Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313363373a373030303a3a2f34382d3438203d3e203238343938.roa
File:                     323030313a313363373a373030303a3a2f34382d3438203d3e203238343938.roa (raw, json)
Hash identifier:          2TPNo6SPUfwqc3PQ0l7uJEgr+31IBfugXnFPfYw0cTw=
Subject key identifier:   30:3C:90:6E:1F:E8:D7:25:E3:96:A9:EA:57:E7:99:51:CD:4D:E9:13
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       476B3EDC69B0753BDEF19E6DD455C8BFE002FE54
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313363373a373030303a3a2f34382d3438203d3e203238343938.roa
Signing time:             Fri 26 Apr 2024 23:45:00 +0000
ROA not before:           Fri 26 Apr 2024 23:40:00 +0000
ROA not after:            Fri 25 Apr 2025 23:45:00 +0000
asID:                     28498
IP address blocks:        2001:13c7:7000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6b:3e:dc:69:b0:75:3b:de:f1:9e:6d:d4:55:c8:bf:e0:02:fe:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 23:40:00 2024 GMT
            Not After : Apr 25 23:45:00 2025 GMT
        Subject: CN=303C906E1FE8D725E396A9EA57E79951CD4DE913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:58:46:c5:05:8b:2b:9b:a0:78:b8:c6:c9:
                    66:7e:3a:6c:2c:46:7b:4a:3f:c6:7d:16:3a:30:cf:
                    ec:ed:63:a0:19:85:59:60:4a:7f:b4:35:7b:6e:9f:
                    2a:c6:d4:70:44:9d:c8:6f:44:cf:0d:f2:07:06:86:
                    66:23:32:48:37:59:fc:02:4d:c3:ee:65:45:42:e8:
                    00:fc:49:87:06:8f:63:b6:3d:cc:f1:3d:8b:17:36:
                    b4:30:96:58:97:4c:07:5f:37:c5:0b:e5:b5:fd:3b:
                    80:3c:f7:fe:fa:1f:b9:dd:0a:8d:ad:f2:32:22:f0:
                    a5:67:fc:44:98:55:ea:12:1e:45:fa:9c:be:5c:7b:
                    0a:02:80:a0:23:a4:5e:3c:41:14:81:5d:17:c9:56:
                    dc:de:e8:c7:75:56:28:a0:66:d6:67:8a:d7:a7:2c:
                    8d:03:0c:07:a3:7f:97:91:a2:50:e2:ef:c5:65:f8:
                    59:79:be:75:66:ae:62:f5:99:0e:63:78:c5:51:09:
                    8d:f3:4d:fd:cc:ac:8a:00:d9:2f:55:d0:03:8f:52:
                    2b:f6:d9:0c:de:53:c7:99:68:51:a1:fc:f2:51:c6:
                    1c:ba:55:7f:47:32:ff:76:4e:6d:cd:8b:d6:2e:25:
                    92:d4:a7:be:5b:3d:48:5e:8c:a5:20:da:51:43:95:
                    7c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3C:90:6E:1F:E8:D7:25:E3:96:A9:EA:57:E7:99:51:CD:4D:E9:13
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313363373a373030303a3a2f34382d3438203d3e203238343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:44:6c:e0:34:1a:74:5c:d7:c6:a2:2e:5f:82:42:e1:17:af:
         38:4c:1f:76:51:d3:a0:66:d4:21:0c:9c:f9:b5:4f:78:e5:c2:
         06:6e:91:28:cb:79:7d:a0:4f:ab:64:04:ed:c0:83:09:21:71:
         9b:ce:ba:06:f4:b5:58:a5:c5:bd:f6:47:d1:d7:d8:7f:5a:cc:
         1c:75:d5:4f:26:c6:27:05:d4:42:ec:1e:3c:d9:c3:09:5a:f2:
         46:55:3d:71:73:11:d6:52:1b:03:40:8e:71:f3:dc:a2:1c:39:
         ce:6c:2a:13:0e:3e:99:09:f6:9b:48:50:44:9a:1e:ca:79:75:
         f1:09:72:b8:72:f7:a3:d8:02:7d:bb:e9:10:f8:0b:22:85:e8:
         13:ae:f6:3b:45:a1:d7:f7:00:9c:e8:a2:b8:dc:b6:a0:ce:0d:
         d8:b7:e1:a3:c5:1a:6b:47:03:58:d8:f4:6d:1b:b9:21:37:9e:
         81:c0:04:e2:9b:4c:74:03:22:0b:43:cc:a0:68:d5:4d:c9:50:
         dd:c4:b3:ac:e3:5f:cc:c7:27:4f:d3:1c:0b:12:71:53:e9:b5:
         2a:fc:dd:65:0b:f4:be:9d:7d:77:33:32:46:b9:10:bc:23:b7:
         14:9f:23:5a:13:00:a0:5b:e0:22:16:3f:19:d8:40:b8:8a:ff:
         42:6b:a6:f3
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUR2s+3GmwdTve8Z5t1FXIv+AC/lQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4
OTM2NkYzMzAeFw0yNDA0MjYyMzQwMDBaFw0yNTA0MjUyMzQ1MDBaMDMxMTAvBgNV
BAMTKDMwM0M5MDZFMUZFOEQ3MjVFMzk2QTlFQTU3RTc5OTUxQ0Q0REU5MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVA1hGxQWLK5ugeLjGyWZ+Omws
RntKP8Z9Fjowz+ztY6AZhVlgSn+0NXtunyrG1HBEnchvRM8N8gcGhmYjMkg3WfwC
TcPuZUVC6AD8SYcGj2O2PczxPYsXNrQwlliXTAdfN8UL5bX9O4A89/76H7ndCo2t
8jIi8KVn/ESYVeoSHkX6nL5cewoCgKAjpF48QRSBXRfJVtze6Md1ViigZtZniten
LI0DDAejf5eRolDi78Vl+Fl5vnVmrmL1mQ5jeMVRCY3zTf3MrIoA2S9V0AOPUiv2
2QzeU8eZaFGh/PJRxhy6VX9HMv92Tm3Ni9YuJZLUp75bPUhejKUg2lFDlXyZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUMDyQbh/o1yXjlqnqV+eZUc1N6RMwHwYDVR0j
BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC
QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3
RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw
RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0NTMxQkFBMzg0RUY0RDkxMDc4QzEwNTI5MEM0RjBGQkMwNTIxMzhG
QzlCMjFFN0Q5MTJGQkU5QUE4QTdGMC8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzcz
MDMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM4MzQzOTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAIAETx3AAMA0GCSqGSIb3DQEBCwUAA4IBAQARRGzgNBp0XNfGoi5fgkLhF684
TB92UdOgZtQhDJz5tU945cIGbpEoy3l9oE+rZATtwIMJIXGbzroG9LVYpcW99kfR
19h/WswcddVPJsYnBdRC7B482cMJWvJGVT1xcxHWUhsDQI5x89yiHDnObCoTDj6Z
CfabSFBEmh7KeXXxCXK4cvej2AJ9u+kQ+AsihegTrvY7RaHX9wCc6KK43Lagzg3Y
t+GjxRprRwNY2PRtG7khN56BwATim0x0AyILQ8ygaNVNyVDdxLOs41/MxydP0xwL
EnFT6bUq/N1lC/S+nX13MzJGuRC8I7cUnyNaEwCgW+AiFj8Z2EC4iv9Ca6bz
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org