Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a666663303a3a2f34342d3434203d3e203232383934.roa
File:                     323030313a313235303a666663303a3a2f34342d3434203d3e203232383934.roa (raw, json)
Hash identifier:          ccDKnea8B5w24bdMZAu40GqvZyYzOuqvuKxXUXVhiMU=
Subject key identifier:   6B:B1:C9:A8:14:B6:0A:51:6F:E9:6C:0A:B3:EA:8E:77:C3:68:E8:BF
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       41E42C7DDAC1039A8C4C36A289E1AB7A672DE76D
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a666663303a3a2f34342d3434203d3e203232383934.roa
Signing time:             Sat 27 Apr 2024 01:45:00 +0000
ROA not before:           Sat 27 Apr 2024 01:40:00 +0000
ROA not after:            Sat 26 Apr 2025 01:45:00 +0000
asID:                     22894
IP address blocks:        2001:1250:ffc0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e4:2c:7d:da:c1:03:9a:8c:4c:36:a2:89:e1:ab:7a:67:2d:e7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 27 01:40:00 2024 GMT
            Not After : Apr 26 01:45:00 2025 GMT
        Subject: CN=6BB1C9A814B60A516FE96C0AB3EA8E77C368E8BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d9:73:b9:8a:7d:0c:d4:a8:a3:41:33:90:48:
                    7f:f2:81:7a:12:8d:cb:55:1d:df:e1:94:d1:a2:b7:
                    24:16:a2:87:fe:4d:26:4f:b5:02:9c:1a:74:3b:89:
                    88:06:a9:25:9a:8d:6c:f3:f7:1b:2f:52:67:ef:4e:
                    55:90:bc:cb:86:a0:b3:68:6f:76:c7:f7:c7:7f:27:
                    e0:cb:cf:2d:f9:bc:03:c2:e0:e7:85:a4:84:79:a1:
                    10:12:dc:bb:51:0f:bc:bb:4d:d2:01:de:7c:a4:7d:
                    10:71:c0:0a:d8:79:37:8f:80:2f:8e:78:1c:3c:1a:
                    dd:f2:21:ba:fc:38:ce:21:d8:2e:8a:d0:f2:00:d5:
                    83:40:da:e7:f2:ea:f0:53:99:fb:b4:17:3b:da:5e:
                    0b:db:72:4d:a5:c0:dc:36:fa:1f:ca:b1:c4:44:3e:
                    1e:23:d7:b8:95:d8:d3:b9:cc:14:79:5d:28:ea:2d:
                    76:ab:0c:60:a8:e6:8c:c2:16:dd:f1:8f:43:bc:9a:
                    9a:40:2b:0a:d4:56:62:0a:a2:6e:ea:f5:1e:db:18:
                    6e:33:b5:30:73:4e:8c:40:66:3f:05:06:89:ec:cb:
                    14:4c:a1:bd:2f:16:2a:32:d7:c2:72:30:29:42:63:
                    06:de:b3:09:cd:9c:93:08:04:7a:e1:2f:f3:0f:d7:
                    3c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B1:C9:A8:14:B6:0A:51:6F:E9:6C:0A:B3:EA:8E:77:C3:68:E8:BF
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a666663303a3a2f34342d3434203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1250:ffc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:e1:bf:24:c4:a7:9f:36:30:0a:9d:98:7c:6f:e9:c6:be:6c:
         ba:df:6b:5f:23:13:36:bd:34:4b:43:8f:60:82:50:fe:22:07:
         07:32:58:24:db:9c:ba:4d:e7:25:f5:ed:86:67:f9:8c:c1:68:
         6d:db:f4:6e:0c:0f:55:1f:58:9d:42:35:9a:db:ec:4e:34:16:
         00:30:db:c0:72:2f:12:9d:28:b8:c8:e8:9a:12:8d:90:e8:c3:
         66:4d:c9:fe:05:40:7d:84:c2:69:62:0f:d0:1b:fc:b0:37:1a:
         44:5a:30:36:89:f1:cb:dc:75:b3:21:0b:45:dd:22:3a:fa:8d:
         08:fd:b0:54:f4:8b:e5:f8:ea:34:69:ca:b8:a6:64:6b:2e:db:
         ee:f1:a9:ef:b6:aa:9a:32:d6:48:c3:5e:44:e3:98:de:9d:88:
         c3:0e:5a:92:68:d7:ef:12:5b:3b:9a:72:74:d1:90:e1:83:ed:
         e7:33:82:ff:72:e3:eb:42:bf:10:4f:71:1f:50:26:13:0c:aa:
         36:14:16:48:05:eb:99:b6:e1:7c:cf:ec:b6:f2:e6:5a:16:88:
         e4:a8:f8:0a:57:65:92:4f:71:81:fb:41:32:e6:d1:58:a2:3c:
         47:a8:08:8e:d6:28:bd:74:7a:57:02:74:61:e7:e5:3b:d2:ab:
         0e:d2:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:36 2024 by rpki-client on console-ams.rpki-client.org