Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031623a3a2f34382d3438203d3e203631353230.roa
File:                     323030313a313363373a363031623a3a2f34382d3438203d3e203631353230.roa (raw, json)
Hash identifier:          0vCyh0y7U3f8rdAxB9vqmA24CMbyRpyPyK6dlH/ETxQ=
Subject key identifier:   72:12:B4:AC:F4:75:DD:45:3E:39:51:7D:AA:A2:DD:E3:7D:C8:A2:3E
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       5E433D5160F1EF244F92A78AF05613214D3A9E35
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031623a3a2f34382d3438203d3e203631353230.roa
Signing time:             Tue 05 Mar 2024 18:16:09 +0000
ROA not before:           Tue 05 Mar 2024 18:11:09 +0000
ROA not after:            Tue 04 Mar 2025 18:16:09 +0000
asID:                     61520
IP address blocks:        2001:13c7:601b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:43:3d:51:60:f1:ef:24:4f:92:a7:8a:f0:56:13:21:4d:3a:9e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:09 2024 GMT
            Not After : Mar  4 18:16:09 2025 GMT
        Subject: CN=7212B4ACF475DD453E39517DAAA2DDE37DC8A23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1e:ec:33:d7:94:16:84:85:52:a7:f0:1a:54:
                    6e:93:89:da:16:11:85:6e:3c:20:ea:33:f1:25:e2:
                    63:ec:42:d6:97:2a:58:1f:e5:b9:c5:8b:03:bf:23:
                    bf:81:b7:aa:56:50:92:87:c2:79:e6:73:50:4c:de:
                    2a:6a:e0:e5:d9:a5:66:08:b5:43:88:18:a1:10:61:
                    43:ab:2e:53:8d:1d:04:2a:70:f6:dd:29:06:04:ea:
                    53:29:53:be:86:2a:9b:3f:7e:97:a9:38:ff:9d:d9:
                    cd:18:e9:08:5b:60:43:ad:b1:d8:7b:8c:f6:8c:20:
                    59:31:bb:ed:47:9a:54:99:83:f1:6e:62:15:34:b0:
                    2c:55:e4:79:24:cd:23:2c:77:7a:ae:53:1c:87:58:
                    dd:0f:cc:ca:b0:6a:8f:b8:a6:fd:60:15:96:5c:1c:
                    94:af:c0:6f:74:be:d5:c1:ac:3a:dd:89:3c:92:a6:
                    81:bf:f2:f8:bb:e7:bf:3d:b7:f4:ab:d0:05:42:c7:
                    35:38:b5:6b:79:30:d7:66:e7:61:f9:10:82:53:ea:
                    0d:c9:48:48:75:ae:64:92:4e:df:29:23:4e:cf:a3:
                    4c:66:9a:73:e6:8b:21:c3:5f:ce:d6:ae:23:4d:d7:
                    8b:ca:e5:fc:21:7d:07:ce:5f:a8:30:52:f7:4c:9d:
                    00:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:12:B4:AC:F4:75:DD:45:3E:39:51:7D:AA:A2:DD:E3:7D:C8:A2:3E
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031623a3a2f34382d3438203d3e203631353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:601b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:f6:a9:69:06:5f:9a:b4:bd:77:65:4f:c5:01:ee:3a:15:1d:
         b7:0e:ef:c6:3d:19:41:96:70:9f:f7:78:e2:84:f0:91:a8:cc:
         eb:47:97:8a:73:6a:fe:b6:81:1c:cc:48:1e:ec:3c:1e:96:67:
         30:71:ae:3e:f6:e7:55:b2:66:a6:b6:7f:12:e4:99:7d:c2:0c:
         e9:2e:b3:4c:98:84:3b:4a:88:43:c0:59:30:e5:de:66:ce:02:
         5d:e3:aa:41:34:10:e8:5f:d5:2a:19:d5:78:42:92:52:f3:b9:
         29:89:0e:d5:b7:39:d2:cf:f0:0c:41:97:e5:e1:f8:04:f3:6d:
         49:78:46:fc:48:fd:9b:19:36:bb:e3:19:85:a0:91:ff:f8:48:
         75:de:69:5a:1c:d9:2e:d6:5b:8a:1b:d9:96:fa:b4:d2:cd:35:
         69:8d:0b:7a:35:35:3b:67:8a:4e:bd:60:83:c6:ec:5f:22:18:
         7a:ee:cc:24:65:be:d3:55:32:9c:48:6f:48:bc:d9:09:6d:a2:
         4b:3d:24:83:dd:46:9f:1a:3a:f1:1c:17:43:16:8b:8b:d5:42:
         a5:f6:08:1f:b1:b9:6d:63:c2:75:88:4d:cf:06:61:51:d7:8a:
         f0:29:b1:41:07:2a:8b:b0:f1:df:85:7d:96:5e:fc:46:08:c7:
         2e:0e:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 19:28:46 2024 by rpki-client on console-ams.rpki-client.org