Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/323030313a313363373a373030353a3a2f34382d3438203d3e203330313333.roa
File:                     323030313a313363373a373030353a3a2f34382d3438203d3e203330313333.roa (raw, json)
Hash identifier:          2lcBYOgZsPU+VvOu7dGVly8FARf2HqYaVlSdaMH6vQE=
Subject key identifier:   B6:B7:29:1A:5E:BB:AF:69:A7:4C:2F:5A:B6:72:A2:B9:92:F3:51:8F
Certificate issuer:       /CN=24519FD36C740551C4C27EB1475374945FBAF364
Certificate serial:       79E97B080DB8B17800C0C7B27C67A3E98CF7023D
Authority key identifier: 24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/323030313a313363373a373030353a3a2f34382d3438203d3e203330313333.roa
Signing time:             Tue 04 Feb 2025 18:04:34 +0000
ROA not before:           Tue 04 Feb 2025 17:59:34 +0000
ROA not after:            Tue 03 Feb 2026 18:04:34 +0000
asID:                     30133
IP address blocks:        2001:13c7:7005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl
                          rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e9:7b:08:0d:b8:b1:78:00:c0:c7:b2:7c:67:a3:e9:8c:f7:02:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24519FD36C740551C4C27EB1475374945FBAF364
        Validity
            Not Before: Feb  4 17:59:34 2025 GMT
            Not After : Feb  3 18:04:34 2026 GMT
        Subject: CN=B6B7291A5EBBAF69A74C2F5AB672A2B992F3518F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b8:2f:6f:3a:c8:19:49:66:cd:f9:5f:a3:f3:
                    cb:53:de:de:f3:2a:8d:97:13:a7:75:aa:a6:fe:3d:
                    e4:77:31:25:49:ea:b6:78:d1:7f:62:97:f6:5b:ec:
                    08:8f:e6:09:88:c0:e0:c6:87:6f:82:03:aa:26:08:
                    3a:a0:98:d7:39:cb:54:4e:ee:7c:03:88:6e:3e:d0:
                    73:e7:07:8d:94:b6:5f:cc:5f:a1:21:6e:db:54:c2:
                    14:e7:97:d0:83:87:35:dc:22:18:49:d2:8b:52:28:
                    0e:91:66:11:69:e2:f6:69:ea:82:24:b7:eb:bc:ae:
                    5c:ea:6a:6c:8c:99:24:49:f1:c9:a7:45:1c:56:b4:
                    c3:27:84:e6:a4:07:25:ee:03:d2:aa:17:66:42:96:
                    28:56:db:b2:fc:28:41:e5:4d:5f:5f:b0:2e:2c:83:
                    b6:86:e4:b5:9c:1d:34:36:da:9a:26:c3:5e:31:fa:
                    ad:c2:9b:e4:84:4a:95:69:78:ad:8b:eb:51:ef:1d:
                    53:0c:02:85:91:8a:bd:0b:c2:f2:18:e7:92:21:23:
                    ae:bd:46:aa:01:ea:0d:27:4d:5d:00:bf:83:24:c8:
                    05:8b:e2:9e:7f:8f:1a:8f:1e:28:4a:c5:5b:4a:43:
                    10:ad:d3:f7:b8:8f:45:cf:08:27:7f:54:7d:55:f5:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:29:1A:5E:BB:AF:69:A7:4C:2F:5A:B6:72:A2:B9:92:F3:51:8F
            X509v3 Authority Key Identifier:
                keyid:24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/323030313a313363373a373030353a3a2f34382d3438203d3e203330313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7005::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:fe:f8:c3:53:dc:fd:32:ce:cc:b0:71:2e:55:ee:50:77:dd:
         e7:3d:bd:1b:9e:c6:53:b0:e6:47:0b:46:08:30:ed:0a:84:c9:
         a9:f5:bd:5c:e5:d6:1e:32:8c:9c:d2:e6:d3:2b:78:b0:41:06:
         0b:25:63:ae:7d:eb:3c:33:47:51:df:db:16:dc:bb:e8:09:e9:
         f3:16:be:e2:dc:fc:b0:32:e9:20:31:75:22:c5:33:d1:17:db:
         26:16:ac:62:68:7b:ea:6b:fd:90:a6:db:d5:8a:f5:28:59:3e:
         41:99:9e:bc:c2:5c:d2:ca:5d:53:48:0b:40:1b:9f:ca:2f:fa:
         3c:9c:2d:7c:a2:38:20:c5:50:27:8d:a0:27:b4:e6:fc:5c:23:
         61:7a:da:fb:30:ab:7b:8d:40:a7:a6:c2:1d:d9:d2:d5:73:d6:
         dc:46:1b:0c:3c:3a:ee:56:1c:93:98:7d:5b:e1:38:ce:e5:6a:
         33:b5:14:9c:f6:9c:ee:bb:7e:5f:d0:aa:01:30:da:aa:48:f9:
         c1:27:21:db:fd:b3:c7:b8:38:bb:b6:f7:30:12:03:94:7e:bd:
         1a:4c:e4:24:4d:d7:3b:f4:ab:13:f2:7c:aa:db:a2:b8:c4:f1:
         2c:81:6f:26:6a:56:f4:06:6f:1e:09:6a:c5:72:5b:4f:e8:0f:
         e4:35:9c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:42 2025 by rpki-client