Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/323030313a313363373a373030353a3a2f34382d3438203d3e203330313333.roa
File:                     323030313a313363373a373030353a3a2f34382d3438203d3e203330313333.roa (raw, json)
Hash identifier:          Eg+Gi0gOxBVqIGtYIM7+/sUxdYy9qWg9aTmF2EEHATA=
Subject key identifier:   C8:36:1D:F0:05:7E:40:A6:F6:6E:4F:29:6D:39:60:B7:03:F7:1B:B3
Certificate issuer:       /CN=24519FD36C740551C4C27EB1475374945FBAF364
Certificate serial:       7DA3DFBBE66A63C1F0D491A60DEBF828F708C592
Authority key identifier: 24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/323030313a313363373a373030353a3a2f34382d3438203d3e203330313333.roa
Signing time:             Tue 05 Mar 2024 17:39:53 +0000
ROA not before:           Tue 05 Mar 2024 17:34:53 +0000
ROA not after:            Tue 04 Mar 2025 17:39:53 +0000
asID:                     30133
IP address blocks:        2001:13c7:7005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl
                          rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a3:df:bb:e6:6a:63:c1:f0:d4:91:a6:0d:eb:f8:28:f7:08:c5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24519FD36C740551C4C27EB1475374945FBAF364
        Validity
            Not Before: Mar  5 17:34:53 2024 GMT
            Not After : Mar  4 17:39:53 2025 GMT
        Subject: CN=C8361DF0057E40A6F66E4F296D3960B703F71BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:5c:0a:99:2e:22:52:5f:c7:3d:e6:95:25:
                    05:dd:aa:79:67:43:c7:f8:b6:86:1a:ca:0c:9b:1c:
                    55:ee:c2:dd:9d:3e:8d:9b:55:49:02:cb:06:62:da:
                    d5:9c:75:27:e7:b6:0a:a6:9a:7c:2e:93:4f:32:97:
                    71:48:91:8e:7c:9f:81:21:d1:3f:ad:c5:ed:0d:79:
                    2f:cc:c0:d7:e3:bc:dc:11:9e:b0:18:2d:4a:35:ff:
                    8f:03:48:89:3a:66:e6:60:b6:23:73:20:2e:58:95:
                    f5:67:4e:41:3e:1d:21:89:8d:f7:47:a0:6e:27:63:
                    ae:c4:2a:06:f7:6c:97:b0:1f:65:a3:87:ae:40:6e:
                    c1:97:c8:9f:be:3a:05:78:ec:50:09:11:e5:28:63:
                    61:fc:a8:23:a0:07:b9:27:85:f9:57:c6:63:68:80:
                    54:36:1a:35:1d:37:1d:f6:91:36:2e:ab:a1:da:4e:
                    57:42:d2:b7:ff:87:c6:e4:7b:35:a2:f1:c9:95:5d:
                    24:fa:81:af:a7:1f:96:eb:0a:3c:9a:bc:e1:08:39:
                    8b:6e:31:b6:72:17:f7:24:e1:b7:78:74:f6:34:d6:
                    e2:35:d9:fb:93:9a:e3:e5:42:32:54:7b:93:d9:c7:
                    2e:c0:76:89:65:1b:fc:81:9b:cb:1c:27:84:af:2f:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:36:1D:F0:05:7E:40:A6:F6:6E:4F:29:6D:39:60:B7:03:F7:1B:B3
            X509v3 Authority Key Identifier:
                keyid:24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/323030313a313363373a373030353a3a2f34382d3438203d3e203330313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7005::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:45:37:78:06:6a:5f:6a:10:24:9d:53:0a:ed:67:1e:23:21:
