Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031303a3a2f34382d3438203d3e203631343935.roa
File:                     323030313a313363373a363031303a3a2f34382d3438203d3e203631343935.roa (raw, json)
Hash identifier:          cqFSDgEBbQSJbg/BQgfUAWuImufzM8f3egJ8mtu9epU=
Subject key identifier:   CD:50:05:B1:E5:45:04:20:B0:28:29:35:6C:F6:C1:ED:4B:70:C7:59
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       5945332276550A63DFCEB92602A09F36FFA9CD99
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031303a3a2f34382d3438203d3e203631343935.roa
Signing time:             Tue 04 Feb 2025 18:35:08 +0000
ROA not before:           Tue 04 Feb 2025 18:30:08 +0000
ROA not after:            Tue 03 Feb 2026 18:35:08 +0000
asID:                     61495
IP address blocks:        2001:13c7:6010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:45:33:22:76:55:0a:63:df:ce:b9:26:02:a0:9f:36:ff:a9:cd:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:08 2025 GMT
            Not After : Feb  3 18:35:08 2026 GMT
        Subject: CN=CD5005B1E5450420B02829356CF6C1ED4B70C759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:b8:8d:a5:d2:b8:7a:38:bb:9e:2b:be:19:
                    13:2a:bd:b1:76:41:a1:cb:b2:59:49:df:6c:3c:d0:
                    d4:90:d3:41:79:47:fd:94:42:d4:fb:52:06:e7:3a:
                    0b:bb:5c:fa:92:28:1c:d9:32:b1:e6:e9:45:af:12:
                    e2:1b:77:55:0b:c9:1c:da:10:df:51:f9:ce:c4:d8:
                    a7:8d:fd:bc:f4:3d:8e:81:d6:82:ba:b0:03:32:45:
                    fa:63:20:8d:90:63:f7:02:a7:6a:b6:31:2e:5e:2c:
                    96:a4:b7:9e:b0:5c:dc:0d:62:20:fd:2d:4c:fe:87:
                    21:f1:04:84:64:5d:a0:dd:3a:e8:f7:9d:20:70:29:
                    5d:fd:a9:24:b7:a1:9d:93:bc:23:b9:e6:1c:cb:2b:
                    0c:b2:86:ad:d9:95:39:d9:3b:ea:43:32:14:80:cb:
                    44:6e:7e:c0:b4:95:9c:a3:9e:73:33:e1:8b:a8:6c:
                    ab:61:0a:03:f5:c3:0e:95:03:da:10:97:3e:d2:03:
                    66:31:ae:53:1f:ae:45:64:89:35:10:de:95:84:2f:
                    eb:dc:1d:0a:9f:eb:d6:5d:ad:0a:94:80:65:7e:c1:
                    9f:75:6e:8c:1c:41:05:dd:f4:1b:4d:cd:4a:24:18:
                    20:1f:cf:ba:25:8a:78:b3:0a:ae:32:e0:64:d1:e0:
                    36:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:50:05:B1:E5:45:04:20:B0:28:29:35:6C:F6:C1:ED:4B:70:C7:59
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031303a3a2f34382d3438203d3e203631343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6010::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:f1:08:3b:d5:fc:4e:2d:5b:29:31:12:ba:87:ef:f9:c5:04:
         0d:3f:cd:f3:2d:52:0c:5a:1c:ea:f0:9b:ef:d5:6f:92:a6:93:
         5c:30:9f:29:79:4b:68:d5:91:17:cb:fa:a1:8b:ef:c6:70:14:
         23:e2:30:7a:f3:c4:14:4e:44:62:a3:ba:32:58:6a:a9:5e:fe:
         6b:80:80:35:48:a1:d3:c8:0f:7d:f3:26:06:41:08:3d:3e:a2:
         d4:d6:66:f1:0e:4a:f5:39:9a:54:56:63:b8:e1:50:d1:9a:d2:
         eb:62:2c:ce:a4:2e:57:3f:06:71:9d:2f:b0:2a:ca:15:0a:c0:
         ed:f4:42:fb:53:ac:15:94:82:46:32:59:11:62:ec:4d:d5:81:
         a4:03:bd:1b:ab:51:01:a8:a1:8b:28:7a:28:6e:6a:a9:b1:42:
         e8:27:25:7e:ec:8a:0c:91:b7:b0:8b:52:ce:2b:46:a6:4a:83:
         d9:ed:c2:e5:fb:78:e0:d5:6d:85:b1:1a:94:c9:ca:a4:be:61:
         94:ea:f2:cb:32:65:3c:60:38:45:68:f2:1c:9a:05:82:2b:8d:
         7b:6b:7d:9f:30:ef:d3:e3:8b:09:16:57:d9:7d:9e:40:7e:45:
         1c:48:78:08:76:f5:e1:53:fd:a4:2a:15:22:8c:ce:ff:01:62:
         5e:77:6f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:40 2025 by rpki-client