Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031393a3a2f34382d3438203d3e203532353038.roa
File:                     323030313a313363373a363031393a3a2f34382d3438203d3e203532353038.roa (raw, json)
Hash identifier:          1RHVnpyeRVJ84Y5FFswbp0RlltXcEFNKgruLghI20KE=
Subject key identifier:   04:F4:66:77:7E:E8:39:B1:38:E3:07:5A:40:7B:18:60:DD:8F:CF:32
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       4796C69D6DE5D123DB39F9B3A3E3DE3E0A094C35
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031393a3a2f34382d3438203d3e203532353038.roa
Signing time:             Tue 04 Feb 2025 18:35:06 +0000
ROA not before:           Tue 04 Feb 2025 18:30:06 +0000
ROA not after:            Tue 03 Feb 2026 18:35:06 +0000
asID:                     52508
IP address blocks:        2001:13c7:6019::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:96:c6:9d:6d:e5:d1:23:db:39:f9:b3:a3:e3:de:3e:0a:09:4c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:06 2025 GMT
            Not After : Feb  3 18:35:06 2026 GMT
        Subject: CN=04F466777EE839B138E3075A407B1860DD8FCF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d5:a8:ae:a7:63:a5:3d:bd:99:33:fd:0f:58:
                    9b:c8:5e:e0:59:cd:1b:41:7d:c8:fb:b3:26:aa:36:
                    60:42:5b:fe:70:8c:93:c8:5c:7f:83:8a:82:e5:92:
                    f9:1c:78:0d:5f:27:ea:0e:77:90:38:ec:3b:2e:5a:
                    c3:7c:a6:98:4f:a6:c3:f7:e8:79:87:eb:03:48:aa:
                    f7:31:05:9e:01:30:11:83:a9:0d:a7:12:ce:9e:29:
                    5d:19:39:a7:3a:a3:32:e6:32:a4:81:a1:83:1a:56:
                    21:9e:ca:c3:f7:58:43:a3:a5:f9:17:f5:ea:70:ed:
                    7d:38:09:90:0e:df:d1:b0:5d:ed:e1:16:6a:4c:43:
                    51:c4:8c:f8:5d:5b:a2:29:e2:a0:92:5b:ef:86:6d:
                    7a:47:90:e9:27:45:8a:ed:3a:ff:8a:23:3d:6c:40:
                    67:0f:73:f2:80:68:5b:5c:9f:57:c1:0a:b3:6f:9d:
                    73:37:71:08:19:17:92:df:e9:9d:47:02:eb:8d:f1:
                    db:fe:eb:11:2c:15:c6:a0:1d:70:b5:b8:72:d2:b7:
                    00:97:11:e9:7a:cb:34:72:00:9c:8d:bc:ee:2f:6a:
                    2b:24:7a:3a:d5:ef:9c:89:b5:e8:39:81:2b:d2:d5:
                    b7:30:93:45:db:9b:12:cc:47:56:64:81:96:5d:99:
                    e6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F4:66:77:7E:E8:39:B1:38:E3:07:5A:40:7B:18:60:DD:8F:CF:32
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031393a3a2f34382d3438203d3e203532353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6019::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:f8:a1:b4:d5:89:1e:84:df:18:ca:6e:67:c2:8d:a8:72:dc:
         7b:03:60:01:91:54:9a:2c:8d:92:a6:19:ea:bc:5c:8c:51:56:
         bd:2f:55:7e:65:e1:92:b9:d8:c1:4f:48:ff:a2:5e:f8:15:a8:
         1f:0b:e7:e6:8a:de:98:70:2d:55:aa:8b:fa:66:0e:89:36:d5:
         0b:2b:a7:28:8a:09:9a:8d:83:bf:f5:4a:3f:4d:94:af:c7:59:
         73:14:b9:bd:0c:6e:3f:ea:0d:8d:b2:67:8c:de:b1:f9:b5:91:
         4e:f9:36:7c:18:80:92:bf:25:76:0f:de:00:75:20:3c:00:be:
         90:ff:c9:e3:e0:bb:30:94:de:1e:3f:29:c9:13:73:d9:dd:e3:
         49:4d:df:af:a8:54:27:4d:41:52:75:43:e6:b5:e7:f0:f9:a7:
         df:74:05:60:d2:9b:6d:d5:40:16:1e:e8:6d:87:fa:99:bf:78:
         b6:35:2f:df:57:4d:d9:0d:60:2a:ee:24:5c:3e:fd:b5:48:00:
         8c:a4:2d:de:2b:cf:7f:c9:80:1b:fe:af:91:c6:c8:c9:db:c9:
         3d:f0:b8:71:ae:91:9d:66:07:29:00:97:6f:58:5f:92:63:cf:
         02:5a:c6:58:00:ff:72:d8:9d:55:02:c2:d3:65:32:74:5c:70:
         dd:dd:25:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:08 2025 by rpki-client