Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030613a3a2f34382d3634203d3e203532333736.roa
File:                     323030313a313363373a363030613a3a2f34382d3634203d3e203532333736.roa (raw, json)
Hash identifier:          Fau2G2XBGBsJZVV+G+FBlBdayr7ZRMtkjaczqtHRYTQ=
Subject key identifier:   59:0B:62:81:B6:E4:5D:BE:65:68:1B:51:BB:FF:16:39:15:0B:1B:B5
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       753F2A6D32A578E7CBE033B6152323BF1E1B6A81
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030613a3a2f34382d3634203d3e203532333736.roa
Signing time:             Tue 14 May 2024 12:20:00 +0000
ROA not before:           Tue 14 May 2024 12:15:00 +0000
ROA not after:            Tue 13 May 2025 12:20:00 +0000
asID:                     52376
IP address blocks:        2001:13c7:600a::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3f:2a:6d:32:a5:78:e7:cb:e0:33:b6:15:23:23:bf:1e:1b:6a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: May 14 12:15:00 2024 GMT
            Not After : May 13 12:20:00 2025 GMT
        Subject: CN=590B6281B6E45DBE65681B51BBFF1639150B1BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3e:41:c7:44:a0:18:a0:0b:96:89:39:dc:ac:
                    fd:cc:60:0e:b6:a0:93:23:c7:ba:16:f7:b6:de:45:
                    40:14:72:de:ad:6e:a1:d9:74:b7:b6:f1:fa:4e:41:
                    78:e4:1b:12:59:a8:29:bb:f9:9c:b1:4b:85:d9:27:
                    77:70:bf:a0:aa:05:ee:f9:1c:60:d8:2a:8e:4e:b4:
                    d9:b4:61:1e:35:f4:b1:15:4e:14:e5:59:3a:8a:61:
                    6a:cd:cc:0c:45:8a:7c:91:27:e8:02:93:57:8d:29:
                    69:01:ee:eb:0e:17:52:fe:8a:78:5e:38:a5:dc:11:
                    c8:ce:91:0a:cf:f2:57:3a:f5:22:84:37:34:c0:14:
                    2a:ff:56:36:51:66:58:62:b4:44:af:da:a3:40:8f:
                    30:29:a4:63:68:16:50:39:9b:d5:e5:ac:a5:d2:54:
                    0b:98:51:22:86:4b:02:1f:bc:59:71:27:46:f4:b9:
                    61:0b:51:de:02:72:75:41:0a:6e:38:f9:b6:4b:37:
                    7e:71:6d:da:90:5c:e1:ae:88:6d:47:0a:ad:5a:d5:
                    83:78:a4:d0:91:f4:ba:c5:fd:f8:2d:01:f4:26:a6:
                    90:bb:07:a1:39:25:e5:78:ad:6b:2e:44:80:21:c9:
                    7f:f8:5c:3b:63:00:26:5e:42:a2:68:76:69:b8:69:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0B:62:81:B6:E4:5D:BE:65:68:1B:51:BB:FF:16:39:15:0B:1B:B5
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030613a3a2f34382d3634203d3e203532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:600a::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:6e:33:87:e0:9d:c0:15:85:77:db:f8:8f:f1:e4:99:60:fc:
         f6:54:79:29:13:b8:4b:94:4d:95:7f:9e:ff:45:d3:53:85:19:
         14:d6:09:5f:3b:e4:6a:e9:df:d8:57:41:df:ce:63:f5:2e:15:
         f3:01:ef:a6:6e:5b:33:9b:22:11:a1:e3:82:70:c3:e4:58:8f:
         4a:3b:82:0e:9f:c9:63:e6:62:f3:8e:cb:6f:66:2b:8d:db:0c:
         15:30:d7:09:01:46:47:54:28:0c:9a:71:b4:c3:bd:ee:7b:ac:
         87:82:76:34:4d:a9:08:57:01:f3:76:61:87:3f:d4:e8:f5:73:
         cc:2d:d8:97:2d:68:0b:ea:dc:f3:45:4c:5c:1e:3e:e7:e7:14:
         78:70:8a:ac:c7:16:ee:4f:4d:a2:b0:6e:a4:ca:49:f6:ab:e5:
         94:0a:e9:5f:01:fe:31:ff:c1:2f:bf:90:52:0d:1b:59:ec:31:
         cc:a2:d7:99:a7:bd:a7:a9:55:2c:3f:cd:8e:32:30:61:80:8f:
         34:87:b8:2e:36:1b:be:a5:9f:58:01:46:51:e8:8e:84:d8:e8:
         9b:e5:3a:f9:de:2f:b8:ae:87:0b:10:45:3b:22:58:21:b8:97:
         07:36:2e:80:55:5b:ec:cf:19:ef:51:8c:54:4c:3f:70:b6:df:
         b1:99:f3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:02 2024 by rpki-client on console-ams.rpki-client.org