Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031643a3a2f34382d3438203d3e203634313033.roa
File:                     323030313a313363373a363031643a3a2f34382d3438203d3e203634313033.roa (raw, json)
Hash identifier:          flsgKLWmwARFj6i9/ApGhlR2L9KAZFnveTLplXzQ5bk=
Subject key identifier:   4F:84:15:66:47:7C:0C:CC:56:BB:C1:82:49:18:DE:64:10:9B:DE:7E
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       590B60BF869731056D5E9F7365EBF35DA88CE878
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031643a3a2f34382d3438203d3e203634313033.roa
Signing time:             Tue 05 Mar 2024 18:16:00 +0000
ROA not before:           Tue 05 Mar 2024 18:11:00 +0000
ROA not after:            Tue 04 Mar 2025 18:16:00 +0000
asID:                     64103
IP address blocks:        2001:13c7:601d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0b:60:bf:86:97:31:05:6d:5e:9f:73:65:eb:f3:5d:a8:8c:e8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:00 2024 GMT
            Not After : Mar  4 18:16:00 2025 GMT
        Subject: CN=4F841566477C0CCC56BBC1824918DE64109BDE7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:87:43:9a:c4:0f:da:61:e6:c8:16:8b:a3:7a:
                    d6:6c:0a:98:d4:c3:fb:c1:2d:f2:61:d4:e0:7a:54:
                    56:09:20:79:fd:2b:43:39:5c:df:1e:94:79:82:61:
                    ca:76:b3:6c:55:50:dc:12:11:01:ce:bb:cf:d2:6d:
                    76:a2:0f:1c:a2:d7:5c:b1:43:d2:1a:16:5a:31:f9:
                    3e:fd:88:66:c1:06:aa:41:80:04:ad:ea:e5:56:05:
                    f0:dd:bf:81:6c:5f:a3:3a:67:f3:ff:03:b8:c4:1d:
                    7f:3b:8a:fb:ed:af:5e:5a:30:ca:4f:48:5a:f9:d0:
                    53:24:1a:c6:ff:2e:30:37:af:aa:b4:1a:b9:93:b9:
                    6d:f1:2d:b5:75:28:6a:d4:cd:e8:82:7e:53:68:41:
                    b4:f3:58:21:c8:11:8e:e2:63:0b:dc:f8:f1:e4:6f:
                    b4:33:ad:0d:37:4a:db:d6:d2:01:81:ff:e4:e0:5e:
                    92:4f:7b:c6:91:59:b0:56:40:b4:c1:f7:66:01:51:
                    bb:ff:4b:e2:41:5c:91:bd:d6:8e:2f:12:cf:6b:e9:
                    c5:ea:ff:db:ea:83:54:c5:08:68:13:46:d5:73:9d:
                    52:ee:f5:06:81:4c:de:81:cd:97:8f:b6:ab:21:15:
                    49:32:38:87:2b:1c:d9:da:c2:bc:2b:fa:87:9e:ab:
                    67:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:84:15:66:47:7C:0C:CC:56:BB:C1:82:49:18:DE:64:10:9B:DE:7E
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031643a3a2f34382d3438203d3e203634313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:601d::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:43:ca:67:ad:3b:9c:05:ef:b7:4a:af:be:9e:ed:49:48:3c:
         88:66:9c:bf:d0:ef:a6:69:d8:b2:97:cf:e5:5d:77:c7:26:95:
         fe:7e:9f:de:b4:a0:dc:a6:b3:24:71:c9:5d:50:b8:44:ea:48:
         89:a3:18:57:4d:4a:a1:bc:4b:2b:ad:eb:36:e9:0e:1c:74:32:
         b7:98:fc:fd:3f:7d:68:3b:a4:2c:1f:35:ac:3b:51:c6:a4:30:
         02:16:e1:c9:d1:ed:84:8e:4c:9e:44:e1:e8:6e:3e:9b:ff:f6:
         96:ae:d8:91:c8:56:a0:41:d2:d3:b0:65:43:e5:f2:42:a4:12:
         0f:c4:d3:af:0e:18:a3:1f:bf:c7:b3:07:5f:5e:15:ee:9d:be:
         a6:73:1a:db:c9:e7:15:c2:e4:de:5f:19:69:1d:d1:c0:6d:1c:
         93:07:7d:1f:59:30:08:f4:ac:52:da:87:90:f2:8c:11:77:b1:
         5c:4e:37:9b:0b:f0:01:24:6b:ac:9e:b8:49:2f:9b:f3:88:bb:
         6c:fa:76:69:bd:94:96:28:ab:eb:a7:24:e4:b9:a1:0a:09:9b:
         dd:20:7a:d1:f1:d1:38:70:11:ab:1a:36:2b:41:10:bb:31:ba:
         54:f1:e5:4e:dd:06:40:91:ba:b2:54:59:e2:3f:12:2c:28:4a:
         07:4c:6c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:44 2024 by rpki-client on console-fra.rpki-client.org