         5e:2d:da:97:8b:b5:d6:c9:47:20:48:a1:dd:85:d3:0b:5d:3d:
         e6:37:e3:7d:eb:18:98:83:4d:e4:e9:9b:e4:3b:3d:bd:00:13:
         e0:88:3a:4b:78:ec:10:d2:d6:70:ee:7b:88:08:58:24:58:7f:
         99:09:92:62:25:08:1e:43:3c:59:b0:c5:48:f2:a3:b7:59:38:
         c8:ac:29:69:69:39:1a:70:e1:4b:68:bb:4b:6e:d1:e1:bb:8e:
         a4:37:89:f1:6b:57:17:b0:e3:54:bc:38:d7:d2:fc:0b:84:7c:
         30:61:13:9d:69:de:16:ad:30:0c:64:9e:25:f8:7f:8a:28:c1:
         3c:b8:43:d5:fa:7b:e5:76:05:2d:85:1c:e6:fa:01:60:d3:a3:
         df:69:8f:13:83:c5:f3:e8:a3:60:0c:48:3e:df:5c:6c:c1:90:
         a4:29:44:7e:3d:0d:15:cd:46:bd:e4:6b:f6:07:6c:3f:d4:65:
         87:6a:29:11:43:d2:d3:70:77:da:30:18:b5:74:7e:81:c9:0e:
         4a:4f:f8:dd:fd:eb:f2:cd:ae:48:aa:b2:2e:12:f6:cc:b8:1d:
         e3:e5:be:a3:54:3e:cd:d4:55:4a:65:e3:dd:fc:c6:91:50:cf:
         10:71:41:34
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUfaPfu+ZqY8Hw1JGmDev4KPcIxZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ1MTlGRDM2Qzc0MDU1MUM0QzI3RUIxNDc1Mzc0OTQ1
RkJBRjM2NDAeFw0yNDAzMDUxNzM0NTNaFw0yNTAzMDQxNzM5NTNaMDMxMTAvBgNV
BAMTKEM4MzYxREYwMDU3RTQwQTZGNjZFNEYyOTZEMzk2MEI3MDNGNzFCQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBIlwKmS4iUl/HPeaVJQXdqnln
Q8f4toYaygybHFXuwt2dPo2bVUkCywZi2tWcdSfntgqmmnwuk08yl3FIkY58n4Eh
0T+txe0NeS/MwNfjvNwRnrAYLUo1/48DSIk6ZuZgtiNzIC5YlfVnTkE+HSGJjfdH
oG4nY67EKgb3bJewH2Wjh65AbsGXyJ++OgV47FAJEeUoY2H8qCOgB7knhflXxmNo
gFQ2GjUdNx32kTYuq6HaTldC0rf/h8bkezWi8cmVXST6ga+nH5brCjyavOEIOYtu
MbZyF/ck4bd4dPY01uI12fuTmuPlQjJUe5PZxy7AdollG/yBm8scJ4SvL8tVAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUyDYd8AV+QKb2bk8pbTlgtwP3G7MwHwYDVR0j
BBgwFoAUJFGf02x0BVHEwn6xR1N0lF+682QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNEM0NzBGQ0JEOTYyOTdGRUY4QjM2MjM1QTg4MUIzM0VF
QUM5QzIyNjk5Q0VCQkMzNEEzRjdENDQ0MDZBQUQxLzAvMjQ1MTlGRDM2Qzc0MDU1
MUM0QzI3RUIxNDc1Mzc0OTQ1RkJBRjM2NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNDUxOUZEMzZDNzQwNTUxQzRD
MjdFQjE0NzUzNzQ5NDVGQkFGMzY0LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjRDNDcwRkNCRDk2Mjk3RkVGOEIzNjIzNUE4ODFCMzNFRUFDOUMyMjY5
OUNFQkJDMzRBM0Y3RDQ0NDA2QUFEMS8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzcz
MDMwMzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzMwMzEzMzMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAIAETx3AFMA0GCSqGSIb3DQEBCwUAA4IBAQCRRTd4BmpfahAknVMK7WceIyFe
LdqXi7XWyUcgSKHdhdMLXT3mN+N96xiYg03k6ZvkOz29ABPgiDpLeOwQ0tZw7nuI
CFgkWH+ZCZJiJQgeQzxZsMVI8qO3WTjIrClpaTkacOFLaLtLbtHhu46kN4nxa1cX
sONUvDjX0vwLhHwwYROdad4WrTAMZJ4l+H+KKME8uEPV+nvldgUthRzm+gFg06Pf
aY8Tg8Xz6KNgDEg+31xswZCkKUR+PQ0VzUa95Gv2B2w/1GWHaikRQ9LTcHfaMBi1
dH6ByQ5KT/jd/evyza5IqrIuEvbMuB3j5b6jVD7N1FVKZePd/MaRUM8QcUE0
-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:14 2024 by rpki-client on console-ams.rpki-client.org