Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323830313a63343a63303a3a2f34342d3434203d3e203432.roa
File:                     323830313a63343a63303a3a2f34342d3434203d3e203432.roa (raw, json)
Hash identifier:          5+fhFQhrcDhnPts6Rv5EkZbWaNOEsW/Yg0TgLqgzMzo=
Subject key identifier:   E2:C8:AD:2A:33:3D:06:22:E5:46:C7:EB:BA:35:68:E2:66:F8:11:BE
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       1188A2431C25CAB4128A88BF6FD8E11E5622669B
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323830313a63343a63303a3a2f34342d3434203d3e203432.roa
Signing time:             Tue 05 Mar 2024 17:51:53 +0000
ROA not before:           Tue 05 Mar 2024 17:46:53 +0000
ROA not after:            Tue 04 Mar 2025 17:51:53 +0000
asID:                     42
IP address blocks:        2801:c4:c0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 00:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:88:a2:43:1c:25:ca:b4:12:8a:88:bf:6f:d8:e1:1e:56:22:66:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Mar  5 17:46:53 2024 GMT
            Not After : Mar  4 17:51:53 2025 GMT
        Subject: CN=E2C8AD2A333D0622E546C7EBBA3568E266F811BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:da:1e:c0:4d:6a:a8:39:95:d6:5a:f7:f6:
                    39:c6:5e:fb:71:83:ed:9a:99:a3:52:16:45:fa:e5:
                    01:d8:44:c9:82:45:5c:22:75:38:2e:4f:76:de:da:
                    89:18:30:fa:ff:a3:75:fc:88:bf:8c:a4:f6:57:17:
                    40:4d:d2:c9:d1:5a:b1:d0:de:5e:cd:04:e1:d3:1a:
                    44:5c:55:19:16:f6:08:76:18:8a:7e:12:06:18:97:
                    e9:90:c7:1e:a5:0e:85:84:25:78:04:21:7a:ac:1c:
                    74:9c:2f:6c:7a:c3:f6:5f:2f:5c:3d:67:b7:bc:c0:
                    16:f9:de:45:f1:07:e8:0e:cc:fe:ad:49:f4:87:f7:
                    25:07:08:d7:d3:15:c8:83:a8:4a:17:45:ee:77:e7:
                    83:67:9b:d7:5a:0b:b9:c7:ec:0f:aa:ba:3f:46:ef:
                    d5:92:5b:e9:bb:43:6a:f4:1b:32:f5:f2:ad:90:8f:
                    71:8b:a9:99:6d:a3:80:8a:d0:e7:e4:36:8d:4e:c7:
                    0a:07:3d:20:d9:10:c7:2b:9a:f8:c8:49:34:82:77:
                    b3:50:56:dd:69:7d:27:36:c5:59:de:7b:a2:be:a1:
                    7d:05:f4:9a:70:e8:dc:8b:03:20:4b:12:1c:56:aa:
                    26:1e:86:0e:3a:4e:7b:83:39:73:54:08:27:48:3e:
                    98:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C8:AD:2A:33:3D:06:22:E5:46:C7:EB:BA:35:68:E2:66:F8:11:BE
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323830313a63343a63303a3a2f34342d3434203d3e203432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:6d:ea:f6:7f:0c:c5:47:bb:eb:0b:9c:54:5c:0f:65:48:24:
         ff:a5:f5:06:55:e2:d9:38:45:8c:d0:e4:1f:5f:91:8d:ef:48:
         5b:e1:6a:f0:f7:d6:5e:4f:6f:98:0a:cd:18:9c:50:72:06:8e:
         fc:3c:f5:a3:37:5e:19:29:e1:06:89:41:83:6d:f6:95:dd:2d:
         41:74:ff:f2:0c:d7:5e:7d:23:c5:d5:39:12:ec:35:d1:9b:be:
         ae:f0:7b:4e:91:ba:53:8a:dd:71:7e:a0:b7:c6:49:a6:1c:52:
         ef:31:6c:a5:32:ac:0e:8f:b6:47:b9:e7:24:d6:71:bc:f7:5a:
         09:60:c6:22:b7:89:91:a8:85:3b:2e:63:1d:53:83:fc:55:d8:
         0f:f7:c8:99:e8:4a:d4:c4:83:0d:bd:67:43:92:81:cd:c1:c6:
         1a:03:7e:24:44:8c:a5:0c:e8:7d:eb:47:a6:94:95:c4:93:21:
         f2:77:a2:a4:5a:3e:cc:d8:bf:9f:b1:2e:ea:ae:e3:1c:a9:eb:
         b6:55:e9:1a:f3:2d:82:5f:92:b8:a3:f0:02:76:d8:0d:32:dd:
         41:33:81:89:00:2a:a9:0e:8a:66:54:d0:bc:47:73:fd:a5:d1:
         3c:ec:60:1f:ca:c5:fa:26:2f:de:2b:3f:34:5e:b2:67:f5:34:
         eb:05:b8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:05:17 2024 by rpki-client on console-ams.rpki-client.org