Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a633030303a3a2f34342d3434203d3e203238353131.roa
File:                     323030313a313235303a633030303a3a2f34342d3434203d3e203238353131.roa (raw, json)
Hash identifier:          Z5Po8HBsW9G3zwf3Imb6nJvz19dWt5TdkkipJ9Y5Cmc=
Subject key identifier:   8E:40:C8:34:7F:53:C3:5D:B4:E8:F0:0B:DD:1F:75:F7:01:AA:C2:37
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       753551D58CA59E274B3E1650ADF6CB13079D13EE
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a633030303a3a2f34342d3434203d3e203238353131.roa
Signing time:             Fri 26 Apr 2024 22:35:01 +0000
ROA not before:           Fri 26 Apr 2024 22:30:01 +0000
ROA not after:            Fri 25 Apr 2025 22:35:01 +0000
asID:                     28511
IP address blocks:        2001:1250:c000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:35:51:d5:8c:a5:9e:27:4b:3e:16:50:ad:f6:cb:13:07:9d:13:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 22:30:01 2024 GMT
            Not After : Apr 25 22:35:01 2025 GMT
        Subject: CN=8E40C8347F53C35DB4E8F00BDD1F75F701AAC237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:98:4a:2f:d3:89:d1:13:73:2c:a8:c7:4c:
                    c6:5c:d5:8b:eb:cd:b0:fa:e1:0a:e7:a2:de:5c:75:
                    9c:63:f6:d6:14:ae:8f:65:55:40:c5:f0:3e:8b:e0:
                    d8:cd:84:23:78:23:70:da:0a:69:81:39:0e:38:0f:
                    58:37:7d:19:e9:de:63:91:14:4c:4b:ec:5d:af:39:
                    e8:8a:6d:1d:97:0a:14:c4:74:fd:78:a0:2d:2a:c0:
                    70:a7:e9:86:d2:b1:83:c3:7b:66:65:cc:5a:bc:0b:
                    b1:71:8d:f7:b5:f8:f8:bc:f1:2a:4c:fd:74:a7:00:
                    69:59:db:1b:35:12:e0:a7:33:8c:e1:1a:62:07:54:
                    b9:65:73:81:bf:73:32:24:04:75:aa:b3:50:a0:de:
                    db:95:39:d6:64:b0:ed:97:14:49:b2:3f:31:b5:36:
                    fb:53:d5:07:65:f0:fe:83:ce:e7:4a:43:1d:c2:29:
                    05:cd:3b:a8:d5:31:00:b9:de:e5:98:45:0a:a5:94:
                    37:98:3c:12:62:ba:19:75:aa:7d:a9:87:72:05:00:
                    e7:ae:5b:bf:12:fd:99:bc:7b:6f:a8:e9:8a:5b:db:
                    9d:dc:f3:f4:20:1f:41:69:9f:2c:43:ac:f2:e9:6e:
                    de:cc:ad:42:dd:b9:73:3b:b2:79:59:62:f7:e7:bc:
                    f1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:40:C8:34:7F:53:C3:5D:B4:E8:F0:0B:DD:1F:75:F7:01:AA:C2:37
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a633030303a3a2f34342d3434203d3e203238353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1250:c000::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:35:e9:02:49:77:12:4a:f1:00:64:fe:4b:50:51:f3:94:34:
         1b:b7:c1:02:21:10:3f:7b:4b:12:76:f5:06:75:d1:81:ac:18:
         a8:43:fb:2c:ca:c0:6a:3c:d2:ec:c0:06:af:e4:13:95:13:04:
         96:e6:90:20:3f:f4:56:53:67:e3:8b:66:c3:b6:ae:b3:1e:36:
         24:0c:83:75:a9:60:b0:1d:25:1b:36:ad:a8:fc:b8:4f:4e:b0:
         7c:3a:12:76:e7:c6:07:82:89:73:9d:7c:c1:0f:ca:74:96:84:
         da:8d:23:6d:f5:a0:52:b8:ce:dc:b0:22:30:49:0f:b7:5a:5e:
         b3:de:b7:b6:ca:eb:0d:21:c7:c3:96:a7:9d:e6:63:c5:89:77:
         54:9b:06:23:8b:71:00:fd:e9:34:34:44:a1:40:4c:90:e3:6e:
         48:a4:c8:4a:c0:64:05:aa:41:15:08:2f:7a:9f:d2:9a:86:92:
         81:2a:fd:5a:e6:c6:e8:3f:a2:f6:22:5f:c6:6e:5f:71:73:ea:
         2f:49:f0:7e:17:42:6b:e7:d7:ba:96:e0:cb:0e:18:a0:6a:5d:
         46:ce:b8:90:97:ef:09:20:a6:dc:c5:42:a5:15:b4:bb:1e:f2:
         9c:d3:c9:96:69:8e:e6:ce:d2:4a:73:60:a2:34:6b:7c:06:ea:
         e3:c8:70:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:18 2024 by rpki-client on console-fra.rpki-client.org