Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a613030303a3a2f34342d3434203d3e203232383934.roa
File:                     323030313a313235303a613030303a3a2f34342d3434203d3e203232383934.roa (raw, json)
Hash identifier:          P5iiOKKgjdanAQoJOCrMm/UtYaAhEPR8z4oK/59zg1Y=
Subject key identifier:   7C:2F:01:03:89:2B:FB:68:7F:FC:BE:BF:8B:F6:F4:36:DC:8E:8A:7D
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       2420A12A644A2A1CE67298C20051BE9BB6B1772A
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a613030303a3a2f34342d3434203d3e203232383934.roa
Signing time:             Fri 26 Apr 2024 22:35:04 +0000
ROA not before:           Fri 26 Apr 2024 22:30:04 +0000
ROA not after:            Fri 25 Apr 2025 22:35:04 +0000
asID:                     22894
IP address blocks:        2001:1250:a000::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:20:a1:2a:64:4a:2a:1c:e6:72:98:c2:00:51:be:9b:b6:b1:77:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 22:30:04 2024 GMT
            Not After : Apr 25 22:35:04 2025 GMT
        Subject: CN=7C2F0103892BFB687FFCBEBF8BF6F436DC8E8A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bc:02:68:c6:9a:80:12:10:b8:a7:5d:18:60:
                    9c:26:e7:f3:9c:a7:c2:6f:b6:e4:a8:a3:d1:f1:62:
                    9c:8f:6c:80:6a:d6:ed:cb:87:4a:83:b7:5f:31:45:
                    f2:cf:9a:ad:b2:b7:52:ea:55:36:b2:4f:13:c1:01:
                    b5:dc:47:9c:36:0f:53:87:03:2c:bf:a0:d6:a3:01:
                    ef:7e:89:41:85:3a:e9:b0:eb:92:02:74:66:12:cb:
                    34:b0:87:07:0c:af:7d:8e:8b:c0:e9:fe:b8:f7:65:
                    46:7b:e7:31:a0:78:92:71:27:1f:87:cf:38:ad:01:
                    8a:c7:df:6c:52:2d:67:6f:d8:21:05:b7:6c:db:f2:
                    e7:7f:ae:16:b1:8b:c0:34:33:92:95:47:3e:41:d1:
                    cb:5e:07:83:cc:14:2d:4e:24:93:d6:81:c0:15:1b:
                    6e:ac:78:dc:b3:f9:13:e1:b2:0c:bb:d3:d0:09:97:
                    8f:03:61:f6:70:06:73:bd:7b:a3:2b:8c:32:a8:62:
                    26:8a:23:7e:2c:fb:7f:99:49:00:e8:92:0e:c8:16:
                    be:ef:47:1d:01:f4:96:85:81:74:fa:20:d1:64:d8:
                    33:ff:26:a9:7b:50:fc:d4:01:bc:c1:20:5d:12:b6:
                    3a:57:cd:4f:6c:15:d6:13:00:c8:20:77:e3:44:a3:
                    87:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2F:01:03:89:2B:FB:68:7F:FC:BE:BF:8B:F6:F4:36:DC:8E:8A:7D
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a613030303a3a2f34342d3434203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1250:a000::/44

    Signature Algorithm: sha256WithRSAEncryption
         1f:2b:30:b4:65:aa:cd:2c:0b:4b:a9:07:49:8d:da:8c:03:74:
         76:8c:5d:e7:0d:ac:93:b5:1e:44:28:7d:18:1f:74:bd:ef:bf:
         06:44:ee:b6:24:0d:02:45:6b:a3:15:89:dd:1b:93:10:bc:76:
         bb:5c:38:9c:07:97:71:a3:10:ad:4c:f9:25:b5:ef:ad:f3:ad:
         05:77:7b:a8:52:e4:33:e1:75:0d:0c:dd:1c:38:2e:a8:e7:3e:
         8c:85:6e:a1:31:83:a7:09:47:42:03:96:5d:62:5f:2c:72:79:
         46:a7:97:d2:0f:a8:4b:e0:c3:d6:6e:8a:37:a5:8b:f6:47:e2:
         0a:5c:ad:cb:43:1c:f9:96:a2:3e:b3:0f:60:ac:32:26:a3:23:
         e8:35:9b:a9:2e:3e:85:16:b1:b8:af:7d:b4:19:28:9b:dd:04:
         f4:c7:51:28:a2:35:55:99:a2:23:41:ac:19:58:a4:79:68:6f:
         93:4f:a9:32:65:0f:ab:61:d2:4b:dd:15:93:92:b1:0c:f2:33:
         15:9a:b9:67:f0:37:e0:e4:cc:de:b4:a5:45:76:00:2f:d0:cf:
         7a:62:dc:56:bf:ef:97:a2:32:74:dc:f4:fe:ad:9f:22:6c:f5:
         3c:89:d1:76:59:63:00:42:14:1b:14:58:47:9f:51:18:be:0f:
         b3:88:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----