Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a643030323a3a2f34382d3634203d3e203233303331.roa
File:                     323030313a313362303a643030323a3a2f34382d3634203d3e203233303331.roa (raw, json)
Hash identifier:          XndmS0FxYr1BkoZZYPCVm6rOjE1UwjIHFUyGnIJSvZg=
Subject key identifier:   87:73:0A:9C:4D:EB:EB:27:54:0D:8B:28:AC:73:B9:AC:EE:D2:9F:94
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       0445AB8D3AF0CD3C312614B24EDAAB7BDAA9110A
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a643030323a3a2f34382d3634203d3e203233303331.roa
Signing time:             Tue 04 Feb 2025 18:41:43 +0000
ROA not before:           Tue 04 Feb 2025 18:36:43 +0000
ROA not after:            Tue 03 Feb 2026 18:41:43 +0000
asID:                     23031
IP address blocks:        2001:13b0:d002::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:45:ab:8d:3a:f0:cd:3c:31:26:14:b2:4e:da:ab:7b:da:a9:11:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:43 2025 GMT
            Not After : Feb  3 18:41:43 2026 GMT
        Subject: CN=87730A9C4DEBEB27540D8B28AC73B9ACEED29F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:10:a7:ba:2f:2c:d3:de:5a:bd:df:52:d9:83:
                    34:2a:b6:71:22:17:24:e4:21:b9:cc:9a:61:8e:a3:
                    f0:53:f4:aa:71:ce:87:eb:c1:e2:86:4b:e3:21:9e:
                    62:b1:f2:54:22:81:16:fa:65:df:54:5e:a9:76:d9:
                    8a:0d:11:91:3b:76:b2:90:5e:d6:76:5f:fd:de:e1:
                    fb:2f:d4:58:2a:3f:6c:4b:92:e9:78:cb:32:28:47:
                    b7:2e:20:00:0b:b5:2e:f2:a8:67:4e:64:11:6c:42:
                    74:09:f6:ed:29:34:68:e6:73:e1:36:fa:09:29:ca:
                    8c:70:34:39:9d:51:6f:19:f4:38:c0:06:f7:65:f5:
                    88:5a:9b:c5:ef:6f:9c:f0:48:79:c6:ea:3f:14:43:
                    05:53:00:e5:82:1d:41:ad:1a:ac:88:17:f1:c7:65:
                    2a:9c:da:b9:b1:84:2a:91:3a:c6:15:32:ee:5b:3f:
                    72:a9:56:7d:8b:1d:82:3c:9f:dc:6b:33:e4:69:c4:
                    a0:32:e2:52:d4:3e:1d:d3:2c:bc:f8:0c:b4:23:e3:
                    6b:40:f1:a9:bf:40:2e:04:42:68:48:f4:49:33:4d:
                    8c:21:cb:bd:40:bd:69:7d:16:2f:cd:c3:30:39:5d:
                    e6:ba:b5:44:d2:c4:d1:2d:c3:d3:b0:ca:28:2c:c5:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:73:0A:9C:4D:EB:EB:27:54:0D:8B:28:AC:73:B9:AC:EE:D2:9F:94
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a643030323a3a2f34382d3634203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13b0:d002::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:c4:2f:7e:97:30:1d:f4:dd:c8:cd:c2:15:38:e1:62:d0:d1:
         e4:2e:11:07:bd:34:6a:c5:11:40:75:aa:91:99:74:25:26:14:
         14:9f:5b:d8:a5:ac:4c:ee:54:59:9e:a4:b0:75:c4:1f:84:35:
         29:9c:71:5b:44:7a:e2:69:c9:62:d9:e6:ea:82:a0:e1:c3:13:
         5c:71:d7:db:ba:43:0b:3e:2b:50:1b:1e:f0:6d:49:e5:d6:5e:
         bb:af:87:9e:fa:c2:8a:e0:d4:b6:b5:f5:cf:bb:da:b0:65:ff:
         71:73:d7:bb:f3:4d:bd:6a:e0:b2:df:9a:c2:75:8a:5c:ff:b4:
         4f:ae:7a:aa:40:ab:79:3c:8a:b4:2f:82:5f:e5:4f:cf:88:f0:
         83:f4:b8:bc:6d:96:a9:6b:39:60:89:76:77:ae:da:4f:67:18:
         2c:2d:06:96:97:0b:96:c3:74:94:b2:5c:23:98:c3:28:7b:cc:
         0b:dd:cd:90:55:65:ff:d5:d0:b6:59:ee:9d:ca:cd:57:96:36:
         df:90:ba:5e:85:8e:3c:1b:a7:20:7b:c8:39:09:df:24:a8:82:
         a1:e6:7d:4f:2e:24:79:27:04:10:4c:d5:26:8f:ac:fc:ae:2b:
         04:4c:04:8a:21:41:1d:f6:e9:bb:41:61:13:41:61:40:2d:d2:
         24:3b:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:31:52 2025 by rpki-client