Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313230313a31303a3a2f34382d3438203d3e203237363631.roa
File:                     323030313a313230313a31303a3a2f34382d3438203d3e203237363631.roa (raw, json)
Hash identifier:          nT2/WZaQBI+NGbxVVsOErIquo7IQrx5zD+X6vucPLXY=
Subject key identifier:   D5:81:0F:62:32:47:DE:6B:19:AC:EE:B4:DB:31:60:10:49:8C:F8:50
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       43E175BE48119B762F86996583059DAFD24C4F13
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313230313a31303a3a2f34382d3438203d3e203237363631.roa
Signing time:             Sat 11 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 23:55:00 +0000
ROA not after:            Sat 10 May 2025 00:00:00 +0000
asID:                     27661
IP address blocks:        2001:1201:10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e1:75:be:48:11:9b:76:2f:86:99:65:83:05:9d:af:d2:4c:4f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: May 10 23:55:00 2024 GMT
            Not After : May 10 00:00:00 2025 GMT
        Subject: CN=D5810F623247DE6B19ACEEB4DB316010498CF850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:e2:6c:d0:96:bf:0e:38:93:98:2a:b7:45:
                    94:1b:3b:fb:dd:f5:aa:51:86:df:d2:e5:78:61:4f:
                    3c:b5:34:27:cd:a3:83:3d:82:62:b2:77:a7:d3:b3:
                    cf:8f:48:bd:64:2e:17:18:11:95:75:f6:bf:0b:7b:
                    44:c8:ea:e3:fe:5a:27:5a:7b:93:6a:e6:22:16:23:
                    56:c6:9b:d6:58:4e:1a:95:38:72:52:18:da:0e:df:
                    a8:ad:45:96:22:c3:d9:9f:8e:be:53:22:bf:a2:d4:
                    30:0f:78:f1:73:f4:e2:0d:92:5e:0a:fe:42:a6:7c:
                    8d:17:1a:8a:2f:1a:ba:d1:12:0d:d7:15:ed:19:fa:
                    dd:9c:ef:a4:f4:b8:04:30:f1:39:33:f3:dc:94:19:
                    b4:18:eb:91:bf:e0:38:1d:bc:52:05:37:71:00:c2:
                    c4:20:49:df:ac:7c:63:b6:37:9c:51:43:bc:4b:ef:
                    10:d9:51:d7:83:1b:28:ae:11:af:cf:24:51:55:b1:
                    d9:27:85:04:90:fc:da:e0:a3:34:55:58:95:13:75:
                    0c:25:99:00:a5:e4:96:c2:01:97:2c:2b:e5:49:62:
                    a3:0e:ed:08:45:a7:59:10:d9:e5:50:7b:04:a0:5b:
                    dd:4a:dc:87:6d:62:6c:ec:64:ec:db:88:5e:cf:44:
                    04:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:81:0F:62:32:47:DE:6B:19:AC:EE:B4:DB:31:60:10:49:8C:F8:50
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313230313a31303a3a2f34382d3438203d3e203237363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1201:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:84:14:9b:69:e6:c6:13:29:37:ce:c4:6a:36:95:d5:33:2d:
         45:36:8e:2c:dd:a8:47:c3:ce:92:2d:5e:05:81:86:c9:d3:e1:
         ed:af:d5:17:be:c3:2c:ee:26:17:40:97:7d:5e:c3:37:0c:0d:
         85:52:07:63:08:eb:03:22:f2:73:99:9d:5a:52:14:5b:03:05:
         7f:23:ea:da:fc:36:76:96:85:27:25:3b:de:66:b1:11:3e:32:
         16:c2:c7:52:90:8e:b3:7b:0a:dc:26:eb:b2:66:9a:ee:b4:f0:
         18:8d:c0:cc:05:84:93:ad:c0:aa:52:8b:df:23:59:f7:73:99:
         f1:27:14:82:da:5f:8e:fa:e6:46:0c:c6:8f:ef:35:c3:45:c5:
         74:e8:a4:39:a5:1c:74:a6:c0:de:96:86:5e:58:8e:17:48:70:
         2d:e3:3c:ea:25:37:b4:a8:2d:88:4c:74:aa:67:9c:5f:84:4e:
         45:80:de:4d:d5:f8:0f:2d:80:f1:c5:e1:c3:77:a8:df:c5:01:
         29:f7:11:ab:10:eb:27:86:be:0b:c6:9a:d1:b5:55:2a:23:ac:
         9b:b8:23:ef:29:c9:a6:49:d9:55:98:b1:ea:8b:7e:2e:cc:58:
         d8:59:14:d0:4d:29:78:af:a7:14:9b:7a:dc:6a:d3:a4:da:61:
         c0:09:ff:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:18 2024 by rpki-client on console-fra.rpki-client.org