Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031343a3a2f34382d3438203d3e203532353030.roa
File:                     323030313a313363373a363031343a3a2f34382d3438203d3e203532353030.roa (raw, json)
Hash identifier:          fuGRVv9ZQTkR6sTZIS4WB55DEYbgdGRw3R+4ZzrlE/4=
Subject key identifier:   7D:56:9D:87:9C:40:D6:CE:3D:89:5A:BA:4B:07:89:BE:73:8A:17:39
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       1119C36EAB3E586521C6040ECDAC88185DBAD917
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031343a3a2f34382d3438203d3e203532353030.roa
Signing time:             Tue 04 Feb 2025 18:35:24 +0000
ROA not before:           Tue 04 Feb 2025 18:30:24 +0000
ROA not after:            Tue 03 Feb 2026 18:35:24 +0000
asID:                     52500
IP address blocks:        2001:13c7:6014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 10:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:19:c3:6e:ab:3e:58:65:21:c6:04:0e:cd:ac:88:18:5d:ba:d9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:24 2025 GMT
            Not After : Feb  3 18:35:24 2026 GMT
        Subject: CN=7D569D879C40D6CE3D895ABA4B0789BE738A1739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:b9:3e:cb:6d:a2:09:50:c9:08:3d:50:9c:
                    f4:89:dd:12:d1:ff:f0:39:0f:22:41:be:4e:bd:0b:
                    e1:fc:33:5b:df:66:12:70:f2:e2:42:43:16:9f:c4:
                    00:46:2e:0b:32:16:bf:9a:fd:d4:12:1c:e0:3c:e5:
                    57:f2:3e:82:06:2f:df:39:c8:b2:9a:15:d7:d1:cf:
                    31:9e:58:98:22:89:d7:f6:31:dc:30:db:50:b2:f7:
                    47:ea:6c:86:07:b6:37:4c:fe:d7:f4:16:40:df:2d:
                    60:a4:da:e4:1b:57:18:00:66:ed:27:f3:09:99:17:
                    ee:cc:82:ed:1d:1d:18:09:9e:8e:d7:a0:7a:90:56:
                    36:34:21:25:13:b4:9f:53:be:70:9e:eb:bb:b5:c2:
                    51:b7:9d:4e:0e:9f:62:5e:22:c7:6d:a7:31:b4:99:
                    8a:46:23:10:30:cb:f0:d6:3a:b6:57:9e:66:17:6b:
                    d0:a1:c0:fc:aa:64:71:31:d2:95:25:84:45:70:3d:
                    aa:9d:94:a7:b2:7d:89:cb:c4:4f:c6:5b:c2:67:b9:
                    b0:37:7b:a9:a5:51:ad:bc:ab:8c:84:b1:43:ef:2a:
                    07:92:75:b6:bf:7c:fa:ae:01:ec:02:c6:98:c4:9f:
                    2c:cf:cd:6a:86:e2:66:73:34:66:e0:c4:fc:61:69:
                    c7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:56:9D:87:9C:40:D6:CE:3D:89:5A:BA:4B:07:89:BE:73:8A:17:39
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031343a3a2f34382d3438203d3e203532353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6014::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:92:c4:cb:dd:bc:b3:54:9d:ad:64:2b:34:99:a1:34:64:de:
         fd:55:40:62:6e:38:43:71:5a:89:2d:56:39:71:8b:95:19:83:
         37:21:54:48:45:0c:67:12:a1:5e:66:c9:53:3d:6b:11:01:23:
         ee:7b:7f:cb:28:e7:de:6b:32:25:22:9a:fa:73:be:14:6f:aa:
         b7:7b:bd:ea:5c:2a:33:93:b1:53:db:08:fc:1d:78:82:9f:18:
         7f:ad:f7:02:6b:ec:a8:b6:b9:3c:a6:a6:3b:e1:1d:45:b4:f2:
         62:6c:45:26:51:81:e0:e4:b8:03:b5:4f:a8:c7:e0:87:c3:70:
         b6:8c:4f:4c:06:a3:f8:03:fc:9f:25:5b:7c:a1:a6:35:92:55:
         18:6c:5d:e2:17:30:5b:97:8b:71:ab:6c:ad:34:7f:05:8e:28:
         7a:09:c0:32:6d:c1:f3:2c:05:b2:9e:b1:0e:40:fc:59:81:e8:
         60:59:ef:37:e5:89:4f:cc:ec:21:84:bf:de:bc:e2:17:6c:53:
         6a:a8:9d:2a:39:08:8b:dc:24:d5:df:da:e8:6d:11:27:4c:ff:
         ea:96:42:94:7b:f0:c0:f2:9f:0e:57:c7:2e:de:da:ad:86:0a:
         36:5f:8b:e0:2c:11:ac:34:57:71:37:39:3d:bc:0c:9e:08:e6:
         16:e0:6d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:02 2025 by rpki-client