Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3230372e3234382e3132342e302f32322d3234203d3e203532343336.roa
File:                     3230372e3234382e3132342e302f32322d3234203d3e203532343336.roa (raw, json)
Hash identifier:          To+TjN2CTs8OUuPyQHII7hNVJq3OjggZURjjAAEw81I=
Subject key identifier:   85:23:BF:7A:C9:71:95:7F:5B:FA:8E:97:0D:63:E6:80:CB:C1:64:38
Certificate issuer:       /CN=0DD8C886E7D641E553703DC5E196957F1368902C
Certificate serial:       41526FE29220C08F6E7E7B7FFFD713AF4D136A5E
Authority key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3230372e3234382e3132342e302f32322d3234203d3e203532343336.roa
Signing time:             Tue 05 Mar 2024 18:00:14 +0000
ROA not before:           Tue 05 Mar 2024 17:55:14 +0000
ROA not after:            Tue 04 Mar 2025 18:00:14 +0000
asID:                     52436
IP address blocks:        207.248.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:52:6f:e2:92:20:c0:8f:6e:7e:7b:7f:ff:d7:13:af:4d:13:6a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD8C886E7D641E553703DC5E196957F1368902C
        Validity
            Not Before: Mar  5 17:55:14 2024 GMT
            Not After : Mar  4 18:00:14 2025 GMT
        Subject: CN=8523BF7AC971957F5BFA8E970D63E680CBC16438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:02:25:8d:2b:b9:37:bb:c5:60:7d:ae:3a:ac:
                    69:b9:e5:81:9a:0e:d8:ec:56:8d:56:65:69:be:5c:
                    04:46:63:6f:95:dc:f0:da:db:58:bb:85:d5:73:46:
                    22:84:3d:d9:7e:16:a9:36:49:7d:86:4c:cb:4c:4f:
                    dc:ca:5e:d1:1c:c5:f5:e5:c0:da:ff:04:7f:7a:3d:
                    0d:2d:9f:e1:70:33:72:ae:9c:f7:44:df:fc:93:9b:
                    f6:97:8b:65:59:e5:a4:b0:60:37:6c:41:5f:a6:3c:
                    7f:74:e5:79:55:0d:9e:28:4c:36:bb:4f:01:da:01:
                    01:7f:85:1e:a1:a0:c6:d2:4f:50:4f:eb:42:51:60:
                    e4:b9:b7:9f:f7:ee:1b:d2:5a:bc:e9:59:49:af:9d:
                    d8:2d:be:aa:89:08:29:4f:17:e1:01:43:b9:5b:2a:
                    9a:04:34:2c:fb:96:c3:6e:b6:aa:0e:a4:7a:99:1b:
                    c2:2e:d8:b6:e5:88:10:57:89:1e:22:bb:96:cf:b9:
                    43:a0:16:ab:71:90:b1:f7:11:bc:53:f0:86:4f:25:
                    ce:30:b4:60:e8:b9:d6:c2:66:ea:47:e3:bf:48:ee:
                    90:d8:03:66:99:19:f5:9d:70:76:3a:8b:c4:ac:11:
                    4d:74:7b:72:bd:a1:dd:65:06:90:28:2c:7c:c7:47:
                    45:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:23:BF:7A:C9:71:95:7F:5B:FA:8E:97:0D:63:E6:80:CB:C1:64:38
            X509v3 Authority Key Identifier:
                keyid:0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3230372e3234382e3132342e302f32322d3234203d3e203532343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:ea:5e:cf:88:3c:57:03:d4:11:fc:13:a6:38:24:b4:6a:55:
