Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F383FDA0DCBD803E664F22F1AAD837427049E65B6F9E0EB251813428C712177C/0/3230372e3234382e37352e302f32342d3234203d3e203631343836.roa
File:                     3230372e3234382e37352e302f32342d3234203d3e203631343836.roa (raw, json)
Hash identifier:          LDwq9hTH56Ap1E7qgY79pgbgHPm1fzsNleSgc5Z1z+4=
Subject key identifier:   85:7C:C2:D1:A6:2F:37:9D:A1:F1:F3:B7:75:CD:49:8D:4D:B5:DC:88
Certificate issuer:       /CN=65592E93C8C71F06F334AC488E771F3A67B2EB17
Certificate serial:       3CEA96EDDBFA3956CD416B82C750A09E54F27B3B
Authority key identifier: 65:59:2E:93:C8:C7:1F:06:F3:34:AC:48:8E:77:1F:3A:67:B2:EB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65592E93C8C71F06F334AC488E771F3A67B2EB17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F383FDA0DCBD803E664F22F1AAD837427049E65B6F9E0EB251813428C712177C/0/3230372e3234382e37352e302f32342d3234203d3e203631343836.roa
Signing time:             Tue 05 Mar 2024 17:50:51 +0000
ROA not before:           Tue 05 Mar 2024 17:45:51 +0000
ROA not after:            Tue 04 Mar 2025 17:50:51 +0000
asID:                     61486
IP address blocks:        207.248.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F383FDA0DCBD803E664F22F1AAD837427049E65B6F9E0EB251813428C712177C/0/65592E93C8C71F06F334AC488E771F3A67B2EB17.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F383FDA0DCBD803E664F22F1AAD837427049E65B6F9E0EB251813428C712177C/0/65592E93C8C71F06F334AC488E771F3A67B2EB17.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65592E93C8C71F06F334AC488E771F3A67B2EB17.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ea:96:ed:db:fa:39:56:cd:41:6b:82:c7:50:a0:9e:54:f2:7b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65592E93C8C71F06F334AC488E771F3A67B2EB17
        Validity
            Not Before: Mar  5 17:45:51 2024 GMT
            Not After : Mar  4 17:50:51 2025 GMT
        Subject: CN=857CC2D1A62F379DA1F1F3B775CD498D4DB5DC88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:6b:c1:20:e0:e9:15:03:48:32:54:b1:29:
                    ca:d4:c0:51:e4:27:bc:69:9c:45:98:9a:05:55:df:
                    c9:9b:66:2c:4b:39:f5:dd:5a:5d:84:81:ec:c5:e5:
                    83:1e:a5:42:d5:da:f6:76:e4:39:6d:2c:03:60:85:
                    f9:e3:a9:de:70:92:20:88:0c:51:8a:97:ba:ea:c5:
                    16:00:d3:c9:a8:7d:dc:be:bd:e1:92:d5:41:81:f7:
                    cc:f6:21:a8:be:e9:45:ad:92:78:43:55:15:8c:5c:
                    7d:ce:b0:53:86:de:47:1c:f1:16:67:d6:cb:52:d4:
                    09:9e:ed:ef:de:35:ff:f0:bb:ef:90:45:88:5a:01:
                    44:02:02:53:8f:85:eb:34:11:fd:a0:5e:0b:ac:50:
                    48:d9:08:b9:05:f8:fb:7a:3b:3f:c0:5e:d0:36:8f:
                    3b:23:60:4f:96:2b:6c:7c:f5:e5:d4:58:da:60:7c:
                    85:bc:26:ef:19:6f:d8:93:8b:e2:a3:30:6b:00:19:
                    d3:61:7d:5d:aa:83:63:39:e0:5c:3f:bc:d3:20:80:
                    db:3e:f8:50:e5:c6:71:1e:3e:fe:ee:60:08:bd:49:
                    fe:da:e7:e3:02:70:05:37:c5:dd:38:7b:2d:9b:8e:
                    dc:dd:6a:b3:31:2b:78:81:54:e3:d7:b9:e3:a2:b7:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7C:C2:D1:A6:2F:37:9D:A1:F1:F3:B7:75:CD:49:8D:4D:B5:DC:88
            X509v3 Authority Key Identifier:
