Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a633030303a3a2f34342d3434203d3e203232383934.roa
File:                     323030313a313235303a633030303a3a2f34342d3434203d3e203232383934.roa (raw, json)
Hash identifier:          pxUDAASGpiBJiDAO+QXfMjhj0ENjEtbGlPe1UExVP5w=
Subject key identifier:   78:03:30:61:92:7E:25:EF:B8:11:D9:74:50:C6:66:C2:8E:09:8E:A2
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       6DF51FC44DAB5010D5F569EF5B5E7E9FCFCE8282
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a633030303a3a2f34342d3434203d3e203232383934.roa
Signing time:             Fri 26 Apr 2024 22:35:03 +0000
ROA not before:           Fri 26 Apr 2024 22:30:03 +0000
ROA not after:            Fri 25 Apr 2025 22:35:03 +0000
asID:                     22894
IP address blocks:        2001:1250:c000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f5:1f:c4:4d:ab:50:10:d5:f5:69:ef:5b:5e:7e:9f:cf:ce:82:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 22:30:03 2024 GMT
            Not After : Apr 25 22:35:03 2025 GMT
        Subject: CN=78033061927E25EFB811D97450C666C28E098EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:cd:ab:b4:fc:ed:bb:29:41:37:19:fd:be:
                    e0:b1:04:11:33:66:92:1a:0c:7a:a1:60:8d:9d:d8:
                    10:3c:e7:98:53:bd:2c:23:75:c9:92:d8:33:01:4e:
                    3a:48:ae:6f:b8:bf:49:df:57:a3:b2:35:47:b6:4c:
                    2b:ca:0a:45:a1:2c:c3:77:3a:17:71:5f:44:b9:bc:
                    56:ae:a0:41:96:fc:b5:2d:fd:a8:11:03:45:b5:aa:
                    d2:f3:9d:f5:db:b2:e8:65:9f:4d:9a:db:c9:26:a1:
                    ec:55:d6:d2:46:ae:86:18:dd:a2:4c:f2:ac:34:15:
                    85:ad:2f:13:20:e9:cd:22:32:b9:39:09:24:70:bc:
                    99:98:fd:c6:c2:d5:90:61:2b:1e:fe:ab:79:00:c2:
                    bc:3d:f6:e6:e4:10:dd:5b:9c:f6:cf:03:54:70:3a:
                    85:ee:d3:13:f4:d8:50:93:e2:fc:cd:54:5e:1d:64:
                    d2:b3:18:f2:a9:57:ef:8f:a6:ad:29:6c:4b:9f:46:
                    89:93:00:12:32:35:42:c5:44:ca:bc:a2:66:f7:05:
                    b7:0e:4d:65:a9:bb:0d:79:8e:e3:da:ec:cc:f6:23:
                    ac:aa:69:29:51:3d:ae:6f:ad:d4:2e:ed:e9:9c:e1:
                    b5:39:b8:5c:5c:eb:53:ad:c9:9a:a3:67:5c:b3:71:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:03:30:61:92:7E:25:EF:B8:11:D9:74:50:C6:66:C2:8E:09:8E:A2
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a633030303a3a2f34342d3434203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1250:c000::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:70:5f:a9:b4:eb:46:1a:fc:6a:9b:8c:71:da:a9:63:bd:4c:
         52:34:81:9a:4f:14:05:ec:0b:4e:d2:f3:60:a1:31:c5:17:29:
         10:ad:b9:d0:dd:88:af:21:9d:da:3c:84:63:d1:c6:b5:bb:21:
         a4:97:a7:5f:07:a0:63:23:cf:89:e4:8c:08:7f:9e:e6:61:50:
         11:70:6a:c9:eb:bc:9b:70:62:82:c0:14:e0:fc:bf:8c:c3:8c:
         02:f1:9f:f3:c4:42:90:a0:e7:2a:59:dc:2c:72:50:dd:4a:02:
         4a:a9:72:d0:73:8c:ef:8a:a9:a6:c4:0c:4f:a7:27:c5:b5:bb:
         90:16:09:18:86:3e:4c:94:64:c6:06:7d:5f:b3:87:9d:e2:87:
         96:c6:4a:b0:38:53:7f:c1:3d:3f:08:b3:5b:dc:2d:11:56:2a:
         8e:ee:8d:cf:09:42:89:5d:f6:cb:31:da:7f:39:09:96:fa:c0:
         ef:81:a3:dd:ed:ae:1b:7f:8a:18:79:5d:2e:2b:6b:bb:7d:f1:
         e6:d8:8b:90:78:20:ce:0e:d1:aa:4a:b0:06:c6:83:0d:bb:75:
         e5:2f:a4:33:e7:a8:dd:a2:1f:23:a6:0d:60:f8:ec:e2:2d:8a:
         33:da:1b:24:dd:6a:15:4c:25:76:b0:64:91:0e:90:eb:99:39:
         c5:37:51:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:18 2024 by rpki-client on console-fra.rpki-client.org