Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a373136313a3a2f34382d3438203d3e20323634373234.roa
File:                     323030313a313331303a373136313a3a2f34382d3438203d3e20323634373234.roa (raw, json)
Hash identifier:          RRj/LSa03YlGi7ZjLzVMQoRIhC7jEHeTOkaUPIg/m30=
Subject key identifier:   54:DE:44:6D:03:E8:A7:74:3E:10:EB:9D:C7:9B:42:41:57:7C:CF:AD
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       3109EF3B8834E239783DA903A0BBB4ACF5F52122
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a373136313a3a2f34382d3438203d3e20323634373234.roa
Signing time:             Tue 04 Feb 2025 18:09:53 +0000
ROA not before:           Tue 04 Feb 2025 18:04:53 +0000
ROA not after:            Tue 03 Feb 2026 18:09:53 +0000
asID:                     264724
IP address blocks:        2001:1310:7161::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:09:ef:3b:88:34:e2:39:78:3d:a9:03:a0:bb:b4:ac:f5:f5:21:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Feb  4 18:04:53 2025 GMT
            Not After : Feb  3 18:09:53 2026 GMT
        Subject: CN=54DE446D03E8A7743E10EB9DC79B4241577CCFAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b6:2d:4b:db:c5:6d:8b:46:3d:14:aa:99:20:
                    c3:ab:2d:b3:ca:53:74:75:db:5f:dc:e7:9b:4f:51:
                    b3:e5:b7:5f:44:51:49:4f:20:72:3f:81:6e:5c:34:
                    0d:4e:88:b7:8c:e7:23:b1:b3:38:15:f1:14:12:89:
                    14:a6:a8:34:9b:12:13:aa:53:b1:04:c4:b4:a8:67:
                    8a:61:ae:f2:34:26:15:e2:2a:43:0f:59:f9:5c:71:
                    92:83:df:da:aa:b8:09:60:30:4c:33:00:ae:36:3d:
                    0f:ce:3c:89:65:d7:6a:4b:09:aa:68:17:f8:e8:68:
                    ae:e0:3e:ec:6f:8b:f2:c5:e0:7e:26:a1:a5:9e:bb:
                    f8:8a:60:64:c9:9c:58:b2:35:ab:b1:74:bf:ac:a0:
                    57:5a:67:11:0a:f0:e6:62:1a:5d:08:17:91:7d:a2:
                    8c:fe:49:12:2a:19:ff:1d:a7:00:ec:09:73:ee:13:
                    29:e6:bc:89:90:a1:f3:5b:a6:b5:74:42:82:fc:9e:
                    9d:40:08:7e:a0:44:3f:92:53:c3:ba:df:95:ea:2c:
                    05:36:b1:5f:55:78:70:ea:7d:22:fc:c7:0e:99:c1:
                    30:6e:da:1b:f7:19:82:c4:94:f8:34:be:7f:5c:94:
                    32:97:fa:4c:20:60:1e:5e:36:bb:0e:18:57:22:e0:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DE:44:6D:03:E8:A7:74:3E:10:EB:9D:C7:9B:42:41:57:7C:CF:AD
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a373136313a3a2f34382d3438203d3e20323634373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1310:7161::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:bf:55:df:27:86:2f:43:3f:ae:f1:f9:9d:49:d5:d4:04:36:
         83:1b:97:b0:1e:89:63:0e:22:19:43:3b:36:6b:ec:06:25:82:
         6e:df:61:bb:06:8e:5a:07:b3:01:f7:a3:19:fa:d3:ad:d4:11:
         d8:54:96:a7:e0:53:b2:5a:fa:27:51:11:4c:12:66:37:66:0d:
         6d:c3:4e:64:27:7e:38:3b:c0:b4:18:08:d1:dc:cc:30:47:4d:
         b4:47:35:a8:a0:fd:90:41:bc:66:03:27:72:ba:1a:8c:f1:bd:
         3e:e4:22:11:1c:57:ba:dd:38:31:7e:eb:d4:6b:57:99:ad:c0:
         83:cc:cb:38:59:cf:ee:0a:0a:f1:0b:06:2a:af:06:d7:ce:38:
         e5:e0:4b:d4:c1:6d:c8:9a:f6:33:5c:2b:20:f8:94:7b:ce:1d:
         b7:38:45:5b:c7:91:e3:0b:2f:5b:99:b6:64:fb:3d:f3:2e:c9:
         a0:f4:b1:e0:4b:49:6f:31:79:be:41:1e:16:c9:f7:e6:73:41:
         bb:f4:41:6a:0a:1c:ec:9a:4b:95:45:df:7f:0c:8e:85:20:96:
         c7:e9:03:91:9b:a5:eb:9a:87:f0:39:c8:48:9f:12:9d:bb:bc:
         fc:e7:62:17:1b:f5:35:91:72:4c:ab:9d:62:b9:8b:ac:90:27:
         4a:42:5e:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:58:40 2025 by rpki-client