Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230372e3234382e3232342e302f31392d3234203d3e203131313732.roa
File:                     3230372e3234382e3232342e302f31392d3234203d3e203131313732.roa (raw, json)
Hash identifier:          K4tnTs0Vht6xN6ntAXfmoHrrdORRIwqceS+kVHnA/ao=
Subject key identifier:   1F:53:70:7E:D9:FF:6E:7A:56:9E:19:29:3E:22:5C:BA:6E:25:65:2C
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       3308F8B68A8C121033E05BDA80DFA09C9573217E
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230372e3234382e3232342e302f31392d3234203d3e203131313732.roa
Signing time:             Tue 05 Mar 2024 17:54:32 +0000
ROA not before:           Tue 05 Mar 2024 17:49:32 +0000
ROA not after:            Tue 04 Mar 2025 17:54:32 +0000
asID:                     11172
IP address blocks:        207.248.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:08:f8:b6:8a:8c:12:10:33:e0:5b:da:80:df:a0:9c:95:73:21:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:32 2024 GMT
            Not After : Mar  4 17:54:32 2025 GMT
        Subject: CN=1F53707ED9FF6E7A569E19293E225CBA6E25652C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:79:ab:7b:f2:6d:f5:a6:ed:f7:cf:a2:2e:
                    d0:9a:17:63:ea:04:6a:29:b6:70:e1:9d:2a:ba:f9:
                    66:ad:bd:54:22:f3:c4:1a:af:11:d3:3e:9c:e1:00:
                    db:8c:38:a4:1d:28:80:f6:e7:e2:70:b3:9c:e6:fa:
                    8d:3c:88:fd:76:0c:41:9d:68:59:46:29:35:cc:00:
                    2d:66:7e:59:14:3b:84:2f:ab:17:c8:0b:06:e4:07:
                    dd:e3:57:35:f3:38:76:19:59:90:46:dd:68:44:e2:
                    a3:52:10:7d:89:b8:fb:0a:bd:56:9e:d1:f2:c9:2b:
                    25:5d:4f:a0:35:bf:d5:4e:de:96:2a:04:ba:dd:90:
                    06:1a:55:9a:5f:cf:db:68:cd:33:69:17:a0:bc:4d:
                    bf:03:c9:bf:ac:ec:7e:cf:6c:53:4e:7f:6a:66:2d:
                    5a:8f:e2:1d:25:b0:06:7b:a0:a2:e4:08:0c:f7:9b:
                    39:3e:9c:ea:59:48:b6:a7:56:20:d5:eb:74:a8:68:
                    ae:c8:46:b7:8c:9c:8a:25:44:bd:e6:c2:1b:c0:9f:
                    30:71:da:56:01:64:c2:b9:fd:4b:60:83:04:e5:ff:
                    8f:e3:6e:1d:0f:e1:5a:c2:40:42:03:af:85:3d:5a:
                    e5:4e:9a:46:d5:74:33:ba:30:4e:3d:31:47:d4:73:
                    ae:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:53:70:7E:D9:FF:6E:7A:56:9E:19:29:3E:22:5C:BA:6E:25:65:2C
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230372e3234382e3232342e302f31392d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:7b:23:16:81:4d:2e:85:78:d2:fb:06:ee:20:f0:16:7c:e4:
         27:58:cc:79:99:82:65:02:3c:a9:c2:00:cb:1b:cd:87:63:30:
