Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa
File:                     3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa (raw, json)
Hash identifier:          6qE7ea/qph6CEiBG02hKPrqAKUS5FtAe/eaf8vt995k=
Subject key identifier:   EB:0D:33:01:F0:27:2A:37:90:9D:7F:EB:D0:CF:29:E8:02:33:47:35
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       3262555D37EA6B382D9951DD8548DB8A04FA8680
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa
Signing time:             Tue 05 Mar 2024 17:56:50 +0000
ROA not before:           Tue 05 Mar 2024 17:51:50 +0000
ROA not after:            Tue 04 Mar 2025 17:56:50 +0000
asID:                     19905
IP address blocks:        207.248.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:62:55:5d:37:ea:6b:38:2d:99:51:dd:85:48:db:8a:04:fa:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:50 2024 GMT
            Not After : Mar  4 17:56:50 2025 GMT
        Subject: CN=EB0D3301F0272A37909D7FEBD0CF29E802334735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:34:11:da:09:6c:61:6b:5e:b3:f6:c3:a8:
                    8b:7b:32:c8:a9:20:de:7b:87:41:ef:8f:7c:fb:83:
                    c2:99:2c:a5:ba:8f:65:1c:dc:be:1d:b1:73:b0:40:
                    69:e9:0c:b6:00:65:c9:78:4a:c9:97:d5:bc:96:a7:
                    84:eb:8b:67:43:90:e4:c9:60:ef:0b:32:cb:b8:89:
                    16:4c:2b:61:30:03:4b:46:88:bd:45:46:bb:5a:e3:
                    bc:49:ec:4d:7d:9d:e5:cd:c4:5c:15:01:4f:d4:5d:
                    18:98:29:a9:88:e3:b0:d3:fd:9b:7e:f5:27:8f:2b:
                    4e:ca:e0:01:4e:14:db:f6:51:77:e4:0a:d7:cc:3e:
                    c2:c6:b3:3c:b1:ce:bb:77:4c:01:0a:75:7a:39:99:
                    34:70:27:26:68:5f:e1:8d:a9:e5:11:2b:3b:68:9f:
                    bf:04:b7:16:e2:32:2d:ec:dd:e7:6e:8e:78:96:78:
                    4e:89:9a:e3:fa:a3:be:6d:17:f2:25:84:e6:a5:8b:
                    af:c9:68:11:42:36:4e:77:f3:50:9f:b2:5f:99:de:
                    ca:07:26:f3:80:cb:ba:a8:7d:7c:7d:3b:93:b8:69:
                    3e:c9:82:5e:79:15:aa:78:d8:ec:00:4b:4e:4b:fa:
                    f6:a9:61:15:f7:50:ce:6a:7b:e9:2f:26:fc:36:fe:
                    97:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0D:33:01:F0:27:2A:37:90:9D:7F:EB:D0:CF:29:E8:02:33:47:35
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:1f:0c:ab:ee:e2:10:95:34:b0:d0:ed:28:27:e7:9b:b7:38:
         ca:ab:6b:a4:75:be:1d:1b:87:82:5b:fc:7e:7c:b5:ae:f7:d7:
         7c:a0:73:b9:ca:b6:2a:0e:03:f5:fa:f8:43:8f:fd:82:44:42:
         e9:12:99:0d:6b:17:79:24:d7:14:1d:ba:f1:26:5a:c8:77:9d:
         50:39:36:bb:fc:ca:18:34:13:37:2c:cb:c8:e8:25:f5:4d:07:
         ef:85:c8:94:b5:c1:5e:63:7c:3a:55:a2:b5:11:82:06:68:e4:
         57:e4:2a:f2:50:a6:28:a0:99:90:95:6d:f8:65:00:d7:c1:24:
         81:b6:9f:c8:d1:f7:53:d2:3f:9d:89:a0:a7:9a:2d:52:7a:24:
         58:e9:f8:18:69:10:ac:c0:dd:9b:d8:e1:e9:b9:60:61:35:ff:
         cc:5f:2c:23:16:6f:c3:e4:41:97:92:91:41:8c:28:e6:ed:fc:
         95:7a:d0:92:58:0a:4f:be:c6:77:bc:dd:e9:b3:4c:90:a2:32:
         54:c8:cf:3d:bf:36:52:f1:9f:5e:14:4f:84:94:11:91:32:1b:
         8f:29:81:0c:ec:c1:4d:c8:32:f2:6d:e7:d3:4f:d0:69:51:cd:
         34:45:1f:84:06:0a:67:3e:91:a9:eb:9d:49:e0:99:f0:06:c3:
         6a:ac:88:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:02:20 2024 by rpki-client on console-fra.rpki-client.org