Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030633a3a2f34382d3438203d3e203532333730.roa
File:                     323030313a313363373a363030633a3a2f34382d3438203d3e203532333730.roa (raw, json)
Hash identifier:          8dS83sxUiXH1KenIwkZVE8nOiyP2X5uhG8UHNyk6MuI=
Subject key identifier:   F9:83:54:61:1E:32:1E:01:95:7E:4D:17:C6:8E:25:12:8A:FF:FB:6B
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       4B8D034EE9A7FE44478E39FE8204F266642588EE
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030633a3a2f34382d3438203d3e203532333730.roa
Signing time:             Tue 04 Feb 2025 18:35:09 +0000
ROA not before:           Tue 04 Feb 2025 18:30:09 +0000
ROA not after:            Tue 03 Feb 2026 18:35:09 +0000
asID:                     52370
IP address blocks:        2001:13c7:600c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 10:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8d:03:4e:e9:a7:fe:44:47:8e:39:fe:82:04:f2:66:64:25:88:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:09 2025 GMT
            Not After : Feb  3 18:35:09 2026 GMT
        Subject: CN=F98354611E321E01957E4D17C68E25128AFFFB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ad:78:8b:01:4d:0e:55:01:66:83:f4:c3:ba:
                    69:8b:0d:f8:de:f6:bd:3d:df:5a:56:ea:b9:18:da:
                    db:1f:55:81:03:16:77:47:50:65:da:fe:9a:fe:82:
                    57:9f:0c:9c:0d:7e:c5:08:fc:99:6a:e8:b6:50:ef:
                    3e:d7:2e:2d:6a:d0:1e:80:51:85:83:93:8d:54:17:
                    c6:85:d2:f4:ec:7b:e7:f3:68:cd:ef:33:9c:d8:da:
                    b9:50:95:b1:0f:13:e4:fb:68:ec:52:03:f6:7d:80:
                    79:3a:a3:db:9b:d4:d2:d8:3a:59:66:73:80:7b:3f:
                    d1:54:74:49:de:79:70:c1:10:7a:c3:b3:08:fc:8c:
                    9a:27:c5:4f:1b:56:db:95:5c:32:01:96:37:da:54:
                    ce:63:41:35:58:5e:eb:3c:e7:5c:bc:89:0a:2e:d5:
                    61:4f:c0:dc:fb:c5:5b:bd:93:c0:ed:ea:8f:36:1a:
                    13:c6:a9:4a:57:09:b7:e9:69:55:ce:af:56:19:b1:
                    48:15:82:8b:e5:ae:ce:ad:da:3b:7a:8d:0f:b8:52:
                    78:8d:46:cc:94:bc:40:6d:f8:88:26:e8:7b:dc:22:
                    a3:de:1d:d1:a9:55:7a:3c:36:5e:76:81:c3:82:f3:
                    99:7f:e4:3e:a7:5c:4f:63:3f:9c:95:15:6f:5a:9b:
                    f7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:83:54:61:1E:32:1E:01:95:7E:4D:17:C6:8E:25:12:8A:FF:FB:6B
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030633a3a2f34382d3438203d3e203532333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:bc:f7:66:38:47:b4:5b:3e:97:b1:71:48:d7:53:10:bf:7d:
         b1:da:68:4b:4b:08:42:85:46:f4:cf:d7:49:85:8f:76:f2:a4:
         69:9f:e8:e6:73:20:4d:a3:9e:1f:2f:43:5a:54:73:f7:e4:d4:
         f1:2a:a2:75:aa:1a:5c:00:47:64:f7:d0:a4:2e:27:1a:78:77:
         a3:e3:3c:4b:b3:95:58:1c:fc:03:ac:f0:95:d8:06:a1:ac:7c:
         43:fe:a4:f6:a4:5d:14:35:19:f9:77:14:d3:73:e0:ba:aa:31:
         5f:bb:fe:d3:49:93:94:83:cf:18:71:8b:8d:2d:ff:58:73:6e:
         f8:86:f4:96:83:5f:2d:5e:50:b5:ad:a5:0e:6d:30:85:2b:7c:
         5b:87:a9:4b:05:ea:37:dd:6f:60:44:93:6f:18:68:59:3b:45:
         5a:f8:3e:c3:f6:5a:d8:36:2e:8a:63:ae:48:bc:24:9c:b1:86:
         9b:cb:63:41:dd:04:99:cf:c4:ed:ba:7f:b1:89:64:e1:09:59:
         cc:9b:f9:8b:42:cd:39:7b:b3:da:73:a5:2b:09:f1:20:b1:e5:
         83:e6:d3:ad:e9:1f:55:6c:b3:07:57:ec:4e:e2:dc:8b:45:9b:
         69:19:85:9c:e0:da:11:8c:be:b6:45:f2:16:44:96:41:82:18:
         b9:0a:f5:73
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUS40DTumn/kRHjjn+ggTyZmQliO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5
REIzNjlGQzAeFw0yNTAyMDQxODMwMDlaFw0yNjAyMDMxODM1MDlaMDMxMTAvBgNV
BAMTKEY5ODM1NDYxMUUzMjFFMDE5NTdFNEQxN0M2OEUyNTEyOEFGRkZCNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGrXiLAU0OVQFmg/TDummLDfje
9r0931pW6rkY2tsfVYEDFndHUGXa/pr+glefDJwNfsUI/Jlq6LZQ7z7XLi1q0B6A
UYWDk41UF8aF0vTse+fzaM3vM5zY2rlQlbEPE+T7aOxSA/Z9gHk6o9ub1NLYOllm
c4B7P9FUdEneeXDBEHrDswj8jJonxU8bVtuVXDIBljfaVM5jQTVYXus851y8iQou
1WFPwNz7xVu9k8Dt6o82GhPGqUpXCbfpaVXOr1YZsUgVgovlrs6t2jt6jQ+4UniN
RsyUvEBt+Igm6HvcIqPeHdGpVXo8Nl52gcOC85l/5D6nXE9jP5yVFW9am/clAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU+YNUYR4yHgGVfk0Xxo4lEor/+2swHwYDVR0j
BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE
N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE
NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC
QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF
MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzYz
MDMwNjMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzMzNzMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAIAETx2AMMA0GCSqGSIb3DQEBCwUAA4IBAQBUvPdmOEe0Wz6XsXFI11MQv32x
2mhLSwhChUb0z9dJhY928qRpn+jmcyBNo54fL0NaVHP35NTxKqJ1qhpcAEdk99Ck
LicaeHej4zxLs5VYHPwDrPCV2AahrHxD/qT2pF0UNRn5dxTTc+C6qjFfu/7TSZOU
g88YcYuNLf9Yc274hvSWg18tXlC1raUObTCFK3xbh6lLBeo33W9gRJNvGGhZO0Va
+D7D9lrYNi6KY65IvCScsYaby2NB3QSZz8Ttun+xiWThCVnMm/mLQs05e7Pac6Ur
CfEgseWD5tOt6R9VbLMHV+xO4tyLRZtpGYWc4NoRjL62RfIWRJZBghi5CvVz
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:09 2025 by rpki-client