                keyid:65:59:2E:93:C8:C7:1F:06:F3:34:AC:48:8E:77:1F:3A:67:B2:EB:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F383FDA0DCBD803E664F22F1AAD837427049E65B6F9E0EB251813428C712177C/0/65592E93C8C71F06F334AC488E771F3A67B2EB17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65592E93C8C71F06F334AC488E771F3A67B2EB17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F383FDA0DCBD803E664F22F1AAD837427049E65B6F9E0EB251813428C712177C/0/3230372e3234382e37352e302f32342d3234203d3e203631343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:21:d4:bd:25:f2:68:31:62:11:e3:16:10:31:99:c0:eb:9d:
         99:21:7f:f6:8e:d9:87:d4:76:fb:48:7e:8e:e5:53:fd:b5:2a:
         af:e6:1a:7c:b5:47:ac:e3:1f:a3:07:95:6f:98:18:32:81:e1:
         6f:5b:8c:6e:bf:ee:95:8c:1d:4d:b3:a9:dc:04:65:60:50:b2:
         66:2a:b2:15:97:00:2b:69:92:6b:c3:d7:c1:ee:82:b3:78:c6:
         d4:00:85:5d:cb:2b:26:79:c1:48:4c:f6:49:50:86:b6:81:36:
         f5:9a:76:7b:a5:fb:ab:89:60:a6:e1:58:9a:94:5b:5c:bb:90:
         13:db:a4:2a:3d:14:15:52:45:23:36:7d:77:82:13:03:54:3d:
         e1:5a:d2:69:b3:53:f9:05:31:09:77:f8:07:6c:f0:4b:99:30:
         4d:ab:ec:51:75:3b:f5:49:ea:61:e6:37:ab:72:3c:6a:62:df:
         f7:1b:fd:cf:89:78:c1:90:43:54:bf:ae:fa:71:be:dd:db:0c:
         7a:27:a4:a8:11:93:d3:fe:42:a2:1b:b3:4b:96:1c:93:c4:65:
         52:e0:bc:e1:e8:88:e4:39:53:3c:6f:0c:f3:a0:c3:0c:04:a0:
         e0:04:2e:ee:91:0b:89:01:60:48:0f:e8:8c:79:90:22:b1:0b:
         67:74:fb:c0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPOqW7dv6OVbNQWuCx1CgnlTyezswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU1OTJFOTNDOEM3MUYwNkYzMzRBQzQ4OEU3NzFGM0E2
N0IyRUIxNzAeFw0yNDAzMDUxNzQ1NTFaFw0yNTAzMDQxNzUwNTFaMDMxMTAvBgNV
BAMTKDg1N0NDMkQxQTYyRjM3OURBMUYxRjNCNzc1Q0Q0OThENERCNURDODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpdmvBIODpFQNIMlSxKcrUwFHk
J7xpnEWYmgVV38mbZixLOfXdWl2EgezF5YMepULV2vZ25DltLANghfnjqd5wkiCI
DFGKl7rqxRYA08mofdy+veGS1UGB98z2Iai+6UWtknhDVRWMXH3OsFOG3kcc8RZn
1stS1Ame7e/eNf/wu++QRYhaAUQCAlOPhes0Ef2gXgusUEjZCLkF+Pt6Oz/AXtA2
jzsjYE+WK2x89eXUWNpgfIW8Ju8Zb9iTi+KjMGsAGdNhfV2qg2M54Fw/vNMggNs+
+FDlxnEePv7uYAi9Sf7a5+MCcAU3xd04ey2bjtzdarMxK3iBVOPXueOit/hjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhXzC0aYvN52h8fO3dc1JjU213IgwHwYDVR0j
BBgwFoAUZVkuk8jHHwbzNKxIjncfOmey6xcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMzgzRkRBMERDQkQ4MDNFNjY0RjIyRjFBQUQ4Mzc0Mjcw
NDlFNjVCNkY5RTBFQjI1MTgxMzQyOEM3MTIxNzdDLzAvNjU1OTJFOTNDOEM3MUYw
NkYzMzRBQzQ4OEU3NzFGM0E2N0IyRUIxNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NTU5MkU5M0M4QzcxRjA2RjMz
NEFDNDg4RTc3MUYzQTY3QjJFQjE3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjM4M0ZEQTBEQ0JEODAzRTY2NEYyMkYxQUFEODM3NDI3MDQ5RTY1QjZG
OUUwRUIyNTE4MTM0MjhDNzEyMTc3Qy8wLzMyMzAzNzJlMzIzNDM4MmUzNzM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM0MzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM/4SzAN
BgkqhkiG9w0BAQsFAAOCAQEAqyHUvSXyaDFiEeMWEDGZwOudmSF/9o7Zh9R2+0h+
juVT/bUqr+YafLVHrOMfoweVb5gYMoHhb1uMbr/ulYwdTbOp3ARlYFCyZiqyFZcA
K2mSa8PXwe6Cs3jG1ACFXcsrJnnBSEz2SVCGtoE29Zp2e6X7q4lgpuFYmpRbXLuQ
E9ukKj0UFVJFIzZ9d4ITA1Q94VrSabNT+QUxCXf4B2zwS5kwTavsUXU79UnqYeY3
q3I8amLf9xv9z4l4wZBDVL+u+nG+3dsMeiekqBGT0/5CohuzS5Yck8RlUuC84eiI
5DlTPG8M86DDDASg4AQu7pELiQFgSA/ojHmQIrELZ3T7wA==
-----END CERTIFICATE-----
Generated at Tue Nov 19 12:11:47 2024 by rpki-client on console-fra.rpki-client.org