Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/3230372e3234382e31342e302f32342d3234203d3e20323731383738.roa
File:                     3230372e3234382e31342e302f32342d3234203d3e20323731383738.roa (raw, json)
Hash identifier:          +3Z+pi4gAgx44CFXCVLP/Ib7ZAK4SCYzXII6gfZCc4g=
Subject key identifier:   D4:05:90:6B:A8:9C:50:93:F0:53:10:42:9F:E5:9A:5C:FD:2C:B9:C3
Certificate issuer:       /CN=34DA34C5571EA566E24D3B569191DDECD3CC94A0
Certificate serial:       7ED63B818E1C8961D66D67CB598223046AC14459
Authority key identifier: 34:DA:34:C5:57:1E:A5:66:E2:4D:3B:56:91:91:DD:EC:D3:CC:94:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/3230372e3234382e31342e302f32342d3234203d3e20323731383738.roa
Signing time:             Tue 04 Feb 2025 18:22:47 +0000
ROA not before:           Tue 04 Feb 2025 18:17:47 +0000
ROA not after:            Tue 03 Feb 2026 18:22:47 +0000
asID:                     271878
IP address blocks:        207.248.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d6:3b:81:8e:1c:89:61:d6:6d:67:cb:59:82:23:04:6a:c1:44:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DA34C5571EA566E24D3B569191DDECD3CC94A0
        Validity
            Not Before: Feb  4 18:17:47 2025 GMT
            Not After : Feb  3 18:22:47 2026 GMT
        Subject: CN=D405906BA89C5093F05310429FE59A5CFD2CB9C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:f7:f2:15:c7:73:5c:c5:6e:9b:51:5e:8a:
                    a3:00:35:ad:7c:ec:c8:4c:71:00:8c:c0:10:a1:9b:
                    3f:9f:13:af:c9:35:ca:ae:f4:c7:cc:c0:8a:94:54:
                    91:0c:4e:b0:af:f0:1f:b6:f7:9e:d4:27:84:2e:de:
                    6f:ef:14:2d:30:2b:78:25:00:f7:dc:b3:5a:3a:c0:
                    b7:e9:e7:c0:4d:c4:c0:51:3d:3f:6c:e3:4b:7a:01:
                    88:a0:a4:40:1f:c4:6f:a2:bf:29:19:73:e1:c7:c8:
                    80:ed:dd:f5:4b:ec:a6:f3:2d:65:3b:dd:22:50:56:
                    9f:ae:f0:9b:0d:ac:66:ea:f8:b8:86:75:78:52:2c:
                    3e:ac:e2:a1:f3:fc:5f:df:7e:38:bf:37:a5:14:1d:
                    5f:6a:82:6d:05:93:12:f8:06:f0:8c:0c:68:a9:fa:
                    ec:b0:9a:3e:8e:ea:7d:12:3d:84:df:a9:1b:54:3b:
                    0e:b2:da:b1:64:83:6c:c3:12:d8:b3:79:93:69:f8:
                    ee:44:3e:88:26:22:e3:5b:25:65:c5:c5:56:aa:4e:
                    79:f2:59:66:77:71:50:a9:99:1a:4a:12:97:28:c5:
                    46:59:87:76:00:79:e0:a0:1c:d0:fb:3d:77:19:92:
                    15:d5:45:54:4f:61:7f:d1:7c:6b:b9:29:7c:a8:02:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:05:90:6B:A8:9C:50:93:F0:53:10:42:9F:E5:9A:5C:FD:2C:B9:C3
            X509v3 Authority Key Identifier:
                keyid:34:DA:34:C5:57:1E:A5:66:E2:4D:3B:56:91:91:DD:EC:D3:CC:94:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/3230372e3234382e31342e302f32342d3234203d3e20323731383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:b0:3d:e6:e5:7c:56:2f:8e:22:20:73:7d:64:43:01:27:a6:
