Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031383a3a2f34382d3438203d3e203631353035.roa
File:                     323030313a313363373a363031383a3a2f34382d3438203d3e203631353035.roa (raw, json)
Hash identifier:          hNEVErBa9kFxQQjEupJwgbCticq2/GmDO82AtKH9gbk=
Subject key identifier:   69:F0:D0:48:B4:9F:8D:E4:01:D8:C8:B4:D9:6E:F0:1B:DF:4E:71:31
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       1477594DBA3306C4BF4E2E9B01E139E035C95F90
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031383a3a2f34382d3438203d3e203631353035.roa
Signing time:             Tue 04 Feb 2025 18:35:05 +0000
ROA not before:           Tue 04 Feb 2025 18:30:05 +0000
ROA not after:            Tue 03 Feb 2026 18:35:05 +0000
asID:                     61505
IP address blocks:        2001:13c7:6018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:77:59:4d:ba:33:06:c4:bf:4e:2e:9b:01:e1:39:e0:35:c9:5f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:05 2025 GMT
            Not After : Feb  3 18:35:05 2026 GMT
        Subject: CN=69F0D048B49F8DE401D8C8B4D96EF01BDF4E7131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:66:f1:62:45:ef:f3:94:b4:31:0d:ee:0a:b1:
                    dd:9e:9d:6a:e6:8c:d4:9e:dd:c2:3e:a3:89:14:b0:
                    e9:95:f1:84:3a:dd:f1:76:86:a1:29:ee:bb:77:e1:
                    72:af:43:00:b1:91:f9:8e:0f:aa:f4:59:e6:99:ee:
                    62:59:8d:83:40:9b:c2:23:c5:80:61:56:2b:c7:8b:
                    fa:bf:ff:01:9f:f5:12:ce:30:6f:88:30:9c:e8:e0:
                    2b:aa:b3:42:60:ea:0e:58:f7:b7:eb:33:30:e6:a7:
                    0c:47:68:fc:ca:1a:97:2e:85:0e:23:81:0b:18:4e:
                    22:e7:da:8e:3a:bc:72:c5:cd:f5:fe:22:4b:2f:af:
                    6c:f0:82:54:9b:98:4d:f4:c0:bd:2e:55:67:4a:67:
                    26:9f:8a:e2:cd:c3:55:46:d9:a2:00:17:f3:c2:06:
                    b9:cf:ea:39:47:9e:72:82:a1:3b:69:39:b5:71:8d:
                    1e:75:b6:84:ef:13:52:0d:04:5f:a1:9c:a3:b4:76:
                    70:86:98:33:f4:7e:3e:8b:c6:f9:93:7b:9a:8f:da:
                    cd:fd:e9:5b:fc:35:80:6b:4b:2c:5c:09:9b:23:21:
                    5d:be:af:8e:cd:b0:2d:bf:a7:73:c6:3f:73:8a:fc:
                    7b:70:24:0d:a9:22:27:dd:4f:c5:c1:c5:0c:33:02:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F0:D0:48:B4:9F:8D:E4:01:D8:C8:B4:D9:6E:F0:1B:DF:4E:71:31
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031383a3a2f34382d3438203d3e203631353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6018::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:4f:07:52:14:e2:55:54:19:46:6e:02:27:5e:dd:ed:06:18:
         b3:32:db:cc:2e:59:de:5e:97:ed:8d:1d:c8:17:5c:9c:ac:95:
         ac:b9:a8:91:04:3f:17:6a:50:80:96:4d:88:f5:ea:74:90:5e:
         4d:38:64:0e:cb:d0:cd:2a:78:31:cf:69:7d:07:93:11:a9:c2:
         55:96:a2:53:88:9a:1d:e5:ac:07:c6:b9:f5:2a:61:ab:b3:ee:
         d7:d0:45:ee:99:74:f9:e7:73:75:98:dd:c2:20:2d:39:54:6b:
         aa:d6:23:cb:e4:7e:51:de:8a:d0:5f:d9:ec:35:f8:46:4c:cd:
         f2:f1:30:fe:ad:5a:46:5f:88:75:88:22:ec:76:92:fb:3c:b9:
         49:58:95:e0:5f:80:5c:96:7b:38:3d:71:34:ea:63:95:cd:b9:
         5f:68:1d:a2:d9:18:f4:bd:76:38:e6:7d:4e:4a:63:61:8b:d6:
         b7:9a:d6:bc:87:9b:55:2e:6a:83:4e:c1:87:cb:bd:96:18:fb:
         03:87:89:76:1c:e4:02:80:1b:87:b2:07:ed:d1:30:6c:16:29:
         a5:14:33:0c:17:43:90:98:9c:0e:74:03:85:69:27:f8:7d:67:
         3f:e3:76:ea:33:b6:b7:60:1c:3e:3b:ad:eb:cd:1b:42:0d:dd:
         39:0e:27:40
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUFHdZTbozBsS/Ti6bAeE54DXJX5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5
REIzNjlGQzAeFw0yNTAyMDQxODMwMDVaFw0yNjAyMDMxODM1MDVaMDMxMTAvBgNV
BAMTKDY5RjBEMDQ4QjQ5RjhERTQwMUQ4QzhCNEQ5NkVGMDFCREY0RTcxMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcZvFiRe/zlLQxDe4Ksd2enWrm
jNSe3cI+o4kUsOmV8YQ63fF2hqEp7rt34XKvQwCxkfmOD6r0WeaZ7mJZjYNAm8Ij
xYBhVivHi/q//wGf9RLOMG+IMJzo4Cuqs0Jg6g5Y97frMzDmpwxHaPzKGpcuhQ4j
gQsYTiLn2o46vHLFzfX+Iksvr2zwglSbmE30wL0uVWdKZyafiuLNw1VG2aIAF/PC
BrnP6jlHnnKCoTtpObVxjR51toTvE1INBF+hnKO0dnCGmDP0fj6LxvmTe5qP2s39
6Vv8NYBrSyxcCZsjIV2+r47NsC2/p3PGP3OK/HtwJA2pIifdT8XBxQwzAs89AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUafDQSLSfjeQB2Mi02W7wG99OcTEwHwYDVR0j
BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE
N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE
NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC
QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF
MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzYz
MDMxMzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzMDM1LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAIAETx2AYMA0GCSqGSIb3DQEBCwUAA4IBAQC+TwdSFOJVVBlGbgInXt3tBhiz
MtvMLlneXpftjR3IF1ycrJWsuaiRBD8XalCAlk2I9ep0kF5NOGQOy9DNKngxz2l9
B5MRqcJVlqJTiJod5awHxrn1KmGrs+7X0EXumXT553N1mN3CIC05VGuq1iPL5H5R
3orQX9nsNfhGTM3y8TD+rVpGX4h1iCLsdpL7PLlJWJXgX4Bclns4PXE06mOVzblf
aB2i2Rj0vXY45n1OSmNhi9a3mta8h5tVLmqDTsGHy72WGPsDh4l2HOQCgBuHsgft
0TBsFimlFDMMF0OQmJwOdAOFaSf4fWc/43bqM7a3YBw+O63rzRtCDd05DidA
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:10 2025 by rpki-client