Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313230313a3a2f34342d3434203d3e203238343938.roa
File:                     323030313a313230313a3a2f34342d3434203d3e203238343938.roa (raw, json)
Hash identifier:          z+us3r/PU6dBIIkeinqgTMgtI46BGNmGD3i4dMUwZYI=
Subject key identifier:   60:E4:F1:F3:82:3B:EA:A4:60:2E:AA:9F:C2:0A:15:94:77:B1:98:74
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       395F60BD15C354CF56E394A814E7A3ECC496417F
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313230313a3a2f34342d3434203d3e203238343938.roa
Signing time:             Fri 10 May 2024 23:55:00 +0000
ROA not before:           Fri 10 May 2024 23:50:00 +0000
ROA not after:            Fri 09 May 2025 23:55:00 +0000
asID:                     28498
IP address blocks:        2001:1201::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5f:60:bd:15:c3:54:cf:56:e3:94:a8:14:e7:a3:ec:c4:96:41:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: May 10 23:50:00 2024 GMT
            Not After : May  9 23:55:00 2025 GMT
        Subject: CN=60E4F1F3823BEAA4602EAA9FC20A159477B19874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:27:34:f5:71:34:4f:af:ad:09:05:8d:89:
                    38:fc:3b:ad:0c:01:31:84:5b:35:1c:a0:b2:78:1c:
                    44:cd:54:4f:40:b2:8c:5f:2a:4c:0b:31:1c:2e:8e:
                    3b:51:58:77:84:ba:85:e3:84:2b:ae:64:fd:24:90:
                    7f:ce:74:07:f1:59:b8:ff:b6:ef:52:36:82:04:25:
                    a3:6a:71:d0:3e:24:a4:5d:10:54:39:3b:3f:f4:82:
                    a1:93:c5:e1:9d:94:78:6a:c6:f3:68:9a:6b:f8:94:
                    ee:29:63:96:fd:9e:54:95:13:a5:d3:74:32:10:ac:
                    c0:13:d2:9a:b0:a3:fe:41:57:a3:58:40:64:b3:43:
                    83:67:99:17:e4:d1:45:26:d9:2e:76:77:00:02:10:
                    c6:fb:90:24:6f:e0:55:bc:e4:34:88:d8:b3:07:60:
                    f3:5d:62:f8:d2:fe:82:50:ad:62:78:eb:c1:ce:86:
                    cd:59:60:9d:b6:8a:e0:39:c0:f9:0a:13:4c:e5:15:
                    52:a8:e8:bc:65:bc:34:b2:4a:4a:d0:5d:a3:8f:7d:
                    3a:27:06:79:e5:60:13:fc:80:04:18:d1:27:e1:19:
                    32:cb:31:b3:36:ee:eb:21:0f:f5:86:2d:56:9d:93:
                    9c:20:71:cb:f2:55:c9:e6:9f:27:37:b2:25:a7:c4:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E4:F1:F3:82:3B:EA:A4:60:2E:AA:9F:C2:0A:15:94:77:B1:98:74
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313230313a3a2f34342d3434203d3e203238343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1201::/44

    Signature Algorithm: sha256WithRSAEncryption
         65:19:63:65:a5:19:d1:66:96:ce:fd:ba:34:62:47:d2:54:9d:
         38:52:ce:c0:c1:35:1e:09:71:60:8f:cb:fb:9f:85:c5:bb:54:
         04:ba:19:96:c5:4f:fc:d6:9a:47:df:a9:d9:72:f8:83:39:f8:
         c0:b3:96:8a:82:4b:2e:dd:35:fc:2d:2d:e8:cd:ae:e1:74:33:
         06:b8:23:25:a9:1e:e1:81:81:68:b6:c8:93:4e:8e:d4:27:ff:
         8c:be:67:8b:cb:b2:82:71:e2:5b:5a:ea:4d:0e:d4:bb:9d:1e:
         1a:77:1a:b7:0f:e0:e2:3a:cb:80:19:1d:2b:57:59:70:a9:9b:
         a8:6c:f0:ba:99:bb:14:56:32:70:e5:fd:38:e1:00:82:29:38:
         21:71:c1:54:f6:21:09:a0:32:67:4a:a0:13:69:e7:9a:8b:20:
         48:46:1c:71:7e:2d:88:9f:46:a5:95:0d:73:f5:c9:57:1f:1a:
         e4:02:d1:c7:fb:ed:fe:bf:36:75:0a:fe:fb:49:24:4b:0b:0d:
         35:d2:d1:d8:f5:c3:fe:9e:05:29:c2:05:5a:a1:e6:c8:f6:36:
         34:9f:5a:95:fd:46:d6:c4:33:60:ed:71:88:49:60:a8:ab:a9:
         01:be:95:a7:dc:00:d2:bc:37:6d:c2:53:f4:0f:f1:5f:d1:03:
         a1:8f:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:18 2024 by rpki-client on console-fra.rpki-client.org