Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a653230303a3a2f34342d3434203d3e2038313531.roa
File:                     323030313a313235303a653230303a3a2f34342d3434203d3e2038313531.roa (raw, json)
Hash identifier:          V3fo+PqIieQ532suNDegN4CBOzv3BIAJRqSqY7jyMDU=
Subject key identifier:   B7:86:F5:96:CC:2B:32:7A:55:5B:95:25:87:B6:81:DC:9D:FD:23:B6
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       7197158C704ACCD155FBCB6B2E0A762F22E58FA5
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a653230303a3a2f34342d3434203d3e2038313531.roa
Signing time:             Fri 30 Aug 2024 21:00:01 +0000
ROA not before:           Fri 30 Aug 2024 20:55:01 +0000
ROA not after:            Fri 29 Aug 2025 21:00:01 +0000
asID:                     8151
IP address blocks:        2001:1250:e200::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:97:15:8c:70:4a:cc:d1:55:fb:cb:6b:2e:0a:76:2f:22:e5:8f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Aug 30 20:55:01 2024 GMT
            Not After : Aug 29 21:00:01 2025 GMT
        Subject: CN=B786F596CC2B327A555B952587B681DC9DFD23B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:93:e6:7d:11:d4:44:65:66:cf:1d:ff:97:d8:
                    fb:8f:7e:ae:f6:d8:34:19:b5:e6:77:f2:99:a2:b2:
                    70:5c:d4:4a:09:a9:d2:ea:1a:6a:2c:1c:16:56:3e:
                    db:6c:5b:d5:3d:46:f2:aa:99:75:e9:2e:12:61:28:
                    c1:78:5d:26:b6:60:45:bc:11:cd:d6:c1:18:db:fc:
                    fa:73:8e:c1:00:39:fc:0b:42:86:86:f8:8f:33:67:
                    0f:95:a5:3c:13:ec:f8:86:bf:c9:64:f3:18:cc:1c:
                    c1:50:4c:d5:0f:f7:d5:2a:d1:a8:72:03:1a:4a:66:
                    4c:39:35:54:39:5a:0f:e4:0f:fb:3d:67:5e:1c:88:
                    eb:56:3a:02:8b:99:65:3a:fd:ff:b0:a0:27:6b:ca:
                    5f:63:ff:92:87:07:9b:82:21:de:23:79:55:de:80:
                    38:e4:11:96:8c:21:7f:36:36:e6:ac:3a:13:3a:6e:
                    24:a2:12:99:da:04:71:d6:dc:be:02:47:b8:88:f1:
                    cf:f0:fb:45:98:09:8f:fb:08:0c:89:af:a3:46:6e:
                    1f:01:96:84:82:43:b7:89:cc:50:df:2c:ad:f9:66:
                    6c:65:5a:34:7f:58:05:b7:73:0a:74:30:b1:fa:8b:
                    81:ef:9d:f7:83:c0:40:8a:f7:32:f9:26:19:cb:9a:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:86:F5:96:CC:2B:32:7A:55:5B:95:25:87:B6:81:DC:9D:FD:23:B6
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a653230303a3a2f34342d3434203d3e2038313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1250:e200::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:12:ef:ca:91:24:dc:d0:26:fd:7e:e4:0c:e5:34:e3:9e:78:
         f8:8f:1d:d9:f6:a6:f9:94:14:e6:2b:f8:b6:b0:f0:cb:a3:1b:
         9a:53:b4:ff:57:e2:7f:82:71:0d:0a:c8:26:ec:67:fc:5d:c9:
         a6:02:8e:76:69:b2:25:11:9b:6f:b7:59:62:f2:c9:4b:98:44:
         c2:b9:4a:07:70:4f:bd:98:ad:41:66:ee:b5:af:b5:2e:3b:da:
         80:7c:38:13:19:10:90:7e:ab:ab:e4:44:eb:97:97:3d:2d:85:
         67:0e:50:55:23:91:90:9a:ed:7c:95:b3:ef:f8:75:88:12:31:
         3b:7c:ef:30:a9:bc:3f:03:9c:5f:46:06:af:48:18:6a:b5:f1:
         68:73:6e:b8:f8:4b:4d:fc:14:bb:d0:fd:d2:29:70:88:15:ea:
         e7:16:59:de:c1:0c:f4:f6:cb:cd:ea:1d:35:49:ef:d3:f8:8a:
         2f:5b:99:81:4a:d7:a6:b6:61:38:d0:e1:e7:ed:57:47:d5:93:
         7b:dc:5f:b6:2c:7f:46:5c:1c:89:33:d3:1c:1d:82:4b:39:e7:
         5e:81:7b:a0:f6:51:3f:ab:fb:a4:06:af:e5:d9:21:51:2b:d4:
         99:f0:ed:1e:f8:e9:fd:38:36:63:11:3e:ed:b1:48:c8:13:de:
         2c:ec:05:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:18 2024 by rpki-client on console-fra.rpki-client.org