Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030393a3a2f34382d3438203d3e203532333332.roa
File:                     323030313a313363373a363030393a3a2f34382d3438203d3e203532333332.roa (raw, json)
Hash identifier:          2P8JG5ExB6691CZTB5HSNFjJT9gJPzHZTdmCggeVw0A=
Subject key identifier:   CA:2E:A2:78:44:F2:E4:91:21:81:E9:7A:E3:34:89:1D:6F:98:3F:FE
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       58A61707EE21A169F8D5372D8D7D0E443F485D0A
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030393a3a2f34382d3438203d3e203532333332.roa
Signing time:             Tue 04 Feb 2025 18:35:14 +0000
ROA not before:           Tue 04 Feb 2025 18:30:14 +0000
ROA not after:            Tue 03 Feb 2026 18:35:14 +0000
asID:                     52332
IP address blocks:        2001:13c7:6009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a6:17:07:ee:21:a1:69:f8:d5:37:2d:8d:7d:0e:44:3f:48:5d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:14 2025 GMT
            Not After : Feb  3 18:35:14 2026 GMT
        Subject: CN=CA2EA27844F2E4912181E97AE334891D6F983FFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7d:a7:25:0d:37:93:89:20:f6:9d:32:fe:58:
                    3b:d1:7a:7d:d2:a2:bf:53:20:19:72:b6:1c:21:77:
                    df:cb:71:b0:80:49:0a:1a:c6:c8:f8:61:36:a7:a2:
                    bc:99:b2:ff:ec:a7:31:e7:ad:d8:53:ec:76:c0:01:
                    c4:42:83:7e:0c:21:74:be:f3:10:a6:2c:02:00:9e:
                    3e:dc:ab:c2:cc:ef:39:46:90:51:09:2d:40:8c:06:
                    b3:02:95:39:4e:b3:6b:b9:83:cd:45:9e:51:93:e0:
                    60:c3:39:12:0d:54:43:60:d2:30:4e:ee:63:55:c5:
                    e6:ec:04:64:e0:e4:ee:27:7b:6b:c3:e9:9f:9c:24:
                    31:99:32:ba:8f:37:84:76:8b:da:61:5e:3f:51:1b:
                    c4:0c:a1:a9:0b:a2:ea:c0:f6:89:df:bf:87:43:48:
                    dd:19:57:bb:dd:44:84:5e:1e:01:8e:47:05:0c:b8:
                    0f:0d:4a:e4:0e:7b:25:7a:de:d6:1c:60:3b:dd:b2:
                    ce:f1:f9:89:42:90:54:a8:ae:82:59:4c:8a:92:be:
                    77:bd:1b:54:78:ae:20:be:a8:6d:86:e0:4d:b0:8a:
                    00:19:04:47:6f:a0:64:ab:b0:78:2b:43:f8:15:97:
                    03:42:14:fa:32:76:63:84:97:cc:c3:7c:65:bc:08:
                    ba:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2E:A2:78:44:F2:E4:91:21:81:E9:7A:E3:34:89:1D:6F:98:3F:FE
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030393a3a2f34382d3438203d3e203532333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6009::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:26:b2:2f:a4:d1:49:d4:d9:a0:7b:fb:a6:81:39:21:bd:80:
         49:d5:f7:40:5b:55:83:4f:77:34:14:4a:52:0d:7e:59:61:f2:
         5f:b1:65:0f:13:a0:4c:b8:fc:0f:89:4f:c4:71:b9:62:2b:01:
         71:89:4f:85:96:6d:18:79:80:f3:8d:55:ff:9b:cb:5b:05:a0:
         52:41:e5:ac:52:0a:31:8d:a3:89:e1:14:96:c7:87:be:e7:d3:
         28:ce:29:ce:c4:1e:34:d1:d6:c8:45:8b:8b:b9:74:93:31:2d:
         a0:b4:cd:1a:fb:91:81:cd:9e:65:9c:92:bd:4f:5f:d4:48:50:
         f6:ab:4b:f7:c9:fa:07:04:4a:b8:f9:8a:93:3a:12:29:0e:fe:
         3f:41:47:90:3f:4c:56:73:09:2e:25:ce:28:5b:85:33:19:8f:
         fb:88:f9:0d:4e:e1:49:f9:d3:5f:80:50:90:47:b0:9a:3c:43:
         52:bd:e8:ce:52:21:19:52:2b:b1:8d:75:c9:aa:10:8b:6d:08:
         57:05:d0:49:d3:53:da:11:8a:3d:92:5d:f8:2d:dc:8a:bc:c2:
         50:94:2b:f0:9c:57:0d:c9:b2:30:2b:fc:f0:52:e4:86:d0:9c:
         92:50:e9:53:e4:2a:92:92:d8:20:12:60:e3:ae:d9:fd:3a:6e:
         fa:a3:88:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:40 2025 by rpki-client