         10:f7:3d:2b:5d:04:ca:08:f8:66:e5:e0:a1:b8:f7:b0:8f:73:
         c5:de:83:a4:4e:5d:42:18:6b:7f:d5:0a:c7:85:d6:23:97:bc:
         eb:d8:d7:c6:48:91:79:62:f6:15:1b:44:2d:51:ef:4a:64:0d:
         c8:16:d8:0e:bc:08:b6:29:38:fb:1a:55:4c:71:3a:aa:67:12:
         71:92:e8:b8:e1:1c:94:61:2f:b3:89:ce:bb:5f:e8:8e:58:d0:
         38:a9:b5:22:4a:d9:7a:5f:76:98:65:da:fc:54:66:0f:16:16:
         c4:78:dc:11:39:4d:10:97:d7:e4:4e:e0:00:a7:ab:c9:eb:52:
         7e:d3:ff:5d:9a:1a:d2:9a:13:b0:15:12:91:86:be:6e:ef:96:
         b1:b9:2b:b8:46:fd:b6:6f:92:c7:71:1b:cb:92:0c:5b:97:08:
         d0:4b:f8:35:79:da:81:3c:da:de:3d:9d:78:6b:a2:41:fa:2e:
         62:9b:d5:e2:71:b6:e0:dd:2b:b2:e2:f8:9f:c1:3a:72:b2:5d:
         0b:8f:80:ba:2f:82:4c:26:7e:4c:2f:b7:f3:ee:c4:b2:24:ed:
         75:43:3e:e4:dd:42:ca:8f:6f:41:47:cc:95:8f:89:4d:a1:f8:
         e1:9c:a8:55
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUftY7gY4ciWHWbWfLWYIjBGrBRFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzREQTM0QzU1NzFFQTU2NkUyNEQzQjU2OTE5MURERUNE
M0NDOTRBMDAeFw0yNTAyMDQxODE3NDdaFw0yNjAyMDMxODIyNDdaMDMxMTAvBgNV
BAMTKEQ0MDU5MDZCQTg5QzUwOTNGMDUzMTA0MjlGRTU5QTVDRkQyQ0I5QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDIffyFcdzXMVum1FeiqMANa18
7MhMcQCMwBChmz+fE6/JNcqu9MfMwIqUVJEMTrCv8B+2957UJ4Qu3m/vFC0wK3gl
APfcs1o6wLfp58BNxMBRPT9s40t6AYigpEAfxG+ivykZc+HHyIDt3fVL7KbzLWU7
3SJQVp+u8JsNrGbq+LiGdXhSLD6s4qHz/F/ffji/N6UUHV9qgm0FkxL4BvCMDGip
+uywmj6O6n0SPYTfqRtUOw6y2rFkg2zDEtizeZNp+O5EPogmIuNbJWXFxVaqTnny
WWZ3cVCpmRpKEpcoxUZZh3YAeeCgHND7PXcZkhXVRVRPYX/RfGu5KXyoAlcrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1AWQa6icUJPwUxBCn+WaXP0sucMwHwYDVR0j
BBgwFoAUNNo0xVcepWbiTTtWkZHd7NPMlKAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNTRERjRGMUUxQzgwNUZCNDhGQjJDN0NDN0M4MEQ3ODBF
OTNDMDg1REY3QTBBNkI0Mjg1RTM2QzcxNTM4NEJFLzAvMzREQTM0QzU1NzFFQTU2
NkUyNEQzQjU2OTE5MURERUNEM0NDOTRBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNERBMzRDNTU3MUVBNTY2RTI0
RDNCNTY5MTkxRERFQ0QzQ0M5NEEwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTU0REY0RjFFMUM4MDVGQjQ4RkIyQzdDQzdDODBENzgwRTkzQzA4NURG
N0EwQTZCNDI4NUUzNkM3MTUzODRCRS8wLzMyMzAzNzJlMzIzNDM4MmUzMTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzgzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/gO
MA0GCSqGSIb3DQEBCwUAA4IBAQA2sD3m5XxWL44iIHN9ZEMBJ6YQ9z0rXQTKCPhm
5eChuPewj3PF3oOkTl1CGGt/1QrHhdYjl7zr2NfGSJF5YvYVG0QtUe9KZA3IFtgO
vAi2KTj7GlVMcTqqZxJxkui44RyUYS+zic67X+iOWNA4qbUiStl6X3aYZdr8VGYP
FhbEeNwROU0Ql9fkTuAAp6vJ61J+0/9dmhrSmhOwFRKRhr5u75axuSu4Rv22b5LH
cRvLkgxblwjQS/g1edqBPNrePZ14a6JB+i5im9Xicbbg3Suy4vifwTpysl0Lj4C6
L4JMJn5ML7fz7sSyJO11Qz7k3ULKj29BR8yVj4lNofjhnKhV
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:15 2025 by rpki-client on console.sobornost.net