Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031613a3a2f34382d3438203d3e203532353039.roa
File:                     323030313a313363373a363031613a3a2f34382d3438203d3e203532353039.roa (raw, json)
Hash identifier:          rUVUL0qB2YLEHgohT2vHQCeH4Qraq6VqJr0E2DxO5v4=
Subject key identifier:   DA:AD:6D:2D:B9:F5:B4:5F:5E:37:2B:F0:37:07:81:43:51:A1:FF:00
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       32FBB589CFAAEF69D626F05BCF31D9162F2131A0
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031613a3a2f34382d3438203d3e203532353039.roa
Signing time:             Tue 05 Mar 2024 18:15:52 +0000
ROA not before:           Tue 05 Mar 2024 18:10:52 +0000
ROA not after:            Tue 04 Mar 2025 18:15:52 +0000
asID:                     52509
IP address blocks:        2001:13c7:601a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:fb:b5:89:cf:aa:ef:69:d6:26:f0:5b:cf:31:d9:16:2f:21:31:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:52 2024 GMT
            Not After : Mar  4 18:15:52 2025 GMT
        Subject: CN=DAAD6D2DB9F5B45F5E372BF03707814351A1FF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:a3:c7:f7:1f:21:33:23:45:b2:aa:02:0d:
                    b6:fe:27:38:c1:d2:d7:9f:a1:a4:90:c6:2b:11:e9:
                    0d:55:aa:cf:de:cd:34:1c:36:fc:fb:1b:16:9c:be:
                    06:a0:a9:93:80:b5:21:fc:22:dc:fe:2e:25:dd:80:
                    a4:98:5d:54:c0:de:33:41:c2:96:89:32:bf:6a:90:
                    a8:48:25:0b:81:54:b3:d0:63:13:65:ae:7e:59:b0:
                    cf:93:5c:34:bb:26:9c:ef:8e:a4:0f:0c:15:93:3a:
                    be:12:b4:91:ac:d6:7f:d3:a7:21:6c:c3:08:37:66:
                    c4:2c:d1:b2:50:f1:1a:95:63:81:ec:65:5f:8c:a3:
                    59:8e:6a:ec:54:38:2e:cc:67:82:54:b4:c7:db:fb:
                    ff:61:3e:74:34:73:fd:66:78:21:12:04:b3:8f:68:
                    75:c0:0c:b4:d2:bd:cc:ce:5a:a1:81:ce:a8:80:5a:
                    56:c0:40:f9:f4:d6:3d:dd:2c:6b:7f:2c:ea:7b:5d:
                    20:23:ef:a8:5e:d9:27:94:2a:ec:fa:03:02:1d:88:
                    39:96:fd:59:11:bb:ad:de:29:67:af:04:13:4c:17:
                    0c:4c:64:f2:4a:6c:dc:e0:25:f8:7a:f2:10:a8:0c:
                    61:c3:b3:55:bd:07:95:89:4a:8d:44:df:02:72:f5:
                    8e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AD:6D:2D:B9:F5:B4:5F:5E:37:2B:F0:37:07:81:43:51:A1:FF:00
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031613a3a2f34382d3438203d3e203532353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:601a::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:db:66:81:99:9c:28:11:dc:f1:3c:48:c2:a0:7b:b9:a8:b0:
         04:95:c4:30:00:d6:9e:af:08:64:e7:42:3d:90:9b:3c:27:f9:
         7b:95:08:dd:65:2c:0c:bc:8b:54:63:45:17:e8:ce:a8:b7:6e:
         30:2b:b5:db:9e:40:91:ce:1c:4d:94:34:11:a0:3d:ac:50:93:
         b7:54:db:48:2d:3d:bb:a0:3c:0b:5f:41:67:57:72:86:02:66:
         25:1b:a4:6f:b9:03:14:5f:7c:92:d5:36:5c:a5:bb:1e:16:c0:
         c1:8b:be:06:70:15:d2:87:5c:25:d5:d5:fd:57:b2:53:6d:71:
         b5:c5:21:21:89:d9:d2:07:3f:c0:65:9b:45:1d:27:e6:14:fe:
         c7:32:a1:69:76:eb:76:8a:05:13:3e:f8:4d:0e:59:ff:ad:a4:
         ef:09:3b:82:65:d3:61:32:2a:c0:b2:cf:02:79:fb:59:17:5c:
         8d:12:21:48:c4:87:b6:ff:f3:13:4a:35:6f:63:b7:3f:fd:c5:
         d3:ff:10:fb:4f:d0:87:26:ae:87:41:82:0d:0c:a4:0d:e3:3a:
         3e:e9:c0:09:81:ff:9c:aa:14:66:f3:be:0f:cb:08:e6:42:fd:
         02:58:0b:d2:e0:31:61:d5:0a:be:42:78:ef:05:70:6e:78:4d:
         9f:e8:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 17:49:11 2024 by rpki-client on console-fra.rpki-client.org