Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/3230372e3234382e3131322e302f32332d3234203d3e20323633313237.roa
File:                     3230372e3234382e3131322e302f32332d3234203d3e20323633313237.roa (raw, json)
Hash identifier:          evsYpF0whLEtbxzG2fpVDuAS8WxHvP+wqqQHcMXCD18=
Subject key identifier:   69:ED:B4:44:78:0B:3E:FF:3E:10:DC:9B:16:B8:5E:F6:93:11:1F:98
Certificate issuer:       /CN=C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19
Certificate serial:       486A0677DBE4F1F894F06B3742712EBDDD54CB5E
Authority key identifier: C0:BE:58:85:AF:2A:D2:A4:8D:A1:95:28:78:7A:4E:1F:C1:3F:6E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/3230372e3234382e3131322e302f32332d3234203d3e20323633313237.roa
Signing time:             Tue 05 Mar 2024 18:19:50 +0000
ROA not before:           Tue 05 Mar 2024 18:14:50 +0000
ROA not after:            Tue 04 Mar 2025 18:19:50 +0000
asID:                     263127
IP address blocks:        207.248.112.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6a:06:77:db:e4:f1:f8:94:f0:6b:37:42:71:2e:bd:dd:54:cb:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19
        Validity
            Not Before: Mar  5 18:14:50 2024 GMT
            Not After : Mar  4 18:19:50 2025 GMT
        Subject: CN=69EDB444780B3EFF3E10DC9B16B85EF693111F98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:40:45:ef:5e:78:3f:5b:b8:6e:f1:1f:f8:e9:
                    8c:d1:51:65:ba:b1:32:71:70:04:36:ce:9e:78:59:
                    ab:df:5b:63:1f:10:c6:f0:fd:89:9b:8f:59:d0:37:
                    2d:f1:e0:a9:46:7c:69:0d:0e:a5:0f:6c:9e:c9:8c:
                    e0:57:d9:94:62:2f:8b:7c:23:a2:ce:f6:8a:cb:c8:
                    1a:d3:b4:1d:b2:26:9c:da:44:46:11:bf:ef:23:15:
                    e1:47:99:df:ad:60:12:9e:d2:a5:60:8e:4f:b7:6a:
                    b6:30:82:ac:27:5f:45:1b:0d:ac:95:da:e5:e4:69:
                    b2:cd:2b:59:f4:5e:c7:1f:e6:c3:fe:87:7f:0b:b3:
                    69:e5:4c:c8:fb:88:29:42:dc:2f:a6:50:ff:62:f3:
                    03:c6:71:1d:0d:8d:53:9f:fb:f9:1b:0f:8e:d1:f2:
                    49:cd:92:14:f8:37:90:77:c0:f5:a7:3f:ee:e3:5a:
                    41:02:a0:8a:db:d6:f3:b7:f5:95:3f:f3:d4:bf:53:
                    83:8e:72:d9:a9:75:1e:07:42:67:5b:6e:26:3d:a7:
                    57:5a:0b:fd:16:3f:ab:9f:7a:56:f9:41:c2:98:53:
                    e7:ee:cd:d3:41:ac:ad:a9:7b:d8:97:08:34:e6:60:
                    b4:e8:a7:92:53:e6:65:bc:fb:dc:43:a1:02:1a:37:
                    8c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:ED:B4:44:78:0B:3E:FF:3E:10:DC:9B:16:B8:5E:F6:93:11:1F:98
            X509v3 Authority Key Identifier:
                keyid:C0:BE:58:85:AF:2A:D2:A4:8D:A1:95:28:78:7A:4E:1F:C1:3F:6E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/3230372e3234382e3131322e302f32332d3234203d3e20323633313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:0d:23:99:80:83:1a:5d:3d:f7:0b:be:78:2c:af:94:f6:56:
