Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/3230372e3234382e3130382e302f32322d3234203d3e20323633313237.roa
File:                     3230372e3234382e3130382e302f32322d3234203d3e20323633313237.roa (raw, json)
Hash identifier:          8cWqESd1bjRUbp0eXVCqy3AOpvGL1U0RPgSKiHbIklc=
Subject key identifier:   CD:A8:A9:9E:0E:E9:FA:F6:79:96:4C:F0:58:52:7B:4C:25:99:3C:EF
Certificate issuer:       /CN=C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19
Certificate serial:       75219EB2EF788CAAB155AB57B7D8D410B56B337D
Authority key identifier: C0:BE:58:85:AF:2A:D2:A4:8D:A1:95:28:78:7A:4E:1F:C1:3F:6E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/3230372e3234382e3130382e302f32322d3234203d3e20323633313237.roa
Signing time:             Tue 05 Mar 2024 18:19:51 +0000
ROA not before:           Tue 05 Mar 2024 18:14:51 +0000
ROA not after:            Tue 04 Mar 2025 18:19:51 +0000
asID:                     263127
IP address blocks:        207.248.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:21:9e:b2:ef:78:8c:aa:b1:55:ab:57:b7:d8:d4:10:b5:6b:33:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19
        Validity
            Not Before: Mar  5 18:14:51 2024 GMT
            Not After : Mar  4 18:19:51 2025 GMT
        Subject: CN=CDA8A99E0EE9FAF679964CF058527B4C25993CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:51:b8:4a:bc:d7:e2:f6:b6:70:1a:8c:3d:
                    11:10:58:25:24:b4:d4:cf:85:92:51:59:25:68:97:
                    68:f3:7b:df:7e:35:70:1c:71:09:cb:58:63:7a:01:
                    c4:b6:3e:c8:0c:23:43:2a:9d:75:40:7d:6d:34:e4:
                    c1:e3:fd:23:25:a7:d0:5e:45:50:d5:99:7f:d5:08:
                    5b:69:fa:73:7e:35:28:6d:d3:b1:ff:90:1d:cd:79:
                    a3:2c:b3:29:47:58:b8:e5:d1:b9:36:3e:01:12:59:
                    39:3e:bb:d9:64:ba:8a:ff:fd:72:d3:04:7e:e8:88:
                    d5:65:85:c6:27:5a:a5:59:bd:f7:39:83:14:8d:29:
                    ba:f8:ec:e8:a1:07:6b:b9:53:64:41:c9:4c:9e:4f:
                    2c:0d:6f:58:d8:a2:74:73:45:f2:fe:fa:48:64:9f:
                    c5:e3:c5:1f:80:53:2e:dd:d0:c8:96:77:73:5d:ae:
                    22:10:1d:d0:cd:26:7d:c1:3f:fe:ef:a3:5a:47:4b:
                    6c:9b:80:73:62:6d:91:f8:02:e3:79:20:a9:bd:6c:
                    20:a7:92:5c:59:ac:60:0d:ec:13:f2:0c:99:d0:70:
                    db:2b:8d:45:6e:4e:b7:45:23:7a:6e:9e:a7:af:ef:
                    d3:58:fc:f5:d1:af:2e:9d:f4:70:03:ad:01:a2:4f:
                    e8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A8:A9:9E:0E:E9:FA:F6:79:96:4C:F0:58:52:7B:4C:25:99:3C:EF
            X509v3 Authority Key Identifier:
                keyid:C0:BE:58:85:AF:2A:D2:A4:8D:A1:95:28:78:7A:4E:1F:C1:3F:6E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/3230372e3234382e3130382e302f32322d3234203d3e20323633313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:84:b7:02:1b:d7:31:6a:52:51:68:d6:f3:eb:d3:57:5b:72:
