Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132332e302f32342d3234203d3e203231353735.roa
File:                     3230372e3234382e3132332e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          /Rk2djiiZsqjJdAUl6uROxQ6JjQ0LBtYElFx0BOqQWQ=
Subject key identifier:   7C:CB:C8:3C:BA:49:CC:AF:40:29:0E:39:00:AA:CE:F5:B7:EF:53:20
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       5813C05889032322F59BD2398EE9B726B6A743F7
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132332e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 05 Mar 2024 17:56:40 +0000
ROA not before:           Tue 05 Mar 2024 17:51:40 +0000
ROA not after:            Tue 04 Mar 2025 17:56:40 +0000
asID:                     21575
IP address blocks:        207.248.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:13:c0:58:89:03:23:22:f5:9b:d2:39:8e:e9:b7:26:b6:a7:43:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:40 2024 GMT
            Not After : Mar  4 17:56:40 2025 GMT
        Subject: CN=7CCBC83CBA49CCAF40290E3900AACEF5B7EF5320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:0a:bb:d7:57:94:de:0a:95:05:ce:d4:67:
                    a5:36:b2:3c:26:e8:66:58:ef:1c:38:f8:67:f1:ee:
                    5b:55:a3:ab:87:7e:5e:84:32:49:1b:77:d3:01:5c:
                    9d:9c:e7:a0:92:86:3b:d6:6d:88:40:7c:90:6e:f4:
                    b0:76:d2:7b:be:2b:50:3b:90:32:58:ca:63:ba:00:
                    78:b1:72:69:13:78:bb:40:40:70:6d:06:09:66:c0:
                    78:92:fa:9f:da:b9:75:b5:79:9d:9a:5c:c3:25:d4:
                    ed:dd:92:f6:0f:af:7a:29:59:44:36:d5:82:2e:26:
                    3c:36:35:fb:74:f3:08:93:4e:9d:c9:1a:99:f9:14:
                    c0:2d:ed:51:0c:5f:ad:8a:dc:03:c9:d7:ae:0d:6f:
                    5e:bf:aa:2a:5c:54:82:80:93:f5:f8:99:30:70:c4:
                    a9:17:08:2b:f2:d4:db:aa:c6:38:88:43:a1:6a:2a:
                    c7:2e:9a:4f:54:44:fc:cf:67:da:7d:cb:19:14:ef:
                    1e:ca:68:fb:7e:e8:24:a7:16:00:be:73:1f:aa:ab:
                    a5:70:10:91:ae:13:d6:a4:26:b2:6f:48:81:5f:3f:
                    d1:05:f9:2a:55:69:77:4e:ff:09:41:9b:f7:59:60:
                    28:52:c5:59:37:eb:1c:d2:95:7b:c6:5d:6c:f7:88:
                    f6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CB:C8:3C:BA:49:CC:AF:40:29:0E:39:00:AA:CE:F5:B7:EF:53:20
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132332e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:88:f3:5c:9b:29:c3:f7:ab:88:28:0e:a1:af:6c:b9:da:97:
         b4:7f:b2:3c:e7:a9:6d:9e:6e:a6:01:0e:1d:50:74:2c:58:c2:
         2f:b8:3e:83:8c:25:dd:b1:8b:ae:94:78:dd:5c:18:9d:16:d1:
         b7:cb:a0:80:f4:c2:26:d8:96:5e:17:74:02:d4:8b:ec:27:e8:
         24:0a:4f:f9:d6:b0:72:50:9b:fb:63:52:df:f9:01:d8:db:c1:
         c3:fb:ba:35:78:ee:2f:fd:fc:ca:fb:ba:b1:d2:46:60:7c:01:
         59:f5:8e:ef:57:36:13:8d:d6:6c:0a:49:4d:a0:a3:4b:aa:82:
         fc:24:e4:95:40:d9:12:11:0f:db:cd:43:ff:9b:44:00:18:0b:
         f1:47:ec:0e:a2:4d:05:ed:f7:00:83:e3:5d:33:f9:5d:18:ed:
         24:0a:b9:2b:37:c7:60:f1:35:b1:74:17:7b:4b:bb:56:2f:62:
         c7:8f:38:9c:9a:fe:c9:cc:d1:eb:b3:42:a1:d6:c7:49:42:4e:
         79:80:1b:cf:aa:d2:4d:17:98:eb:03:6e:a5:b2:c3:36:36:c2:
         3d:60:4c:81:1a:52:cb:a5:61:b3:67:60:a3:f3:f5:e7:d9:91:
         2d:e5:8b:e9:11:cc:f2:e2:d7:34:08:c6:29:4b:a0:d3:48:5c:
         13:0d:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org