         07:59:f9:b0:ca:22:87:ff:69:82:4b:34:fe:10:49:00:aa:ce:
         e9:c8:93:51:a4:54:c6:81:62:e8:7f:98:61:86:48:67:d6:88:
         69:9f:db:59:ef:49:f9:10:e0:6e:f6:b3:8e:74:68:ae:24:35:
         05:f8:6a:61:98:75:94:4f:f2:a3:d5:9a:c7:25:4f:43:e4:98:
         cc:65:ef:bd:22:68:17:d5:d0:7b:82:f9:94:e5:e7:ef:ed:4b:
         3b:f7:2d:94:db:c5:f9:a5:16:f5:b4:58:89:92:5b:4b:f8:68:
         1b:ab:1b:d9:82:39:a6:57:1e:c9:3f:18:0f:2a:17:b8:4e:ae:
         7c:fe:e2:68:3f:d4:57:1b:81:f5:c6:73:e7:28:68:b6:00:c2:
         ca:9e:69:84:00:22:38:76:82:93:01:60:5e:7e:57:bc:e7:54:
         4f:ae:34:0c:de:cb:03:a6:14:8a:b9:80:a9:03:df:71:7e:32:
         09:ff:ea:ef:c1:9d:4e:dd:f0:98:8b:1e:5c:af:0f:c9:31:c5:
         33:ba:0f:97:77:38:3b:39:1a:df:1c:77:7a:db:95:5c:ed:79:
         00:00:7b:85:26:51:50:5c:70:24:c9:fc:04:89:fb:12:b0:4c:
         63:bd:95:c0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQVJv4pIgwI9ufnt//9cTr00Tal4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEREOEM4ODZFN0Q2NDFFNTUzNzAzREM1RTE5Njk1N0Yx
MzY4OTAyQzAeFw0yNDAzMDUxNzU1MTRaFw0yNTAzMDQxODAwMTRaMDMxMTAvBgNV
BAMTKDg1MjNCRjdBQzk3MTk1N0Y1QkZBOEU5NzBENjNFNjgwQ0JDMTY0MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrAiWNK7k3u8Vgfa46rGm55YGa
DtjsVo1WZWm+XARGY2+V3PDa21i7hdVzRiKEPdl+Fqk2SX2GTMtMT9zKXtEcxfXl
wNr/BH96PQ0tn+FwM3KunPdE3/yTm/aXi2VZ5aSwYDdsQV+mPH905XlVDZ4oTDa7
TwHaAQF/hR6hoMbST1BP60JRYOS5t5/37hvSWrzpWUmvndgtvqqJCClPF+EBQ7lb
KpoENCz7lsNutqoOpHqZG8Iu2LbliBBXiR4iu5bPuUOgFqtxkLH3EbxT8IZPJc4w
tGDoudbCZupH479I7pDYA2aZGfWdcHY6i8SsEU10e3K9od1lBpAoLHzHR0W9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhSO/eslxlX9b+o6XDWPmgMvBZDgwHwYDVR0j
BBgwFoAUDdjIhufWQeVTcD3F4ZaVfxNokCwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQjU1NEM0NzFBNzBBQjczQjk2NUIxNTY5QUE0NTRGQTMy
MTFGRDE0MkM4MzFBRUUxRUFGODlGQTBGRDEyRUI4LzAvMEREOEM4ODZFN0Q2NDFF
NTUzNzAzREM1RTE5Njk1N0YxMzY4OTAyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wREQ4Qzg4NkU3RDY0MUU1NTM3
MDNEQzVFMTk2OTU3RjEzNjg5MDJDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkI1NTRDNDcxQTcwQUI3M0I5NjVCMTU2OUFBNDU0RkEzMjExRkQxNDJD
ODMxQUVFMUVBRjg5RkEwRkQxMkVCOC8wLzMyMzAzNzJlMzIzNDM4MmUzMTMyMzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzQzMzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz/h8
MA0GCSqGSIb3DQEBCwUAA4IBAQCn6l7PiDxXA9QR/BOmOCS0alUHWfmwyiKH/2mC
SzT+EEkAqs7pyJNRpFTGgWLof5hhhkhn1ohpn9tZ70n5EOBu9rOOdGiuJDUF+Gph
mHWUT/Kj1ZrHJU9D5JjMZe+9ImgX1dB7gvmU5efv7Us79y2U28X5pRb1tFiJkltL
+GgbqxvZgjmmVx7JPxgPKhe4Tq58/uJoP9RXG4H1xnPnKGi2AMLKnmmEACI4doKT
AWBefle851RPrjQM3ssDphSKuYCpA99xfjIJ/+rvwZ1O3fCYix5crw/JMcUzug+X
dzg7ORrfHHd625Vc7XkAAHuFJlFQXHAkyfwEifsSsExjvZXA
-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org