         1e:32:5f:a2:65:9f:98:1e:b7:65:84:89:db:33:17:fe:2e:64:
         9d:9c:1e:e1:92:f5:ac:ef:86:41:bb:ce:1f:55:db:9e:70:0e:
         a5:39:a0:e7:c6:d0:08:9b:99:5e:98:a0:1d:30:57:97:9a:56:
         0c:84:6c:b2:d2:19:d8:97:9c:18:06:da:bb:f3:a9:8a:57:a3:
         fe:d8:a1:f1:c5:cd:25:a0:31:46:a4:f6:b5:7f:cf:71:ab:c3:
         cd:32:8a:22:55:d1:ba:ef:bb:a4:60:4b:73:55:84:45:a4:d6:
         91:51:b4:c3:7a:b0:77:e0:9f:61:04:a3:91:ef:ba:89:04:46:
         19:53:2a:91:7b:b6:c9:b4:ac:4e:29:e4:c2:b6:b1:20:20:84:
         9d:6e:a6:af:7b:6f:7a:88:12:f9:3c:88:01:9b:eb:3a:7d:66:
         f1:3b:31:bf:3c:b1:2e:18:e9:ab:ce:59:a2:13:67:e7:8f:fd:
         24:c9:83:dd:c6:55:09:f6:13:bf:36:bd:c9:b8:3a:94:94:ce:
         6b:62:b9:98:55:55:07:88:a1:7c:a7:78:43:90:3b:5e:07:d1:
         fb:a9:9a:41:e4:9b:b8:fa:37:3d:1a:b8:ff:21:6d:fd:15:02:
         70:e7:b4:2e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUSGoGd9vk8fiU8Gs3QnEuvd1Uy14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBCRTU4ODVBRjJBRDJBNDhEQTE5NTI4Nzg3QTRFMUZD
MTNGNkUxOTAeFw0yNDAzMDUxODE0NTBaFw0yNTAzMDQxODE5NTBaMDMxMTAvBgNV
BAMTKDY5RURCNDQ0NzgwQjNFRkYzRTEwREM5QjE2Qjg1RUY2OTMxMTFGOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqQEXvXng/W7hu8R/46YzRUWW6
sTJxcAQ2zp54WavfW2MfEMbw/Ymbj1nQNy3x4KlGfGkNDqUPbJ7JjOBX2ZRiL4t8
I6LO9orLyBrTtB2yJpzaREYRv+8jFeFHmd+tYBKe0qVgjk+3arYwgqwnX0UbDayV
2uXkabLNK1n0Xscf5sP+h38Ls2nlTMj7iClC3C+mUP9i8wPGcR0NjVOf+/kbD47R
8knNkhT4N5B3wPWnP+7jWkECoIrb1vO39ZU/89S/U4OOctmpdR4HQmdbbiY9p1da
C/0WP6ufelb5QcKYU+fuzdNBrK2pe9iXCDTmYLTop5JT5mW8+9xDoQIaN4x7AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUae20RHgLPv8+ENybFrhe9pMRH5gwHwYDVR0j
BBgwFoAUwL5Yha8q0qSNoZUoeHpOH8E/bhkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTdGRDU1Rjc0QTI0MDczQTQ4MjY3RDE0QTRBNUI3MzJF
Q0EwQjVCODIxOUZFMjBFMEVGRTQ4MDU0MjZBQzFGLzAvQzBCRTU4ODVBRjJBRDJB
NDhEQTE5NTI4Nzg3QTRFMUZDMTNGNkUxOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMEJFNTg4NUFGMkFEMkE0OERB
MTk1Mjg3ODdBNEUxRkMxM0Y2RTE5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREU3RkQ1NUY3NEEyNDA3M0E0ODI2N0QxNEE0QTVCNzMyRUNBMEI1Qjgy
MTlGRTIwRTBFRkU0ODA1NDI2QUMxRi8wLzMyMzAzNzJlMzIzNDM4MmUzMTMxMzIy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzMzMTMyMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHP
+HAwDQYJKoZIhvcNAQELBQADggEBAIINI5mAgxpdPfcLvngsr5T2Vh4yX6Jln5ge
t2WEidszF/4uZJ2cHuGS9azvhkG7zh9V255wDqU5oOfG0AibmV6YoB0wV5eaVgyE
bLLSGdiXnBgG2rvzqYpXo/7YofHFzSWgMUak9rV/z3Grw80yiiJV0brvu6RgS3NV
hEWk1pFRtMN6sHfgn2EEo5HvuokERhlTKpF7tsm0rE4p5MK2sSAghJ1upq97b3qI
Evk8iAGb6zp9ZvE7Mb88sS4Y6avOWaITZ+eP/STJg93GVQn2E782vcm4OpSUzmti
uZhVVQeIoXyneEOQO14H0fupmkHkm7j6Nz0auP8hbf0VAnDntC4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org