Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a633030303a3a2f34342d3434203d3e2038313531.roa
File:                     323030313a313235303a633030303a3a2f34342d3434203d3e2038313531.roa (raw, json)
Hash identifier:          8EaJBiwtbl9OqlgcurOgih7GKOaPEYnpaSII9s+z6z4=
Subject key identifier:   7E:5C:20:CF:41:C7:33:3D:7C:C7:7C:65:29:E7:A2:31:27:50:5E:8A
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       478B716BC13FCA328F7096B4B8C8AB27F1209B3D
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a633030303a3a2f34342d3434203d3e2038313531.roa
Signing time:             Fri 30 Aug 2024 20:55:00 +0000
ROA not before:           Fri 30 Aug 2024 20:50:00 +0000
ROA not after:            Fri 29 Aug 2025 20:55:00 +0000
asID:                     8151
IP address blocks:        2001:1250:c000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8b:71:6b:c1:3f:ca:32:8f:70:96:b4:b8:c8:ab:27:f1:20:9b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Aug 30 20:50:00 2024 GMT
            Not After : Aug 29 20:55:00 2025 GMT
        Subject: CN=7E5C20CF41C7333D7CC77C6529E7A23127505E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:24:b7:df:95:79:de:6c:65:77:1b:c0:36:
                    b2:b8:ad:c4:0c:1d:ae:85:1f:c8:29:4c:42:65:90:
                    40:83:e9:bb:cb:84:ca:6a:b1:2b:00:73:c7:fe:69:
                    3a:34:ec:a7:7c:65:d6:e0:25:8b:5c:37:55:d0:7a:
                    f6:13:f7:fc:b7:20:b6:62:27:40:c8:ac:e3:dd:9e:
                    4e:a1:88:32:3b:02:3a:e7:64:9e:c4:78:f9:77:8d:
                    5b:ce:7c:62:26:bb:0d:58:2d:8b:ae:88:b1:92:63:
                    5c:0c:5d:34:35:d9:35:4d:cb:e2:36:bf:02:28:1d:
                    40:f5:05:07:90:84:a5:1a:d1:d6:cd:4e:ed:87:81:
                    ea:92:62:f1:89:f6:c8:97:42:bf:9d:56:36:8f:37:
                    1a:a9:81:91:92:ef:1c:42:3e:fc:0a:5c:58:36:b3:
                    f1:52:a8:cc:3b:51:9c:56:5e:bf:d3:bf:16:3b:58:
                    1e:66:b5:78:67:a3:55:7d:a1:96:fd:f1:f6:6e:53:
                    10:6f:b4:06:14:41:e5:84:e0:43:d8:33:5a:b9:7a:
                    f4:82:b0:c2:7e:2f:d5:1a:de:a9:7c:39:7b:56:82:
                    d3:b3:34:d3:a9:a2:2a:60:3f:64:f7:0c:ce:02:ff:
                    c4:a5:82:0f:08:29:16:ab:c6:f3:5b:a9:3d:22:f1:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5C:20:CF:41:C7:33:3D:7C:C7:7C:65:29:E7:A2:31:27:50:5E:8A
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a633030303a3a2f34342d3434203d3e2038313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1250:c000::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:69:6e:b6:79:29:7a:e7:1c:e8:c6:7a:f7:81:85:15:77:de:
         7f:d7:55:0c:70:3d:75:b3:ee:30:ea:52:48:28:d4:c9:f3:0d:
         f0:80:d6:57:8b:9e:22:e2:fe:e8:e8:1e:ed:76:c2:5c:96:7b:
         d7:88:c6:50:e3:9c:86:e6:cd:67:c8:2a:13:af:02:bb:d8:82:
         02:3d:15:c6:6f:75:6c:9a:fd:48:72:d3:5c:b5:b1:86:14:b2:
         88:69:50:95:7b:b2:f1:87:6a:93:c4:69:2f:5c:7a:4b:9c:fc:
         58:28:e4:d8:fb:4b:89:01:d6:11:81:0f:67:75:22:ba:65:58:
         e1:c6:b2:79:da:68:39:51:e6:29:ba:52:75:5c:64:ea:11:76:
         be:21:6b:a7:f5:e4:ca:be:3c:72:bd:04:55:93:8b:ab:1c:f5:
         bb:6a:ce:96:ba:db:f5:ba:98:f5:3b:6f:56:e3:a9:b2:22:b4:
         1d:34:70:08:49:98:21:f3:ab:aa:85:79:83:47:9b:1c:72:fa:
         62:f3:ee:04:a8:fb:c6:3e:6e:0b:af:4a:1f:78:95:7d:8e:d4:
         46:a7:ea:93:93:bf:f6:b8:2e:6c:c8:07:c6:2a:ea:01:10:c4:
         69:ac:5b:79:c7:90:26:2d:23:d5:80:ba:a3:25:a3:f7:f8:65:
         96:4a:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:36 2024 by rpki-client on console-ams.rpki-client.org