Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a653330303a3a2f34342d3434203d3e203232383934.roa
File:                     323030313a313235303a653330303a3a2f34342d3434203d3e203232383934.roa (raw, json)
Hash identifier:          3BxFscd+cxdSHAv1upQcD2DQ4Qk/yW95GwcQPQkL8hw=
Subject key identifier:   8B:9F:B2:7A:89:44:D3:C3:D1:AE:07:5D:ED:B8:EE:64:BF:25:03:2E
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       765566CA1029A9E1861E33EB22E10BF702FF740D
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a653330303a3a2f34342d3434203d3e203232383934.roa
Signing time:             Sat 27 Apr 2024 01:45:00 +0000
ROA not before:           Sat 27 Apr 2024 01:40:00 +0000
ROA not after:            Sat 26 Apr 2025 01:45:00 +0000
asID:                     22894
IP address blocks:        2001:1250:e300::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:55:66:ca:10:29:a9:e1:86:1e:33:eb:22:e1:0b:f7:02:ff:74:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 27 01:40:00 2024 GMT
            Not After : Apr 26 01:45:00 2025 GMT
        Subject: CN=8B9FB27A8944D3C3D1AE075DEDB8EE64BF25032E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:04:2c:2e:8e:6a:36:bd:f9:78:81:ef:f4:
                    27:7f:64:1b:37:f2:38:f5:05:9c:72:62:37:eb:a3:
                    69:e2:93:35:27:e4:a9:8e:6f:74:79:81:fe:28:4e:
                    d9:72:52:09:82:f0:6f:60:32:46:5f:a3:d4:ba:f4:
                    99:04:93:19:2f:56:52:b9:d8:d6:90:bd:1c:7c:2f:
                    ca:36:a7:8a:fb:ae:e3:07:9d:00:c0:64:0a:30:76:
                    72:58:f8:d4:58:73:a2:8a:bf:b9:14:02:cc:e5:17:
                    ab:a1:60:a9:15:56:75:16:15:df:7c:9a:cd:03:c1:
                    40:7f:0e:04:7b:84:3d:cd:66:19:01:7f:33:5e:ea:
                    90:4c:e5:58:09:66:41:e4:6f:21:e3:d0:44:69:08:
                    23:c4:03:3f:83:c1:e8:64:3d:b4:c2:36:1f:a3:a7:
                    48:8a:cc:02:67:51:0f:3e:7e:15:38:03:d7:f4:02:
                    6e:46:09:7b:39:81:19:d1:91:ed:b7:2d:a3:8b:e7:
                    b5:83:dd:56:03:6a:6f:87:19:a2:6e:7c:10:61:47:
                    b0:61:61:97:61:7a:48:93:30:46:84:2a:64:dd:4a:
                    cd:99:dd:29:48:b4:38:9a:93:f1:54:d9:88:cf:a3:
                    c6:b5:06:b9:60:b7:91:b6:84:98:f9:7e:35:3d:1c:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9F:B2:7A:89:44:D3:C3:D1:AE:07:5D:ED:B8:EE:64:BF:25:03:2E
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a653330303a3a2f34342d3434203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1250:e300::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:41:22:3d:82:ab:8a:bb:92:11:d7:17:33:b8:1c:9e:4b:07:
         5c:44:24:69:7c:5e:b4:b9:06:79:b5:2e:93:83:be:ac:35:2e:
         42:b7:37:02:f5:6c:e6:a5:0c:16:65:c7:6f:a0:72:55:35:c3:
         b7:2c:7f:35:67:68:72:10:b8:fc:d7:d8:55:6d:74:b9:3a:02:
         62:f0:7c:13:dd:4c:c0:5c:d1:a1:1b:46:e9:59:23:77:af:ce:
         33:7d:77:f0:2b:55:00:5a:8a:8c:4a:46:cc:94:ed:dc:dd:71:
         9e:4e:ed:95:c8:2f:c5:b9:03:24:1b:0f:b7:6b:8e:f6:8d:f0:
         5c:6a:ca:36:88:c8:68:7a:9e:bb:bf:40:ef:da:85:09:22:c7:
         18:7b:19:e7:39:64:83:42:35:ca:0d:21:b2:eb:ab:2e:e6:7c:
         b8:10:37:21:bd:b4:72:48:8b:1c:1f:cc:21:03:1a:c5:63:65:
         e6:af:18:86:97:bb:a6:29:5a:78:d5:48:07:c1:39:73:2a:f9:
         36:7b:a9:7d:6a:d4:b7:f7:ba:fe:ee:3b:88:89:71:78:9f:bf:
         dd:f9:61:00:36:a0:14:76:8c:12:b4:8e:a4:4b:70:a1:61:d5:
         10:c5:24:38:11:a0:b8:a1:fa:52:85:52:5b:2b:71:21:30:6a:
         4c:4e:db:49
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUdlVmyhApqeGGHjPrIuEL9wL/dA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4
OTM2NkYzMzAeFw0yNDA0MjcwMTQwMDBaFw0yNTA0MjYwMTQ1MDBaMDMxMTAvBgNV
BAMTKDhCOUZCMjdBODk0NEQzQzNEMUFFMDc1REVEQjhFRTY0QkYyNTAzMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGEgQsLo5qNr35eIHv9Cd/ZBs3
8jj1BZxyYjfro2nikzUn5KmOb3R5gf4oTtlyUgmC8G9gMkZfo9S69JkEkxkvVlK5
2NaQvRx8L8o2p4r7ruMHnQDAZAowdnJY+NRYc6KKv7kUAszlF6uhYKkVVnUWFd98
ms0DwUB/DgR7hD3NZhkBfzNe6pBM5VgJZkHkbyHj0ERpCCPEAz+DwehkPbTCNh+j
p0iKzAJnUQ8+fhU4A9f0Am5GCXs5gRnRke23LaOL57WD3VYDam+HGaJufBBhR7Bh
YZdhekiTMEaEKmTdSs2Z3SlItDiak/FU2YjPo8a1Brlgt5G2hJj5fjU9HBb3AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUi5+yeolE08PRrgdd7bjuZL8lAy4wHwYDVR0j
BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC
QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3
RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw
RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0NTMxQkFBMzg0RUY0RDkxMDc4QzEwNTI5MEM0RjBGQkMwNTIxMzhG
QzlCMjFFN0Q5MTJGQkU5QUE4QTdGMC8wLzMyMzAzMDMxM2EzMTMyMzUzMDNhNjUz
MzMwMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMjMyMzgzOTM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcEIAESUOMAMA0GCSqGSIb3DQEBCwUAA4IBAQBEQSI9gquKu5IR1xczuByeSwdc
RCRpfF60uQZ5tS6Tg76sNS5CtzcC9WzmpQwWZcdvoHJVNcO3LH81Z2hyELj819hV
bXS5OgJi8HwT3UzAXNGhG0bpWSN3r84zfXfwK1UAWoqMSkbMlO3c3XGeTu2VyC/F
uQMkGw+3a472jfBcaso2iMhoep67v0Dv2oUJIscYexnnOWSDQjXKDSGy66su5ny4
EDchvbRySIscH8whAxrFY2XmrxiGl7umKVp41UgHwTlzKvk2e6l9atS397r+7juI
iXF4n7/d+WEANqAUdowStI6kS3ChYdUQxSQ4EaC4ofpShVJbK3EhMGpMTttJ
-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:18 2024 by rpki-client on console-fra.rpki-client.org