Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030393a3a2f34382d3438203d3e203532333332.roa
File:                     323030313a313363373a363030393a3a2f34382d3438203d3e203532333332.roa (raw, json)
Hash identifier:          ed0R6EHOic4SgsHiUojxHYmipb/QUbUOWzBFXZHSqWY=
Subject key identifier:   D1:36:84:03:31:73:7F:15:FF:9E:5C:6E:F2:2D:99:14:88:15:05:A1
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       79C2B7621B431960B50295EBCD578681BB6E51B3
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030393a3a2f34382d3438203d3e203532333332.roa
Signing time:             Tue 05 Mar 2024 18:15:58 +0000
ROA not before:           Tue 05 Mar 2024 18:10:58 +0000
ROA not after:            Tue 04 Mar 2025 18:15:58 +0000
asID:                     52332
IP address blocks:        2001:13c7:6009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c2:b7:62:1b:43:19:60:b5:02:95:eb:cd:57:86:81:bb:6e:51:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:58 2024 GMT
            Not After : Mar  4 18:15:58 2025 GMT
        Subject: CN=D136840331737F15FF9E5C6EF22D9914881505A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:54:fa:78:ce:fa:ec:68:c0:98:e7:7b:a4:95:
                    b1:66:17:ba:f5:5d:9a:63:b9:34:68:4f:b7:c4:c2:
                    44:c8:a0:d0:7f:04:9f:2c:9e:08:b7:8d:f3:53:fa:
                    42:07:66:bf:34:32:17:73:a8:1a:70:5a:e9:9b:d5:
                    a1:bf:1d:15:cd:07:0d:7c:7d:4e:24:38:73:0f:6d:
                    b0:e3:3b:fb:e8:fb:f8:da:28:02:49:4e:09:d0:c4:
                    0d:52:27:d9:07:29:ec:16:a0:61:c4:ed:26:9c:5a:
                    f0:ef:30:25:d0:ec:ea:fa:b9:05:11:00:00:63:6b:
                    4a:c5:c2:71:98:79:b8:e4:2b:6f:ef:16:0b:7d:ef:
                    3a:b8:57:ae:b8:6c:64:ca:70:d5:28:81:86:83:18:
                    1f:84:5c:7b:6d:ef:18:9d:dc:df:a2:e9:3a:34:7c:
                    d5:3a:54:17:95:af:bd:17:b2:dc:e8:8b:c6:ce:bf:
                    40:3f:b2:44:ef:99:d9:4f:da:a2:7f:8e:43:93:e3:
                    23:36:11:bf:42:22:3f:8d:45:a5:d1:ac:32:b0:8c:
                    98:37:6d:80:0a:18:3b:ad:9a:a0:80:91:a5:66:44:
                    6b:56:13:6c:5a:a2:56:9c:db:3c:44:bb:94:04:cc:
                    ff:4d:76:43:3f:9b:71:9e:c2:65:79:00:02:be:13:
                    10:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:36:84:03:31:73:7F:15:FF:9E:5C:6E:F2:2D:99:14:88:15:05:A1
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030393a3a2f34382d3438203d3e203532333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6009::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:4d:40:23:b7:01:12:8b:8d:bd:20:19:9b:23:1a:c4:f3:a2:
         c1:e0:be:e3:96:4f:11:24:ac:32:46:9f:2b:17:a3:b6:c5:9c:
         45:bd:d2:c0:82:00:7b:4c:ff:16:8c:0c:e1:4b:85:af:6c:83:
         18:b7:db:0b:f2:44:16:ee:c7:f4:8f:2f:32:e2:2b:10:52:d0:
         20:85:ca:30:f1:cb:9b:89:27:d7:8e:3a:c3:fa:51:63:90:fa:
         b8:0f:6b:75:b7:d1:cf:18:4f:33:23:1e:e6:df:36:7c:9b:a4:
         3d:55:bf:a4:39:97:70:49:07:be:dc:d2:6d:38:d9:b3:39:3a:
         7e:32:5f:df:11:61:4c:f7:d1:6b:ba:2a:cb:c4:42:2f:83:17:
         7a:55:b7:2d:45:c4:32:ea:ed:28:c2:3c:10:73:e1:c4:42:07:
         c6:3c:2c:12:f5:26:92:37:5d:6a:db:5a:4c:1a:40:b7:5c:d5:
         8d:9b:a4:e8:81:18:ce:d9:bf:41:90:d5:7d:17:ba:0d:88:b3:
         20:b6:58:4e:91:ae:41:a5:c5:51:83:c9:e5:32:79:f4:fc:a8:
         6f:10:e4:df:26:51:18:a1:ac:4a:d6:0f:7a:99:3f:6c:d5:0a:
         c7:80:c5:5a:0f:07:96:cd:62:a7:dd:5a:b0:00:e9:ce:56:1a:
         0f:64:3a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:44 2024 by rpki-client on console-fra.rpki-client.org