPVe4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NzBDODNEMjVFN0ZBNjczODg4MzIwNTIzMDkzMzIwODU1
NzJDMDc0Qjg2RjYwRTU0QzlGNDhGNjMwQkQ1QUE2LzAvMzY3RUFFNDY3QzhCNTQ5
RDVFNjYxNTY2MUE3MEM4NjU5NTRGNTVFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNjdFQUU0NjdDOEI1NDlENUU2
NjE1NjYxQTcwQzg2NTk1NEY1NUVFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODcwQzgzRDI1RTdGQTY3Mzg4ODMyMDUyMzA5MzMyMDg1NTcyQzA3NEI4
NkY2MEU1NEM5RjQ4RjYzMEJENUFBNi8wLzMyMzAzNzJlMzIzNDM4MmUzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM2MzQzMTMzMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALP+AAwDQYJ
KoZIhvcNAQELBQADggEBAHJVxcGSywCclC+HuGYF/6Mm+QUqx0OxTFDZciP8pGN6
AWhPbOT95QTf7EnHKe2G4+f1KLP+0tdMK8N9+18c/dW6AAoEbb9TuhJBVLaD/BzA
gAjT8MNi+Dq15X7z5seJhptxyz4TNCXzR2B0jeBY3bNRUBZVqRFXYu0tBB+Drn3t
tpg8C/fB4VZxzMyOAJkr0VykK1dR4+iwF839Xw73qz3TnMsHtcucm1n14D7GZvUr
BSYg4tYfl/p3/h5snxsEpWxHlDV1s4+P6386PWA9N/svMGkBCzS16botvnAFw1hw
engwBL2HdvL5PE/ARkUBxovm+bNpQme4oB1nlzxc3rs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:46 2024 by rpki-client on console-fra.rpki-client.org