         4e:00:ab:67:49:71:46:d2:db:45:ad:71:0c:2c:56:41:d5:f8:
         e6:a5:4a:25:27:73:ac:1e:85:f3:b0:48:e3:69:a1:d3:02:8c:
         4a:cb:59:88:13:8a:de:69:28:57:cd:90:b2:76:a6:ae:00:47:
         27:81:d8:e8:66:ac:0f:59:21:fa:e8:41:06:f2:f0:1e:5d:28:
         d3:8f:3f:80:95:d2:4a:0a:c4:a9:73:38:0d:6d:de:1c:5f:22:
         0f:19:f3:c5:10:4c:5f:f0:96:0b:68:02:c7:86:27:b9:35:dd:
         29:5a:0d:38:d0:4f:48:bf:09:ca:58:3b:1a:bf:04:4d:3a:74:
         fd:0f:8a:6f:31:42:52:89:36:39:4c:1d:97:73:36:eb:15:d3:
         f5:cd:b1:07:00:51:19:84:39:6f:88:74:d4:a8:0e:1b:f8:c7:
         ec:1b:ad:eb:13:7b:dd:67:6b:d1:2d:07:08:1b:0c:75:02:ab:
         4f:ee:4a:17:5d:8b:11:dd:ff:ef:ff:ec:1d:14:b4:81:e8:08:
         45:52:34:84:88:e5:a0:ec:ea:b1:90:94:e8:75:ad:17:3d:2f:
         12:3d:31:bc:ed:8a:71:25:61:b9:4c:c1:25:88:92:44:c9:c7:
         7e:45:13:7a
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUdSGesu94jKqxVatXt9jUELVrM30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBCRTU4ODVBRjJBRDJBNDhEQTE5NTI4Nzg3QTRFMUZD
MTNGNkUxOTAeFw0yNDAzMDUxODE0NTFaFw0yNTAzMDQxODE5NTFaMDMxMTAvBgNV
BAMTKENEQThBOTlFMEVFOUZBRjY3OTk2NENGMDU4NTI3QjRDMjU5OTNDRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdlG4SrzX4va2cBqMPREQWCUk
tNTPhZJRWSVol2jze99+NXAccQnLWGN6AcS2PsgMI0MqnXVAfW005MHj/SMlp9Be
RVDVmX/VCFtp+nN+NSht07H/kB3NeaMssylHWLjl0bk2PgESWTk+u9lkuor//XLT
BH7oiNVlhcYnWqVZvfc5gxSNKbr47OihB2u5U2RByUyeTywNb1jYonRzRfL++khk
n8XjxR+AUy7d0MiWd3NdriIQHdDNJn3BP/7vo1pHS2ybgHNibZH4AuN5IKm9bCCn
klxZrGAN7BPyDJnQcNsrjUVuTrdFI3punqev79NY/PXRry6d9HADrQGiT+ivAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUzaipng7p+vZ5lkzwWFJ7TCWZPO8wHwYDVR0j
BBgwFoAUwL5Yha8q0qSNoZUoeHpOH8E/bhkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTdGRDU1Rjc0QTI0MDczQTQ4MjY3RDE0QTRBNUI3MzJF
Q0EwQjVCODIxOUZFMjBFMEVGRTQ4MDU0MjZBQzFGLzAvQzBCRTU4ODVBRjJBRDJB
NDhEQTE5NTI4Nzg3QTRFMUZDMTNGNkUxOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMEJFNTg4NUFGMkFEMkE0OERB
MTk1Mjg3ODdBNEUxRkMxM0Y2RTE5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREU3RkQ1NUY3NEEyNDA3M0E0ODI2N0QxNEE0QTVCNzMyRUNBMEI1Qjgy
MTlGRTIwRTBFRkU0ODA1NDI2QUMxRi8wLzMyMzAzNzJlMzIzNDM4MmUzMTMwMzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzMTMyMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALP
+GwwDQYJKoZIhvcNAQELBQADggEBAFGEtwIb1zFqUlFo1vPr01dbck4Aq2dJcUbS
20WtcQwsVkHV+OalSiUnc6wehfOwSONpodMCjErLWYgTit5pKFfNkLJ2pq4ARyeB
2OhmrA9ZIfroQQby8B5dKNOPP4CV0koKxKlzOA1t3hxfIg8Z88UQTF/wlgtoAseG
J7k13SlaDTjQT0i/CcpYOxq/BE06dP0Pim8xQlKJNjlMHZdzNusV0/XNsQcAURmE
OW+IdNSoDhv4x+wbresTe91na9EtBwgbDHUCq0/uShddixHd/+//7B0UtIHoCEVS
NISI5aDs6rGQlOh1rRc9LxI9MbztinElYblMwSWIkkTJx35FE3o=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org