Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030633a3a2f34382d3438203d3e203532333730.roa
File:                     323030313a313363373a363030633a3a2f34382d3438203d3e203532333730.roa (raw, json)
Hash identifier:          5DamQn1odxSTkzuCTBPJ1YKhJr8U3aK8r/+8yDeXr3Q=
Subject key identifier:   A7:8A:55:0D:48:8B:07:9B:35:79:72:25:62:06:36:77:C9:5B:E9:C7
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       77FACB3288E5EA4E87B97E2C8F34A055D1986BE4
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030633a3a2f34382d3438203d3e203532333730.roa
Signing time:             Tue 05 Mar 2024 18:16:02 +0000
ROA not before:           Tue 05 Mar 2024 18:11:02 +0000
ROA not after:            Tue 04 Mar 2025 18:16:02 +0000
asID:                     52370
IP address blocks:        2001:13c7:600c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fa:cb:32:88:e5:ea:4e:87:b9:7e:2c:8f:34:a0:55:d1:98:6b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:02 2024 GMT
            Not After : Mar  4 18:16:02 2025 GMT
        Subject: CN=A78A550D488B079B3579722562063677C95BE9C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a6:82:0b:08:3f:c4:eb:c8:e8:50:20:6d:f5:
                    94:ce:6d:e2:c5:9c:e0:90:6d:07:dc:f4:80:21:e0:
                    f9:f7:a0:f2:0d:f1:cb:dd:5e:d7:5b:27:21:c0:80:
                    14:90:a3:53:dc:de:9f:cc:f5:54:a1:18:2f:9d:d6:
                    bd:9b:c7:ab:cc:69:35:60:eb:13:3e:82:54:cb:4f:
                    15:fd:a1:89:fa:99:aa:05:77:3e:5a:90:aa:c3:90:
                    aa:32:d3:9a:89:be:94:9f:55:2f:67:26:a9:90:1c:
                    15:af:e5:9d:3b:26:eb:b7:6a:4b:8e:0a:b5:4e:48:
                    cf:c4:82:38:77:1d:01:ad:40:7d:66:0a:bc:4b:ba:
                    25:4b:4d:47:3d:ee:1b:ae:a9:fb:7c:68:12:88:1c:
                    0a:f5:42:d4:e7:2c:1a:b0:66:5c:b5:8f:d5:d7:18:
                    c9:d0:1e:03:59:cb:21:3d:3e:a9:a4:30:01:d7:e8:
                    9d:92:56:a4:c3:bb:c6:c0:57:01:46:ee:0f:20:73:
                    cd:08:f9:a1:26:c4:34:88:0e:02:d6:a5:03:c4:67:
                    97:36:3d:5e:6a:20:41:93:7d:9c:9e:a5:42:4d:92:
                    1a:7e:07:61:0e:fd:a7:bd:a4:a9:e5:6e:34:43:f6:
                    36:e1:f7:33:ed:37:39:82:d0:be:28:76:ff:ad:df:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8A:55:0D:48:8B:07:9B:35:79:72:25:62:06:36:77:C9:5B:E9:C7
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030633a3a2f34382d3438203d3e203532333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:dd:c8:3a:02:1d:58:18:ce:d3:99:0e:65:ae:3e:b2:13:0d:
         bc:c2:7c:99:ee:ee:aa:68:b2:50:5c:31:ae:b6:55:30:db:b6:
         9d:dd:7c:b0:d8:e6:21:86:01:e8:ca:20:ad:c8:13:d5:e6:1f:
         b7:f1:62:f4:91:c1:95:43:bf:c7:5e:82:9f:e2:74:20:f5:ec:
         6a:f5:1f:37:0a:d8:82:17:7a:98:ad:dc:4a:31:aa:28:a2:74:
         da:89:0b:3a:73:5e:a1:e2:d0:5d:3f:8e:f7:db:2f:14:d1:42:
         e2:b8:13:a4:3b:16:8f:28:f6:9c:a0:7b:40:e3:39:54:0a:e7:
         5b:0a:28:03:91:92:5d:2c:4d:e0:57:9a:1f:3c:d3:a3:27:4b:
         e1:66:a1:21:ee:c8:ad:1b:1f:90:36:ef:0b:45:dd:5a:73:ce:
         bf:f2:66:c0:80:e8:e5:b5:1c:33:bc:96:d4:de:01:93:63:23:
         c4:4a:b7:71:ce:bf:67:39:5f:22:d1:10:77:cf:88:33:86:5b:
         d6:5a:14:4a:48:45:b0:66:48:6e:00:cc:9f:d9:19:e2:8f:96:
         31:c0:01:93:c3:71:63:a9:f2:cd:c0:0e:69:4c:4d:72:98:67:
         3d:2d:ba:9e:b2:3b:44:e3:51:76:66:10:80:c0:a5:b4:6b:0c:
         77:7c:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:52:41 2024 by rpki-client on console-ams.rpki-client.org