         1b:b2:1e:42:9f:0c:4a:5c:1f:be:5d:88:d6:5e:f3:0c:c9:57:
         f5:99:93:78:88:fa:5b:db:c7:10:90:60:6d:cb:bf:3a:dd:f2:
         a3:b5:58:98:d9:9a:85:2a:d6:7d:49:f5:23:6d:40:d5:b1:75:
         1e:f1:31:9d:54:d6:62:f6:f5:cb:3a:cc:74:7b:0b:2d:fc:38:
         71:1d:31:41:20:61:2e:2e:b2:30:ab:14:b5:d2:e2:87:97:28:
         cb:fa:fc:8c:8d:c9:b2:79:57:a1:4b:b9:69:e3:9f:f0:f2:48:
         c3:f8:96:14:cd:8b:dc:ad:d2:41:18:91:b1:3a:7a:31:77:ad:
         53:e5:27:b3:c9:53:7c:8c:60:aa:ad:00:0c:49:35:25:b2:63:
         1a:1f:c3:cb:c2:23:d3:7f:77:ba:33:80:37:07:81:ff:66:87:
         d2:38:cd:69:c9:94:b5:61:d8:12:7c:4a:9f:c9:db:16:db:f7:
         11:41:65:26:95:5d:4e:96:4a:25:db:77:4c:a9:1d:51:21:73:
         4f:fb:d9:ff:43:0d:03:4c:c8:e3:40:a6:4b:48:7f:1c:b3:2e:
         ef:3d:d6:ee
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMwj4toqMEhAz4FvagN+gnJVzIX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1REQyOTNFMUMzQkM1RjRERTE1MzE4RkFDNTk2N0U3
RDU1QkYxNTAeFw0yNDAzMDUxNzQ5MzJaFw0yNTAzMDQxNzU0MzJaMDMxMTAvBgNV
BAMTKDFGNTM3MDdFRDlGRjZFN0E1NjlFMTkyOTNFMjI1Q0JBNkUyNTY1MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4nmre/Jt9abt98+iLtCaF2Pq
BGoptnDhnSq6+WatvVQi88QarxHTPpzhANuMOKQdKID25+Jws5zm+o08iP12DEGd
aFlGKTXMAC1mflkUO4QvqxfICwbkB93jVzXzOHYZWZBG3WhE4qNSEH2JuPsKvVae
0fLJKyVdT6A1v9VO3pYqBLrdkAYaVZpfz9tozTNpF6C8Tb8Dyb+s7H7PbFNOf2pm
LVqP4h0lsAZ7oKLkCAz3mzk+nOpZSLanViDV63SoaK7IRreMnIolRL3mwhvAnzBx
2lYBZMK5/UtggwTl/4/jbh0P4VrCQEIDr4U9WuVOmkbVdDO6ME49MUfUc671AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUH1Nwftn/bnpWnhkpPiJcum4lZSwwHwYDVR0j
BBgwFoAU413Sk+HDvF9N4VMY+sWWfn1VvxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERjY0OTVERkU1NTdBOTY1NkFGRDkzNDYzN0U5NjYzNEQz
RDI3MzlENTA3MkQxN0YxMDgwNThGMEE5Q0E5OTM4LzAvRTM1REQyOTNFMUMzQkM1
RjRERTE1MzE4RkFDNTk2N0U3RDU1QkYxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVERDI5M0UxQzNCQzVGNERF
MTUzMThGQUM1OTY3RTdENTVCRjE1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREY2NDk1REZFNTU3QTk2NTZBRkQ5MzQ2MzdFOTY2MzREM0QyNzM5RDUw
NzJEMTdGMTA4MDU4RjBBOUNBOTkzOC8wLzMyMzAzNzJlMzIzNDM4MmUzMjMyMzQy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMTMxMzEzNzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz/jg
MA0GCSqGSIb3DQEBCwUAA4IBAQBxeyMWgU0uhXjS+wbuIPAWfOQnWMx5mYJlAjyp
wgDLG82HYzAbsh5CnwxKXB++XYjWXvMMyVf1mZN4iPpb28cQkGBty7863fKjtViY
2ZqFKtZ9SfUjbUDVsXUe8TGdVNZi9vXLOsx0ewst/DhxHTFBIGEuLrIwqxS10uKH
lyjL+vyMjcmyeVehS7lp45/w8kjD+JYUzYvcrdJBGJGxOnoxd61T5SezyVN8jGCq
rQAMSTUlsmMaH8PLwiPTf3e6M4A3B4H/ZofSOM1pyZS1YdgSfEqfydsW2/cRQWUm
lV1Olkol23dMqR1RIXNP+9n/Qw0DTMjjQKZLSH8csy7vPdbu
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org