Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230372e3234382e3235342e302f32342d3234203d3e203238343934.roa
File:                     3230372e3234382e3235342e302f32342d3234203d3e203238343934.roa (raw, json)
Hash identifier:          RVgvInGEer7LS0Jsnub7LrIaQzLdNlM4ezXrbcC6Veg=
Subject key identifier:   70:30:59:B2:16:3B:8A:B4:6F:19:F3:AE:F2:19:E4:41:42:1F:A3:FF
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       60B7D0B76FAA00CDC93E03E8091E7C13C7B43819
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230372e3234382e3235342e302f32342d3234203d3e203238343934.roa
Signing time:             Tue 04 Feb 2025 18:52:40 +0000
ROA not before:           Tue 04 Feb 2025 18:47:40 +0000
ROA not after:            Tue 03 Feb 2026 18:52:40 +0000
asID:                     28494
IP address blocks:        207.248.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b7:d0:b7:6f:aa:00:cd:c9:3e:03:e8:09:1e:7c:13:c7:b4:38:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:40 2025 GMT
            Not After : Feb  3 18:52:40 2026 GMT
        Subject: CN=703059B2163B8AB46F19F3AEF219E441421FA3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:ce:a6:73:cd:fa:2c:d7:b3:43:e0:bd:ca:
                    c4:8e:3c:64:a3:3a:19:e6:0c:80:cc:83:80:85:46:
                    ae:bb:2d:09:7d:51:7e:f9:95:ea:d1:6c:06:57:b9:
                    8c:2c:7c:b7:95:2a:70:95:83:7a:07:0a:8f:42:2e:
                    11:e7:41:c7:77:fc:d6:14:d3:91:76:22:56:9a:1f:
                    26:09:33:e1:eb:77:d8:1e:cf:92:ba:39:d8:17:02:
                    57:dc:e9:ef:1b:ca:6b:f3:4f:f1:19:cb:1d:28:43:
                    ef:81:6c:2f:bb:03:77:81:39:c5:17:51:14:2e:91:
                    1f:c0:16:83:3b:e5:e9:57:76:3d:5e:ac:f0:bd:09:
                    de:63:bc:b3:fc:15:2b:83:1c:68:97:5c:65:cc:ea:
                    a2:80:d9:b8:c4:b8:bb:30:04:42:67:1e:b6:fc:d1:
                    70:f5:81:f5:5b:9e:49:d2:f3:08:9a:aa:07:47:b1:
                    f7:86:aa:0c:90:21:9d:78:72:4d:5d:b6:09:fc:2d:
                    5e:02:1d:bc:6e:e8:9a:27:71:28:67:c2:3d:92:14:
                    5f:78:41:d3:52:a3:a8:19:48:94:26:12:9f:22:b8:
                    ec:75:ce:43:55:bd:f4:80:de:d1:96:70:15:e8:6e:
                    c7:8c:72:fa:b5:fb:31:c6:00:7d:fc:f8:76:ab:e4:
                    f8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:59:B2:16:3B:8A:B4:6F:19:F3:AE:F2:19:E4:41:42:1F:A3:FF
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230372e3234382e3235342e302f32342d3234203d3e203238343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:bc:f1:0b:0b:8a:95:c8:55:9e:4e:89:a5:0f:f5:5b:cf:27:
         78:82:59:9d:3c:ac:5c:a8:4e:b4:5e:5b:57:c7:25:54:75:27:
