Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/3230372e3234382e31322e302f32342d3234203d3e20323731383738.roa
File:                     3230372e3234382e31322e302f32342d3234203d3e20323731383738.roa (raw, json)
Hash identifier:          6L/xJfh0PnflcHpWSsV+JVHkCJW48Wd4nS2eGQ3Eh2Q=
Subject key identifier:   7B:7C:2A:C4:E6:CF:BB:FC:52:0B:8E:4B:39:45:3D:49:9B:6A:CA:23
Certificate issuer:       /CN=34DA34C5571EA566E24D3B569191DDECD3CC94A0
Certificate serial:       0692273939FF9BC4AE68BFCCB0E3FDCB8FBDCC5A
Authority key identifier: 34:DA:34:C5:57:1E:A5:66:E2:4D:3B:56:91:91:DD:EC:D3:CC:94:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/3230372e3234382e31322e302f32342d3234203d3e20323731383738.roa
Signing time:             Tue 05 Mar 2024 18:13:04 +0000
ROA not before:           Tue 05 Mar 2024 18:08:04 +0000
ROA not after:            Tue 04 Mar 2025 18:13:04 +0000
asID:                     271878
IP address blocks:        207.248.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:92:27:39:39:ff:9b:c4:ae:68:bf:cc:b0:e3:fd:cb:8f:bd:cc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DA34C5571EA566E24D3B569191DDECD3CC94A0
        Validity
            Not Before: Mar  5 18:08:04 2024 GMT
            Not After : Mar  4 18:13:04 2025 GMT
        Subject: CN=7B7C2AC4E6CFBBFC520B8E4B39453D499B6ACA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:68:3f:64:0e:87:77:e6:9f:09:37:56:0e:a0:
                    f8:88:d8:bc:d7:ef:d7:1b:5c:25:83:b8:0f:77:8d:
                    95:c5:c3:0a:75:9e:36:72:31:de:2a:19:e9:80:11:
                    8f:16:01:e1:36:b8:ff:28:ca:a8:1e:e9:cc:9c:96:
                    9c:95:1e:83:c9:d3:f5:85:d0:90:66:fd:31:04:e5:
                    06:fc:bd:b6:65:64:df:1e:85:4d:32:1e:21:94:9f:
                    d6:80:3e:39:cf:98:e5:55:65:4f:40:f4:ef:87:00:
                    7d:ab:59:ae:8b:1b:b7:b3:fb:d5:8e:f2:95:d3:e9:
                    ae:3e:a1:89:bd:63:dc:b2:35:1e:74:b1:4e:b4:17:
                    64:06:62:6b:e3:c0:01:68:7a:17:a1:f1:79:c7:8b:
                    d9:1b:db:2b:98:79:7c:94:f2:5c:64:8d:45:3e:c7:
                    e0:96:3d:a3:21:25:f3:e1:06:c2:ed:3b:71:1e:90:
                    9e:42:0f:d7:f6:05:b6:a2:a7:6b:f6:b7:a4:44:10:
                    81:68:4c:23:d3:ea:a1:9c:ea:99:5d:ab:17:d5:a2:
                    17:93:4b:58:42:c8:cb:86:5b:3d:bb:a8:90:ba:35:
                    0c:6b:83:69:a6:7d:16:35:0e:2b:ae:f6:d0:7a:77:
                    3c:5a:ee:4b:28:5f:f2:f2:e6:7b:4f:4b:be:2c:fd:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7C:2A:C4:E6:CF:BB:FC:52:0B:8E:4B:39:45:3D:49:9B:6A:CA:23
            X509v3 Authority Key Identifier:
                keyid:34:DA:34:C5:57:1E:A5:66:E2:4D:3B:56:91:91:DD:EC:D3:CC:94:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/3230372e3234382e31322e302f32342d3234203d3e20323731383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:83:f2:a2:ac:c4:dd:20:92:a4:68:01:4e:a6:15:2f:d1:49:
         9f:ba:fc:08:77:b3:e7:dd:6c:f5:73:00:17:b8:bb:4d:24:63:
         54:67:a8:6c:b6:0b:19:64:61:26:26:f1:70:25:ef:0d:4e:7b:
         58:2c:a7:9f:be:d2:4c:d2:4b:7b:63:12:74:17:af:77:7a:ec:
         e1:f8:23:93:11:c8:14:4a:ab:c1:e4:e4:55:b6:30:50:6a:f8:
         a6:39:ed:75:a6:f2:c5:09:f5:31:60:a0:49:68:1e:ee:9c:0b:
         fb:fe:0a:3b:d1:e1:b8:11:70:7d:d5:b2:9c:7b:3b:9e:7e:6e:
         f8:b5:d1:b5:a2:d3:e6:0a:6b:df:a2:cc:22:30:43:6c:61:8a:
         64:51:15:d5:0f:77:59:90:26:c4:55:3f:69:3e:89:8a:dc:7a:
         4d:82:26:4e:55:eb:6c:59:c5:78:a7:22:1c:2b:61:37:1e:cf:
         80:b9:e6:cb:20:df:b5:a1:46:72:32:77:4f:c5:01:bb:b3:47:
         97:79:04:ea:e3:48:23:f1:ad:3f:32:a3:57:86:bd:7f:f0:b1:
         e6:ed:f7:03:8a:fb:77:1e:4e:10:2c:1f:05:50:a4:d1:e8:b3:
         42:3c:af:17:8b:19:11:9e:7c:64:22:fa:e4:9c:ca:ba:81:25:
         50:78:b7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:07 2024 by rpki-client on console-ams.rpki-client.org