Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/323030313a313363373a366630303a3a2f34352d3438203d3e203237383134.roa
File:                     323030313a313363373a366630303a3a2f34352d3438203d3e203237383134.roa (raw, json)
Hash identifier:          dvasRthjTpELAgH1++fRKT1wUQjuZ6oHnSunAzPuHPs=
Subject key identifier:   BB:AB:C0:D0:0E:D9:9F:6C:C5:58:09:06:1A:B3:C9:27:D2:8D:71:E3
Certificate issuer:       /CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
Certificate serial:       6A2D036F0DAC53357644D2E93661142A71D1C4FF
Authority key identifier: 20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/323030313a313363373a366630303a3a2f34352d3438203d3e203237383134.roa
Signing time:             Tue 05 Mar 2024 18:22:45 +0000
ROA not before:           Tue 05 Mar 2024 18:17:45 +0000
ROA not after:            Tue 04 Mar 2025 18:22:45 +0000
asID:                     27814
IP address blocks:        2001:13c7:6f00::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2d:03:6f:0d:ac:53:35:76:44:d2:e9:36:61:14:2a:71:d1:c4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
        Validity
            Not Before: Mar  5 18:17:45 2024 GMT
            Not After : Mar  4 18:22:45 2025 GMT
        Subject: CN=BBABC0D00ED99F6CC55809061AB3C927D28D71E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:46:8d:32:6e:d7:6f:d1:2d:97:3e:42:a4:
                    49:3b:15:6b:94:f4:c7:c9:e7:fd:68:12:e1:5d:55:
                    23:c6:25:85:a2:10:3a:31:f5:96:1c:fe:96:98:71:
                    0f:e3:93:40:b8:f4:90:2e:bb:81:fd:9a:0d:ab:7f:
                    b6:37:41:47:79:7d:0b:01:38:b1:76:27:70:9a:d5:
                    d3:aa:be:3b:9e:9d:54:81:08:0f:11:aa:d9:79:93:
                    57:6a:b9:67:c5:31:3a:d1:88:77:a7:a5:df:55:83:
                    12:1d:3f:8c:58:54:55:b0:6e:b2:7d:49:4d:d5:cb:
                    d4:aa:50:22:e6:cf:82:cb:ed:76:eb:ff:d5:bc:a5:
                    6d:d5:1e:33:fc:8c:ed:3a:93:06:c6:0f:ed:3a:59:
                    fd:8e:8a:49:4b:d0:85:01:ce:3d:1c:85:ce:e5:fb:
                    14:49:e1:bb:54:04:15:ad:28:b2:f3:49:f3:50:36:
                    3a:c1:70:10:25:be:83:9e:3a:a4:3b:59:ef:f9:96:
                    32:f3:b6:68:91:e2:17:6d:7f:f2:ef:83:42:1e:c5:
                    a1:b5:b9:3e:49:b5:0b:78:ba:a8:c6:c2:a2:8a:77:
                    13:ba:1e:de:e7:cd:7d:13:ed:2b:a9:05:f9:36:01:
                    84:32:20:a6:50:24:35:42:33:96:3e:db:f9:55:fe:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AB:C0:D0:0E:D9:9F:6C:C5:58:09:06:1A:B3:C9:27:D2:8D:71:E3
            X509v3 Authority Key Identifier:
                keyid:20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/323030313a313363373a366630303a3a2f34352d3438203d3e203237383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6f00::/45

    Signature Algorithm: sha256WithRSAEncryption
         08:fb:72:db:56:50:ae:c7:bc:f5:40:d1:37:a5:5b:fc:c5:83:
         d9:3f:2b:f4:2f:73:81:4c:56:71:e6:32:1f:09:09:b2:c6:1d:
         60:6c:a5:76:d6:9e:cd:00:61:ae:f7:ec:0d:9d:90:df:ec:89:
         dc:a2:2d:cb:42:52:8b:e5:b2:a7:5e:80:39:9c:b8:84:ca:9d:
         96:94:50:2b:dd:b9:ac:1d:97:95:75:bf:b5:e9:29:86:17:b1:
         d4:27:2b:bd:94:95:8c:47:8f:bb:fc:02:18:cc:81:f1:5b:4f:
         12:d5:04:44:c0:fa:67:08:00:0c:a9:95:4f:fe:f4:0f:82:34:
         31:e6:a2:d5:bd:2e:96:4f:a3:27:a9:3c:f2:0c:81:60:70:49:
         60:2f:68:c8:c5:88:f5:05:db:77:f3:87:ba:5d:9d:af:81:e1:
         a9:e1:e0:cf:d3:59:53:94:d5:42:1d:f7:0e:47:9b:96:8d:a1:
         5c:f2:6c:15:b9:2c:7a:d9:17:9e:7c:d1:1d:67:1c:29:bc:d2:
         58:ae:9a:ed:25:b9:08:55:41:18:3d:28:c7:ba:84:2f:4e:64:
         b9:05:10:9f:79:dc:a1:83:35:97:14:21:eb:08:29:88:5b:10:
         5b:c7:76:90:a9:c8:04:ea:82:fb:f1:53:1e:5c:9d:9d:55:f2:
         cb:4d:bb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:10 2024 by rpki-client on console-fra.rpki-client.org