Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030623a3a2f34382d3438203d3e203532333630.roa
File:                     323030313a313363373a363030623a3a2f34382d3438203d3e203532333630.roa (raw, json)
Hash identifier:          pxbNmsM7ZQqxufyscsIN5yS4f9fGArTiiDPPa6fETII=
Subject key identifier:   C0:9E:4B:99:73:A3:34:A5:0A:34:31:98:4F:73:85:96:23:F6:F6:A0
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       570672D023C1652BAD42C65E0E77F2AD7E8A3704
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030623a3a2f34382d3438203d3e203532333630.roa
Signing time:             Tue 05 Mar 2024 18:16:01 +0000
ROA not before:           Tue 05 Mar 2024 18:11:01 +0000
ROA not after:            Tue 04 Mar 2025 18:16:01 +0000
asID:                     52360
IP address blocks:        2001:13c7:600b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:06:72:d0:23:c1:65:2b:ad:42:c6:5e:0e:77:f2:ad:7e:8a:37:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:01 2024 GMT
            Not After : Mar  4 18:16:01 2025 GMT
        Subject: CN=C09E4B9973A334A50A3431984F73859623F6F6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:56:32:4d:ae:d4:4d:db:6a:a7:3c:42:21:e3:
                    cf:a0:a1:8f:92:d4:64:8b:a0:0e:8c:80:6d:39:fb:
                    60:18:02:e4:d2:ea:bf:af:0a:8b:34:3b:38:ad:6a:
                    8f:de:a8:6d:6e:3c:12:c3:cf:ac:a6:6a:8b:7a:7e:
                    cf:27:b0:91:98:6e:6d:6d:0d:38:22:63:a4:e9:81:
                    83:b2:ef:68:c4:03:a8:55:d7:f5:1b:6d:b3:27:62:
                    f4:93:3a:0b:90:24:b6:71:3d:39:b6:f5:ef:7a:46:
                    95:50:b6:60:98:e7:07:f2:6f:fb:85:f6:7e:db:83:
                    c3:d8:ed:af:40:84:f2:1f:dd:4f:9b:64:a3:d7:7a:
                    32:4b:b8:14:2f:92:95:08:85:3a:9c:f8:56:d6:b8:
                    a3:4b:a8:0d:97:37:49:82:14:88:a6:0a:6e:74:c5:
                    96:37:3a:cf:c8:20:b6:a5:50:66:30:2d:e2:bd:13:
                    18:88:9f:8e:77:75:56:17:5d:37:70:ac:93:03:e3:
                    a2:5f:cc:7d:e9:b1:b3:73:34:21:21:f3:0d:58:32:
                    2e:aa:d2:31:e6:d6:25:a2:77:8f:2b:37:be:64:75:
                    3e:b6:a4:54:97:7a:18:af:10:35:24:8b:c6:fe:52:
                    9b:a0:83:59:d2:d0:2b:2b:27:f4:7d:be:6e:cc:96:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9E:4B:99:73:A3:34:A5:0A:34:31:98:4F:73:85:96:23:F6:F6:A0
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030623a3a2f34382d3438203d3e203532333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:d3:22:46:37:58:10:06:d6:41:72:57:2e:f0:db:7e:df:
         59:22:bb:7b:cf:c0:53:3e:fc:8b:54:90:5a:f7:4b:53:be:6a:
         98:92:86:d6:47:66:4c:49:51:68:c0:dd:f2:e6:7c:aa:0a:5c:
         2b:31:10:f8:b4:af:cf:3d:79:3c:f5:7f:27:32:1a:be:a6:fd:
         b3:62:57:6e:68:48:4e:4e:f1:ea:44:98:90:6c:5f:27:94:3a:
         f0:d8:86:53:cd:56:32:c0:51:ff:d7:ff:83:bf:5a:dd:1b:50:
         e4:73:5f:95:42:04:59:b2:ca:65:88:93:4d:cc:f9:dd:fd:76:
         1a:37:4e:da:a3:75:19:6c:f1:e5:2c:18:37:50:c3:9a:d0:bb:
         72:44:74:47:ff:b5:a6:39:a2:9a:dd:da:85:f2:d7:81:4e:b7:
         5b:08:fb:b7:79:ea:58:8c:b8:64:12:14:e8:14:db:a1:ab:a6:
         de:d3:2e:21:6c:cc:78:fb:94:cc:57:46:53:bd:19:2c:ea:04:
         7d:be:69:6b:39:69:85:f7:f1:4f:66:a8:6f:c8:c6:fc:68:cf:
         e7:f3:9a:97:7f:1d:7e:ad:8c:a9:f1:56:71:c2:57:d0:ba:3c:
         26:d4:fa:f0:a3:86:64:fb:da:07:a5:dc:42:5f:e4:2d:97:d7:
         2f:5c:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:08:36 2024 by rpki-client on console-ams.rpki-client.org