         43:59:80:8b:91:d5:08:24:44:bc:98:57:75:1e:0a:d4:93:57:
         bb:46:63:eb:ab:25:0f:db:76:a9:6d:24:5e:a3:5e:47:a4:a1:
         83:a9:07:10:aa:a0:5f:cd:cb:6d:7a:69:70:69:71:e6:81:82:
         ae:38:5d:d3:08:3e:98:c2:da:26:f9:4d:64:b4:36:10:82:b1:
         ea:f1:ab:7d:61:26:08:d4:bf:9d:a8:60:e5:74:30:73:07:95:
         d1:df:b9:ed:87:e6:8b:f4:bb:26:6d:86:91:f1:f0:2f:3f:bb:
         7c:93:21:a4:13:49:c6:d6:71:0b:58:31:6b:3a:e9:19:e9:ff:
         8c:ff:cc:e1:aa:b2:25:1b:e2:ab:92:0f:ec:32:c1:97:7e:49:
         dd:c0:49:2d:a8:5f:78:32:49:d9:d8:c6:15:28:e5:8f:71:c0:
         d4:32:b5:19:1b:97:8c:76:ca:68:b4:96:93:b4:e5:a4:26:99:
         78:ed:9f:f9:90:f9:3e:57:d6:20:ec:18:ef:f7:3a:7a:27:31:
         56:98:d3:13:d6:56:e1:3a:54:79:c8:eb:ca:9d:36:05:da:07:
         62:0f:a7:94
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYLfQt2+qAM3JPgPoCR58E8e0OBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1REQyOTNFMUMzQkM1RjRERTE1MzE4RkFDNTk2N0U3
RDU1QkYxNTAeFw0yNTAyMDQxODQ3NDBaFw0yNjAyMDMxODUyNDBaMDMxMTAvBgNV
BAMTKDcwMzA1OUIyMTYzQjhBQjQ2RjE5RjNBRUYyMTlFNDQxNDIxRkEzRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qc6mc836LNezQ+C9ysSOPGSj
OhnmDIDMg4CFRq67LQl9UX75lerRbAZXuYwsfLeVKnCVg3oHCo9CLhHnQcd3/NYU
05F2IlaaHyYJM+Hrd9gez5K6OdgXAlfc6e8bymvzT/EZyx0oQ++BbC+7A3eBOcUX
URQukR/AFoM75elXdj1erPC9Cd5jvLP8FSuDHGiXXGXM6qKA2bjEuLswBEJnHrb8
0XD1gfVbnknS8wiaqgdHsfeGqgyQIZ14ck1dtgn8LV4CHbxu6JoncShnwj2SFF94
QdNSo6gZSJQmEp8iuOx1zkNVvfSA3tGWcBXobseMcvq1+zHGAH38+Har5PgXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcDBZshY7irRvGfOu8hnkQUIfo/8wHwYDVR0j
BBgwFoAU413Sk+HDvF9N4VMY+sWWfn1VvxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERjY0OTVERkU1NTdBOTY1NkFGRDkzNDYzN0U5NjYzNEQz
RDI3MzlENTA3MkQxN0YxMDgwNThGMEE5Q0E5OTM4LzAvRTM1REQyOTNFMUMzQkM1
RjRERTE1MzE4RkFDNTk2N0U3RDU1QkYxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVERDI5M0UxQzNCQzVGNERF
MTUzMThGQUM1OTY3RTdENTVCRjE1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREY2NDk1REZFNTU3QTk2NTZBRkQ5MzQ2MzdFOTY2MzREM0QyNzM5RDUw
NzJEMTdGMTA4MDU4RjBBOUNBOTkzOC8wLzMyMzAzNzJlMzIzNDM4MmUzMjM1MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzQzOTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/j+
MA0GCSqGSIb3DQEBCwUAA4IBAQCjvPELC4qVyFWeTomlD/Vbzyd4glmdPKxcqE60
XltXxyVUdSdDWYCLkdUIJES8mFd1HgrUk1e7RmPrqyUP23apbSReo15HpKGDqQcQ
qqBfzcttemlwaXHmgYKuOF3TCD6Ywtom+U1ktDYQgrHq8at9YSYI1L+dqGDldDBz
B5XR37nth+aL9LsmbYaR8fAvP7t8kyGkE0nG1nELWDFrOukZ6f+M/8zhqrIlG+Kr
kg/sMsGXfkndwEktqF94MknZ2MYVKOWPccDUMrUZG5eMdspotJaTtOWkJpl47Z/5
kPk+V9Yg7Bjv9zp6JzFWmNMT1lbhOlR5yOvKnTYF2gdiD6eU
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:57:28 2025 by rpki-client