Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a623030303a3a2f34342d3434203d3e2038313531.roa
File:                     323030313a313235303a623030303a3a2f34342d3434203d3e2038313531.roa (raw, json)
Hash identifier:          AQVOklwy8OIJmQ/bjMEWrZ7gb6rKtKw81BhHzBOaVd0=
Subject key identifier:   B3:5D:28:7A:1E:68:75:A3:17:5A:FC:BB:91:30:5B:C9:6B:2E:16:79
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       14E6B1FECAED47C823B36F6654449A25D5D43D25
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a623030303a3a2f34342d3434203d3e2038313531.roa
Signing time:             Fri 30 Aug 2024 20:55:00 +0000
ROA not before:           Fri 30 Aug 2024 20:50:00 +0000
ROA not after:            Fri 29 Aug 2025 20:55:00 +0000
asID:                     8151
IP address blocks:        2001:1250:b000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e6:b1:fe:ca:ed:47:c8:23:b3:6f:66:54:44:9a:25:d5:d4:3d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Aug 30 20:50:00 2024 GMT
            Not After : Aug 29 20:55:00 2025 GMT
        Subject: CN=B35D287A1E6875A3175AFCBB91305BC96B2E1679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d6:ff:0b:55:b1:68:85:0d:7e:d1:8a:4b:8c:
                    1c:a9:a8:eb:f0:60:8d:dd:85:4e:ea:b0:3d:d1:82:
                    35:13:36:86:59:77:94:93:84:c2:36:6b:72:30:ac:
                    a6:4c:b9:4a:2e:4f:f2:c7:35:56:f4:e3:0b:09:79:
                    00:cc:63:e2:bc:d1:11:55:5c:4b:c3:87:f5:e6:d2:
                    e8:7a:6f:24:16:52:cf:8c:29:51:3b:7d:9e:ce:66:
                    cf:7f:35:60:ef:3d:f1:ff:ad:8d:bb:dd:75:5d:68:
                    6e:66:23:a7:22:01:e1:a5:d5:31:05:c9:02:31:35:
                    87:4f:17:55:02:97:ca:9f:47:a7:e1:49:4c:3b:2f:
                    a6:f5:ff:a0:0c:f1:1c:10:20:ec:09:9c:33:82:98:
                    ba:a3:f3:61:d0:5f:16:65:75:38:90:91:5a:b8:8a:
                    2b:09:a1:f7:7d:9c:78:38:db:90:77:90:a0:59:d4:
                    ea:02:b1:a9:30:19:b5:f9:d0:1d:03:e4:77:91:98:
                    22:db:aa:80:a0:64:fe:a2:17:51:7e:27:c8:4a:b7:
                    04:15:c8:c5:40:8c:41:22:c6:de:0d:e0:40:a0:35:
                    69:2b:89:10:09:35:62:5d:e6:d9:16:3c:56:8d:d8:
                    39:ec:d4:20:1c:6f:3f:89:1c:5a:71:24:79:74:ed:
                    f2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5D:28:7A:1E:68:75:A3:17:5A:FC:BB:91:30:5B:C9:6B:2E:16:79
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a623030303a3a2f34342d3434203d3e2038313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1250:b000::/44

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:6e:d2:e7:8a:80:d7:01:83:9b:dc:6f:7b:5f:c7:5f:55:
         1a:1c:90:36:f2:bd:e7:b2:5c:ee:14:01:25:ea:52:c0:e9:eb:
         a4:28:38:7e:e0:8f:f3:51:a1:bb:2b:1f:85:d1:0a:25:e4:03:
         e6:57:2f:e2:d8:8e:95:0e:67:2f:9c:98:e1:18:08:51:ab:2d:
         84:39:65:36:2f:57:21:e9:50:c2:65:96:ce:38:a3:b2:7c:88:
         08:c7:0e:e0:fe:20:3f:f8:d5:f9:10:f3:ae:e1:b0:6f:5d:b8:
         8b:e6:c9:bd:d7:c9:9c:f2:34:3b:e7:24:0f:89:12:ef:51:f3:
         74:08:71:25:91:54:71:b7:ed:33:b6:8c:97:44:f9:41:8e:1b:
         6c:92:8e:04:0b:85:f1:77:a3:43:7f:81:82:7d:ae:26:d6:1e:
         d2:e3:13:d8:6d:11:15:a3:f7:d0:01:56:1a:a8:5a:ad:29:26:
         da:3a:47:fb:c4:8c:a5:39:7f:a1:3e:ce:da:35:e3:1f:13:69:
         31:e4:52:02:8b:73:e2:14:f0:5a:0f:43:94:29:b6:00:4c:ae:
         65:c6:0c:1b:ee:43:31:9d:70:db:58:c3:02:b3:f1:5d:40:c8:
         37:66:65:7b:e7:88:7e:7c:e4:37:17:bc:4e:96:37:68:f1:81:
         e5:30:26:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org