Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/3230372e3234382e31342e302f32342d3234203d3e20323731383738.roa
File:                     3230372e3234382e31342e302f32342d3234203d3e20323731383738.roa (raw, json)
Hash identifier:          AWtIGd9HF6aPimW8ygAd4wH4mvLeBf+aHqNoPaLIEeM=
Subject key identifier:   00:9A:85:C4:73:59:DC:3E:08:92:03:D3:04:7E:20:39:47:27:CF:F8
Certificate issuer:       /CN=34DA34C5571EA566E24D3B569191DDECD3CC94A0
Certificate serial:       6A2758A3B11F4038D6F2B663EEBCA31F7D6A0406
Authority key identifier: 34:DA:34:C5:57:1E:A5:66:E2:4D:3B:56:91:91:DD:EC:D3:CC:94:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/3230372e3234382e31342e302f32342d3234203d3e20323731383738.roa
Signing time:             Tue 05 Mar 2024 18:13:04 +0000
ROA not before:           Tue 05 Mar 2024 18:08:04 +0000
ROA not after:            Tue 04 Mar 2025 18:13:04 +0000
asID:                     271878
IP address blocks:        207.248.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:27:58:a3:b1:1f:40:38:d6:f2:b6:63:ee:bc:a3:1f:7d:6a:04:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DA34C5571EA566E24D3B569191DDECD3CC94A0
        Validity
            Not Before: Mar  5 18:08:04 2024 GMT
            Not After : Mar  4 18:13:04 2025 GMT
        Subject: CN=009A85C47359DC3E089203D3047E20394727CFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:e1:aa:eb:70:e3:21:2c:4a:90:a4:b9:84:
                    7b:31:f1:26:a3:00:cb:05:db:8e:d5:e2:4b:1f:06:
                    4a:14:95:a3:e8:83:3a:0d:e3:2c:d6:82:29:04:77:
                    43:d1:ab:bf:4d:81:57:16:a9:55:42:eb:e2:89:9a:
                    67:e6:af:12:d6:40:52:91:61:c1:a5:18:d3:68:da:
                    c7:c0:a5:63:a1:48:8e:b4:0d:63:33:a1:76:31:4a:
                    bb:45:aa:9d:6b:59:91:55:2e:ab:8e:38:c1:ce:2c:
                    d7:1e:45:13:c5:31:af:e6:4f:2d:d1:3e:37:5f:ab:
                    6b:4a:1e:17:8d:88:67:33:8a:cd:1b:53:ca:76:5c:
                    ea:2a:ef:c3:61:91:26:44:58:ac:21:65:91:74:b8:
                    d8:8b:7f:5c:f0:fa:0c:39:32:cf:8e:9c:e4:34:be:
                    f6:e2:4d:d6:41:94:14:9f:11:f9:32:9b:17:9b:3d:
                    75:f6:dc:6b:6d:ee:3f:14:db:ba:89:1b:fc:8d:8e:
                    4a:4a:5c:95:b2:ea:93:3a:91:01:f8:ed:1a:7f:95:
                    1c:34:3c:16:2b:d5:51:76:41:88:75:4d:e4:1a:36:
                    4f:17:03:d4:46:ca:59:59:93:94:51:1d:a4:4c:a8:
                    6a:44:7c:cd:62:71:44:9b:40:ec:e2:5c:be:73:07:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9A:85:C4:73:59:DC:3E:08:92:03:D3:04:7E:20:39:47:27:CF:F8
            X509v3 Authority Key Identifier:
                keyid:34:DA:34:C5:57:1E:A5:66:E2:4D:3B:56:91:91:DD:EC:D3:CC:94:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/3230372e3234382e31342e302f32342d3234203d3e20323731383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:56:3e:dc:2f:1b:58:3d:98:f3:bc:64:75:bb:0c:7e:bc:a0:
         33:98:4f:cb:42:88:f2:23:81:01:50:d7:76:7f:d8:bd:2d:12:
         97:5e:42:d6:ed:91:b8:a2:11:28:a6:64:70:0d:b0:53:c8:c5:
         e7:13:5b:c1:71:71:04:a1:51:ab:a0:fa:05:fd:a8:43:cb:33:
         20:b8:ac:25:b5:8a:bc:1c:78:08:45:f4:c0:e9:dc:8b:76:c8:
         97:b9:89:52:eb:d6:55:56:cd:88:ed:79:ec:d3:97:ce:56:1a:
         3f:4b:e2:51:ec:2f:59:53:e0:ac:01:27:6f:3e:78:f1:0d:aa:
         1d:ad:7f:74:59:59:2d:c5:30:3e:3e:de:7e:e0:c9:24:a1:4a:
         ff:20:ad:50:9b:d2:18:3a:a5:97:0e:dc:67:da:d7:37:14:d6:
         80:4b:27:bf:32:bd:87:ab:d2:dc:32:a6:d2:3d:40:84:ac:a7:
         e3:f2:62:90:3c:81:81:1a:9b:7c:b0:24:03:46:1b:8e:de:03:
         ca:25:fc:f3:c9:aa:36:fa:cd:80:df:da:22:72:b6:1c:88:a3:
         96:5a:c2:dc:85:cd:ac:33:ec:b3:43:36:d9:5e:cc:1e:ba:12:
         e2:96:0d:fc:fb:1b:b5:32:da:b2:5c:cf:26:b8:20:6c:72:42:
         1f:bf:07:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 16:01:00 2024 by rpki-client on console-fra.rpki-client.org