Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a653230303a3a2f34342d3434203d3e203232383934.roa
File:                     323030313a313235303a653230303a3a2f34342d3434203d3e203232383934.roa (raw, json)
Hash identifier:          YBaZk4Kfys0+ZoEEBFLPnMPVuZlr7vvFT7Fd+a4OySw=
Subject key identifier:   80:38:C0:17:03:8C:F9:27:C9:73:8B:21:FC:DE:31:C9:87:7C:AA:9B
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       7F53E8F593B2DA4733114B1216802C9DBB479576
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a653230303a3a2f34342d3434203d3e203232383934.roa
Signing time:             Sat 27 Apr 2024 01:40:00 +0000
ROA not before:           Sat 27 Apr 2024 01:35:00 +0000
ROA not after:            Sat 26 Apr 2025 01:40:00 +0000
asID:                     22894
IP address blocks:        2001:1250:e200::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:53:e8:f5:93:b2:da:47:33:11:4b:12:16:80:2c:9d:bb:47:95:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 27 01:35:00 2024 GMT
            Not After : Apr 26 01:40:00 2025 GMT
        Subject: CN=8038C017038CF927C9738B21FCDE31C9877CAA9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:19:4a:14:f9:69:40:ac:20:e6:97:7c:52:90:
                    6e:e6:9d:0d:74:82:f7:61:0e:09:68:d2:55:b5:8f:
                    b6:8f:74:7e:69:ac:a4:0e:e9:f0:87:20:c9:36:50:
                    cd:5d:3a:3e:57:7a:bf:59:f8:a3:1d:f6:dc:32:bd:
                    50:d6:e5:97:3b:9c:73:cc:d7:b1:84:c3:39:3a:3a:
                    3e:1c:5f:b4:c5:c6:a7:f3:90:84:ce:ae:70:f6:56:
                    80:54:d4:db:74:62:2f:e4:08:e7:57:b2:e1:13:46:
                    ba:ad:a6:9e:ec:84:b8:73:35:35:0e:40:cf:6f:44:
                    da:b0:c6:4f:fb:b0:af:6d:f3:f0:13:9f:42:e6:85:
                    48:fd:68:88:ab:ec:67:ee:6c:90:40:a6:46:2b:6e:
                    bf:ee:66:ca:12:37:4a:ef:fe:48:52:d3:80:db:16:
                    78:f9:e0:89:dc:8d:21:0c:cf:7a:52:f6:3e:ca:2d:
                    e6:68:6c:f8:e3:89:b0:da:3f:66:7d:b1:e9:74:dc:
                    47:b9:b6:e6:61:c3:65:a8:4c:d6:12:69:75:77:23:
                    db:77:60:a0:63:a4:d4:bf:a1:a8:b6:8c:8c:03:62:
                    7b:8c:c0:72:97:c4:24:bf:c8:e7:13:ba:cd:cc:e3:
                    67:df:c6:67:0d:3b:5c:1f:60:12:e0:56:aa:7c:6e:
                    d4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:38:C0:17:03:8C:F9:27:C9:73:8B:21:FC:DE:31:C9:87:7C:AA:9B
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a653230303a3a2f34342d3434203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1250:e200::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:14:cf:22:cd:4e:08:98:9b:2b:f2:e5:1a:34:d5:86:77:f2:
         5b:03:77:61:15:50:b2:75:53:de:f0:5a:2d:1b:1f:1f:2e:e9:
         c2:ff:70:bd:0e:34:53:d6:ac:13:c6:5e:99:1e:d4:16:0c:fc:
         30:21:31:1c:37:64:4d:b4:d2:ef:b3:29:be:2d:b8:c9:5d:b8:
         d9:fd:ba:e9:55:42:8c:ac:8c:17:f8:4a:77:bb:bb:d3:cc:0a:
         ac:d1:85:8f:4e:38:27:d8:42:88:72:2e:0a:98:50:b1:8a:57:
         68:61:36:08:f5:41:90:36:08:5f:d1:8f:25:a7:5f:bc:95:a9:
         1f:a1:36:40:04:36:f1:c3:df:22:29:c7:99:21:b4:bc:f6:c1:
         db:73:8d:ae:07:48:b3:ba:7a:15:f2:bf:12:da:4f:05:66:6f:
         2c:84:a4:a5:00:be:5d:c8:a8:90:2e:14:40:1b:1f:5c:c7:62:
         eb:7e:22:8b:aa:2d:66:c6:18:da:b2:87:5d:6f:b2:3b:4f:14:
         45:81:51:6e:a6:9f:5b:a5:25:08:2e:27:1a:b7:36:52:b6:b5:
         74:38:d7:d8:45:04:1f:71:66:f8:44:d0:d8:06:ea:bf:72:48:
         67:38:49:38:a8:01:24:c6:ce:15:4e:a6:0d:d8:8b:68:0a:c2:
         ab:44:fc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:18 2024 by rpki-client on console-fra.rpki-client.org