Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313230313a31303a3a2f34342d3434203d3e203237363631.roa
File:                     323030313a313230313a31303a3a2f34342d3434203d3e203237363631.roa (raw, json)
Hash identifier:          Rz03SEIxcELnaOSKj9ALYHNmOVcm4stfDuyHcA7etR4=
Subject key identifier:   27:7B:C1:E3:F0:69:6F:31:A5:74:91:9F:96:F8:65:F6:E9:FC:49:9E
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       1598439586F87C9D1D7D77F4F432028674EB6188
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313230313a31303a3a2f34342d3434203d3e203237363631.roa
Signing time:             Sat 11 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 23:55:00 +0000
ROA not after:            Sat 10 May 2025 00:00:00 +0000
asID:                     27661
IP address blocks:        2001:1201:10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:98:43:95:86:f8:7c:9d:1d:7d:77:f4:f4:32:02:86:74:eb:61:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: May 10 23:55:00 2024 GMT
            Not After : May 10 00:00:00 2025 GMT
        Subject: CN=277BC1E3F0696F31A574919F96F865F6E9FC499E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:1f:ec:f6:98:dd:93:d6:10:81:84:4d:e9:
                    d6:47:f3:78:16:66:42:3a:b3:e4:29:67:1b:29:31:
                    89:25:d8:33:36:0d:32:96:77:81:97:6d:70:b5:22:
                    f6:1f:97:68:bc:f2:3a:1e:95:e5:e1:df:2f:62:2e:
                    fb:ee:75:b3:36:5e:ca:90:0e:a2:f5:37:45:9f:dc:
                    58:d8:b6:4f:89:4f:d0:aa:e9:73:ad:62:2e:3a:cf:
                    c3:fe:6f:0a:ea:3c:20:e2:18:ce:f4:e2:87:b4:3a:
                    25:de:db:ba:73:6e:6f:a3:aa:13:05:72:c2:33:f2:
                    35:51:3d:44:56:73:8f:e8:81:2d:b8:e7:3d:16:53:
                    4e:3d:a8:85:84:73:30:17:9d:a6:02:b9:a6:ca:b7:
                    00:a3:6d:d8:25:f9:8d:29:4b:9e:2d:69:66:da:84:
                    9b:2e:8e:02:d9:71:50:04:22:d4:b2:c5:47:a2:de:
                    5d:91:1c:67:5a:4c:b9:0c:bb:27:d0:e7:d3:f9:0b:
                    00:b6:f7:10:d4:37:0c:06:68:7a:7d:97:8b:1d:3f:
                    47:bc:70:e7:ae:39:d7:b9:44:c3:14:f5:33:c1:20:
                    eb:39:19:4b:ea:0d:a0:da:65:44:ed:1c:e9:60:52:
                    7a:0e:9e:7a:a0:75:96:e3:7a:37:ce:31:db:67:ab:
                    24:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7B:C1:E3:F0:69:6F:31:A5:74:91:9F:96:F8:65:F6:E9:FC:49:9E
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313230313a31303a3a2f34342d3434203d3e203237363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1201:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:cc:8d:a1:19:e7:a0:7b:59:02:84:b4:9c:46:2f:46:1b:15:
         23:78:ca:51:4f:2e:e2:5f:ee:9c:65:10:fb:ad:82:d4:76:6b:
         7b:fb:ba:f4:3f:46:e8:b4:50:ac:dd:91:ac:98:4c:fe:ce:6d:
         fc:f8:b5:1c:23:f8:28:05:1f:61:96:a1:68:f0:1e:99:a6:27:
         dd:99:a8:3f:cb:cd:03:8b:0c:9f:3a:de:ca:f3:5b:0f:4c:12:
         35:65:6e:6a:88:2c:c7:fc:21:78:ab:f5:53:b3:df:a6:8d:54:
         13:22:3d:c8:78:4b:53:52:c4:1c:b8:d5:4f:16:5e:c8:bb:cf:
         7f:b4:ee:74:d9:ea:80:fe:2f:0d:aa:a4:7f:69:d5:8b:17:9a:
         41:5d:98:88:ba:7d:2e:4a:e5:95:df:9c:60:4b:2d:51:60:1f:
         4f:32:0d:74:09:9b:4c:f3:93:52:76:f2:90:a2:1c:12:03:05:
         30:01:1b:48:8c:df:c1:95:c8:c2:8c:00:13:23:8c:0c:11:51:
         ad:10:c0:77:ed:eb:af:63:14:ec:e9:6d:98:49:86:dd:02:11:
         59:8f:e4:ae:ed:df:87:4d:81:b5:78:d2:d1:e6:74:e5:64:0a:
         f4:47:69:ec:74:84:df:80:e4:aa:c2:91:20:1f:07:08:77:f5:
         da:c3:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:44 2024 by rpki-client on console-fra.rpki-client.org