Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/323030313a313363373a366630383a3a2f34372d3438203d3e203237383134.roa
File:                     323030313a313363373a366630383a3a2f34372d3438203d3e203237383134.roa (raw, json)
Hash identifier:          gMpFpkL3/VJX0URSS5fwA0JIAdzWVU46sTKEeLL8BQY=
Subject key identifier:   81:E4:39:C3:F3:98:74:E5:BE:E6:10:5E:F5:DD:9A:D8:55:B7:60:7F
Certificate issuer:       /CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
Certificate serial:       4DE52A22A1E55D6475344C1E56C8C76EDD6ED9F4
Authority key identifier: 20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/323030313a313363373a366630383a3a2f34372d3438203d3e203237383134.roa
Signing time:             Tue 05 Mar 2024 18:22:42 +0000
ROA not before:           Tue 05 Mar 2024 18:17:42 +0000
ROA not after:            Tue 04 Mar 2025 18:22:42 +0000
asID:                     27814
IP address blocks:        2001:13c7:6f08::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 22:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e5:2a:22:a1:e5:5d:64:75:34:4c:1e:56:c8:c7:6e:dd:6e:d9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
        Validity
            Not Before: Mar  5 18:17:42 2024 GMT
            Not After : Mar  4 18:22:42 2025 GMT
        Subject: CN=81E439C3F39874E5BEE6105EF5DD9AD855B7607F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:be:d7:fd:b2:31:5f:94:e1:d4:87:6c:2f:
                    6b:c3:4a:e0:04:f7:b4:d8:f2:34:1c:14:74:32:1b:
                    59:cc:dd:87:99:4a:9a:43:10:0c:dd:a7:28:6f:eb:
                    38:02:7a:ba:a7:57:69:b0:ad:d9:67:09:30:3f:8d:
                    7f:25:c7:41:1f:ae:ed:01:15:d8:36:e6:f0:3a:53:
                    8f:69:e7:9c:36:2a:41:c6:f2:bb:f3:cf:8d:8b:b0:
                    d1:89:6a:ec:73:ab:7c:27:67:7c:c0:65:c2:52:36:
                    47:f5:24:26:b8:af:2d:67:65:c0:2e:6d:b8:7b:d6:
                    8e:88:29:9d:3a:7e:d5:e6:1d:be:9d:f0:9d:b1:54:
                    5f:73:11:ba:7c:2d:7c:ad:97:0a:1b:a2:7b:7f:23:
                    6d:cd:72:30:06:1e:91:68:c0:35:0e:bd:f1:0f:2b:
                    ac:c3:ee:79:4d:fc:2b:81:c7:63:cd:dd:9f:a3:92:
                    78:ff:83:83:cd:2a:4a:94:ae:bc:dc:7e:07:0b:27:
                    7b:21:6b:00:a6:87:7b:cc:ee:33:db:45:17:81:af:
                    74:68:eb:d0:5e:1d:a4:09:a1:3d:41:b4:2c:8b:ba:
                    11:9c:7e:d3:29:3e:ec:c2:e3:69:df:be:25:96:21:
                    55:0d:28:ce:a1:ba:ef:f3:38:ee:8a:5e:83:b7:7e:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E4:39:C3:F3:98:74:E5:BE:E6:10:5E:F5:DD:9A:D8:55:B7:60:7F
            X509v3 Authority Key Identifier:
                keyid:20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/323030313a313363373a366630383a3a2f34372d3438203d3e203237383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6f08::/47

    Signature Algorithm: sha256WithRSAEncryption
         5e:ca:6c:ca:41:dc:38:51:be:07:27:67:c1:cb:61:40:21:9d:
         e9:45:22:f3:83:48:c2:8a:13:bd:44:2d:1c:85:f8:fe:3d:cf:
         e4:dc:89:b6:b7:09:e1:af:fd:6b:ff:38:43:b1:80:e8:e5:fe:
         1e:64:26:ae:ab:9f:34:67:1e:6d:b2:6e:45:bd:73:18:48:d8:
         00:49:b2:42:d8:2e:04:f6:6d:69:b4:51:5e:3b:a3:ec:ad:c7:
         9c:4d:31:d7:fe:27:7a:af:72:09:d0:df:3a:59:c8:63:52:8f:
         37:71:6c:32:58:a4:5d:45:3b:6a:b4:a6:6f:4c:95:aa:c0:e6:
         e6:99:e2:d6:c8:da:b9:8d:50:f2:a4:50:3c:2a:5f:bb:ce:6a:
         21:fb:5a:de:b7:62:ae:a2:e7:ea:45:20:4b:b2:4d:ae:42:45:
         51:02:94:73:1a:8c:7c:a5:9a:6f:2d:f0:ca:51:e5:b1:ed:f3:
         74:f9:07:04:0e:40:a4:0e:68:1c:86:ee:95:b2:b8:af:d1:bd:
         5d:06:ae:66:1b:8b:80:fe:bf:32:0d:33:e9:7b:81:62:a5:97:
         a8:2f:cd:98:df:06:85:b9:8d:33:44:73:75:6f:67:63:15:66:
         b5:86:8c:8a:b5:e8:dd:f8:d3:6e:e6:00:9e:de:a7:53:8e:a9:
         86:00:de:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:33:16 2024 by rpki-client on console-fra.rpki-client.org