Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031353a3a2f34382d3438203d3e203631343431.roa
File:                     323030313a313363373a363031353a3a2f34382d3438203d3e203631343431.roa (raw, json)
Hash identifier:          KBa4AMN0CFv2/ICt+0lE42nWpThSVlHeFhRqDw1KLNg=
Subject key identifier:   BC:5F:D7:8D:2F:D7:D8:75:B1:5E:F0:C1:07:6C:BF:E5:D7:9D:1A:56
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       5EA6DFD6522CB6695C8A7EF6066436922B37FD3B
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031353a3a2f34382d3438203d3e203631343431.roa
Signing time:             Tue 05 Mar 2024 18:16:07 +0000
ROA not before:           Tue 05 Mar 2024 18:11:07 +0000
ROA not after:            Tue 04 Mar 2025 18:16:07 +0000
asID:                     61441
IP address blocks:        2001:13c7:6015::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a6:df:d6:52:2c:b6:69:5c:8a:7e:f6:06:64:36:92:2b:37:fd:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:07 2024 GMT
            Not After : Mar  4 18:16:07 2025 GMT
        Subject: CN=BC5FD78D2FD7D875B15EF0C1076CBFE5D79D1A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:16:8c:72:3f:e7:1f:a2:f2:ad:d8:b5:05:
                    6a:37:4b:42:df:cd:8b:f4:20:f7:d8:e6:3b:53:b8:
                    0a:36:2a:3b:3d:38:d1:f1:4e:24:60:95:47:43:ae:
                    5d:bf:28:d5:37:66:4c:f8:fb:f8:0a:82:0e:ac:7a:
                    a0:88:b8:c6:0f:6f:77:c8:38:1e:1a:81:8a:74:e3:
                    17:dc:ce:b1:fe:08:e8:93:21:27:22:e0:7a:8c:97:
                    fc:7d:e1:92:9b:cc:4b:20:f2:d5:63:80:2e:e9:70:
                    9b:a1:8f:db:ca:96:cf:c5:a4:66:20:9a:8c:ae:5d:
                    e0:09:ab:6f:1d:25:f7:b1:86:55:c5:db:c0:12:b3:
                    a0:e0:4b:a5:d0:bd:53:d4:64:3a:f1:de:2a:d8:28:
                    23:ce:27:07:d3:af:b1:a9:48:92:29:cb:4f:c2:df:
                    3a:f9:27:34:21:aa:5a:c1:ad:af:a7:de:17:0c:9c:
                    c0:33:2a:cd:76:c9:8a:2e:1a:16:55:84:4e:34:c8:
                    72:df:72:dc:b8:c5:f0:b7:7f:d4:c0:3d:df:ff:11:
                    68:96:c3:d2:d9:7a:1b:13:89:64:51:b3:a1:61:d4:
                    cc:d0:28:65:12:eb:12:3b:15:ee:fa:3f:7f:47:f7:
                    08:81:a7:4a:30:5e:48:e1:18:2b:1e:7d:8c:b2:50:
                    5d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5F:D7:8D:2F:D7:D8:75:B1:5E:F0:C1:07:6C:BF:E5:D7:9D:1A:56
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031353a3a2f34382d3438203d3e203631343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6015::/48

    Signature Algorithm: sha256WithRSAEncryption
         d5:0b:f5:ea:a0:aa:2e:a2:f1:ef:f0:ae:43:ba:4c:ee:2c:8f:
         63:02:6c:6b:c3:aa:17:dc:3c:c6:c0:62:e4:e5:cf:62:c2:4a:
         00:85:c0:ea:e4:46:cc:0c:1a:ee:a2:3e:f1:0d:78:cb:49:4b:
         05:74:36:30:e7:48:ca:9d:ba:9f:61:8c:5c:cf:06:e3:05:a9:
         8d:be:cd:0b:75:d6:2b:d0:1c:d2:e8:a3:d0:be:dd:da:ca:10:
         19:a9:1c:48:31:f8:37:e0:bb:b3:b2:b2:32:f5:83:24:ea:f3:
         fe:d6:d4:cb:b7:6d:a3:fa:77:23:65:b5:5b:fd:5c:b3:9f:9f:
         76:01:41:3c:df:88:a6:7e:dc:5c:2c:93:04:02:1e:75:b1:34:
         f4:19:82:ae:ce:73:6d:3b:ac:8a:2a:2d:f2:f9:29:45:1e:a5:
         6a:5a:ae:8a:7f:07:3c:2b:c1:ea:8c:93:4b:5f:c8:84:48:f0:
         cc:fc:73:d6:c7:b9:ab:b2:e9:76:00:25:2a:9a:9d:52:de:99:
         75:43:35:82:b8:ae:e4:0d:6d:7c:68:e6:1f:b9:6f:4d:d2:2c:
         9d:57:72:48:ac:f7:fe:de:00:25:57:5d:2f:87:f9:69:02:24:
         19:4f:10:fe:f6:12:59:2e:6b:66:88:65:d6:76:b9:50:43:ab:
         bf:35:5b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:08:36 2024 by rpki-client on console-ams.rpki-client.org