Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031363a3a2f34382d3438203d3e203631343934.roa
File:                     323030313a313363373a363031363a3a2f34382d3438203d3e203631343934.roa (raw, json)
Hash identifier:          L1uKus6ikfuXEH6Q2EQyjaEw6M1gV05MVNjbOlTHd4I=
Subject key identifier:   28:D2:3B:36:02:7C:80:BC:06:24:A6:1F:AD:48:17:39:F8:C8:A5:83
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       1A878325D7259FA0B7B6673D59086849F2547F26
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031363a3a2f34382d3438203d3e203631343934.roa
Signing time:             Tue 05 Mar 2024 18:16:12 +0000
ROA not before:           Tue 05 Mar 2024 18:11:12 +0000
ROA not after:            Tue 04 Mar 2025 18:16:12 +0000
asID:                     61494
IP address blocks:        2001:13c7:6016::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:87:83:25:d7:25:9f:a0:b7:b6:67:3d:59:08:68:49:f2:54:7f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:12 2024 GMT
            Not After : Mar  4 18:16:12 2025 GMT
        Subject: CN=28D23B36027C80BC0624A61FAD481739F8C8A583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:6f:c2:5b:6e:ca:27:5c:55:2e:fd:ce:23:
                    13:b5:b3:86:d9:4c:90:fd:8a:3a:fb:d3:4c:33:f9:
                    12:e4:17:0f:a1:37:e5:41:ae:4a:3f:34:6e:37:30:
                    53:cc:f5:8b:17:b0:4a:55:0c:1e:e0:5f:b9:4b:f1:
                    34:ab:53:7e:ed:e1:51:aa:a8:ec:f6:f3:f4:66:f8:
                    5a:7e:4c:6e:1b:0c:0c:4a:ae:5b:12:a9:89:3d:c8:
                    6f:13:15:55:dc:b4:9c:cd:44:bf:eb:73:7e:a8:ff:
                    e2:92:f9:2a:80:eb:a5:55:13:e7:91:04:cb:b0:0f:
                    66:48:b9:c8:33:0a:b0:6d:fb:b5:e5:9c:ff:b9:36:
                    cf:eb:69:66:34:81:a4:e1:a4:be:f9:d8:4b:46:24:
                    43:d2:e6:72:f0:34:21:91:ed:b9:f7:ad:8b:65:de:
                    10:aa:de:33:71:3a:5e:be:d7:14:85:67:1d:18:c3:
                    a4:99:bf:62:da:d5:4e:0f:bd:19:ed:9c:d3:08:eb:
                    24:01:6a:1c:d0:3b:f0:f8:36:3a:c3:2e:57:89:ad:
                    4f:3b:6f:36:e9:62:36:69:cd:49:68:f5:44:cc:da:
                    82:46:ca:3c:11:27:9c:e5:90:84:54:b5:b8:e7:8a:
                    56:bf:65:bd:8d:e8:c0:51:ef:a8:e3:2f:49:2f:18:
                    8f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D2:3B:36:02:7C:80:BC:06:24:A6:1F:AD:48:17:39:F8:C8:A5:83
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031363a3a2f34382d3438203d3e203631343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6016::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:9a:89:6c:be:de:3f:f3:c6:01:9c:9b:42:c9:f9:81:08:
         5f:93:8e:c8:8c:54:4c:ab:72:47:5b:df:0b:59:5a:37:6b:57:
         1f:69:1c:35:56:50:fd:49:6a:ed:2c:8d:f8:b1:c7:d8:c2:c3:
         a9:b9:c6:64:f6:d5:8e:df:57:6c:c8:19:4e:b4:f0:4f:5c:9d:
         1f:2e:35:b1:fa:80:ec:6b:c6:30:80:2e:24:ea:c9:e1:b5:1d:
         fc:f0:a4:e0:1e:3d:c9:47:07:b1:24:9b:0d:45:ef:e1:ab:a6:
         28:ef:aa:c3:14:8c:20:73:8c:db:43:11:f1:00:08:31:dc:2d:
         28:64:38:c3:43:b2:73:fc:84:d8:f8:52:2e:61:9a:ad:98:4c:
         d0:73:44:31:25:9b:d8:0c:7a:e9:3f:e5:a7:38:10:f9:28:d6:
         da:ce:f0:7d:63:45:69:8c:69:43:c5:13:d7:67:76:2a:bf:94:
         ab:23:d0:92:49:fb:d9:09:7d:37:40:f6:d0:ac:b7:0b:7f:3b:
         56:0e:bf:ce:92:0a:75:b8:03:95:26:1d:bc:f6:ba:24:f7:32:
         ae:86:73:62:cd:4d:e6:cc:8c:87:ab:6f:99:e3:b0:83:fe:c6:
         2d:be:a7:53:d1:d4:f7:cd:92:e0:97:5a:f4:1d:2a:28:22:1f:
         f2:88:ae:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:44 2024 by rpki-client on console-fra.rpki-client.org