Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a313030303a3a2f34342d3434203d3e203238353131.roa
File:                     323030313a313235303a313030303a3a2f34342d3434203d3e203238353131.roa (raw, json)
Hash identifier:          izQnK0QPeqbcZiSFqvAGHBmBl8xR1ASCgiZLjtECb/w=
Subject key identifier:   D8:C1:06:99:BF:21:5E:49:A2:5A:3F:B3:2F:2B:57:FB:7A:FA:33:9B
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       2C9D7F50610FC21EFE7F9ACB2C7C4587C9C953EB
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a313030303a3a2f34342d3434203d3e203238353131.roa
Signing time:             Fri 26 Apr 2024 22:35:00 +0000
ROA not before:           Fri 26 Apr 2024 22:30:00 +0000
ROA not after:            Fri 25 Apr 2025 22:35:00 +0000
asID:                     28511
IP address blocks:        2001:1250:1000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9d:7f:50:61:0f:c2:1e:fe:7f:9a:cb:2c:7c:45:87:c9:c9:53:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 22:30:00 2024 GMT
            Not After : Apr 25 22:35:00 2025 GMT
        Subject: CN=D8C10699BF215E49A25A3FB32F2B57FB7AFA339B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:31:73:83:85:43:aa:71:a2:99:bd:db:32:
                    83:23:20:53:8f:82:4b:20:67:ff:7f:eb:6f:d6:2c:
                    e5:97:00:7e:23:77:b4:70:64:bd:e0:59:5f:ff:5a:
                    6f:88:2e:83:08:73:18:b3:c3:5e:bc:f1:6b:e0:64:
                    45:51:e7:79:dc:d3:c1:df:a5:37:f8:6c:eb:f9:c3:
                    84:9d:9e:70:9c:56:ff:a3:89:90:cb:7f:10:d5:9d:
                    14:a6:cc:c6:86:97:98:87:2f:59:9f:55:87:89:61:
                    5d:be:52:2e:bd:50:05:d0:d7:57:7a:5d:ca:93:23:
                    1b:0e:29:9a:99:9e:16:f7:db:7a:66:68:9f:e7:69:
                    c8:91:22:4f:c0:d3:b6:e0:c4:7e:bc:01:8c:4c:d4:
                    3f:f1:4f:45:8d:72:7e:79:ea:53:30:47:f3:77:2a:
                    7f:4b:9b:19:5f:d3:1d:a7:9e:7f:3b:b6:76:a2:54:
                    b9:4b:4e:a6:5a:28:38:f8:9d:c3:ed:e6:5c:8a:9f:
                    28:cd:f6:dc:15:c1:35:4b:9d:00:bd:2d:d4:76:6f:
                    0a:8d:fc:f6:10:d4:1f:5e:05:55:5b:1e:cd:b1:ca:
                    5a:87:97:1f:2f:d1:f7:65:cd:a9:3c:7d:a0:5b:e8:
                    1e:48:31:f9:53:3f:08:d1:34:69:71:11:f8:65:07:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C1:06:99:BF:21:5E:49:A2:5A:3F:B3:2F:2B:57:FB:7A:FA:33:9B
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a313030303a3a2f34342d3434203d3e203238353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1250:1000::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:f8:b9:07:e1:be:ce:27:c5:8f:bd:c4:f9:65:e4:44:4a:d0:
         74:f6:26:1a:ed:08:e6:a8:26:f6:67:db:18:cd:37:4d:51:dd:
         b3:d7:83:9c:32:b1:8c:76:d3:45:9f:0c:61:7f:be:7a:26:d0:
         2d:2a:be:d9:b2:5b:a6:c9:d0:05:fd:e9:9c:a7:2b:6b:71:ab:
         ab:c9:ee:2d:ce:4c:de:e9:e7:85:c3:c8:c9:c2:02:d7:16:74:
         a2:d3:04:cf:cf:d9:3c:73:36:35:81:e8:84:0b:ed:d1:92:38:
         2a:40:16:e1:45:de:0c:91:4a:ec:66:1e:7a:e2:6a:23:b4:2b:
         8e:a0:78:27:0e:fa:8d:6c:f6:fa:69:c2:20:d7:99:f9:6d:5e:
         70:9b:53:23:f2:52:81:04:e8:20:09:6d:36:c6:d9:a9:da:00:
         7b:2e:aa:88:87:00:b2:ac:d6:96:ff:eb:26:ad:85:60:7b:e5:
         77:b4:17:94:b5:3d:81:cb:ae:5e:02:4a:55:22:2e:4d:d2:48:
         06:e1:a4:e7:1f:38:f2:04:94:50:a3:b0:42:bd:90:3e:38:89:
         81:b8:0f:87:ec:87:9f:b5:ff:1a:3a:44:4a:c0:6d:97:73:ac:
         fd:6c:8b:3b:6f:f4:6b:73:e2:71:e4:a0:35:44:0e:f3:31:95:
         0d:0d:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:36 2024 by rpki-client on console-ams.rpki-client.org