Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030313a3a2f34382d3438203d3e2037373737.roa
File:                     323030313a313363373a373030313a3a2f34382d3438203d3e2037373737.roa (raw, json)
Hash identifier:          V9whANACWzLZQgqJdgaoVKz5mJuOm07i/ZzqUFsnfOg=
Subject key identifier:   51:B5:2A:F2:F2:73:72:5C:6A:DA:BF:B0:53:59:BA:D3:8C:61:26:5D
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       3A9DB9FCE8D7284B799D07427F7CBDB1E818C082
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030313a3a2f34382d3438203d3e2037373737.roa
Signing time:             Mon 15 Apr 2024 14:15:01 +0000
ROA not before:           Mon 15 Apr 2024 14:10:01 +0000
ROA not after:            Mon 14 Apr 2025 14:15:01 +0000
asID:                     7777
IP address blocks:        2001:13c7:7001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9d:b9:fc:e8:d7:28:4b:79:9d:07:42:7f:7c:bd:b1:e8:18:c0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Apr 15 14:10:01 2024 GMT
            Not After : Apr 14 14:15:01 2025 GMT
        Subject: CN=51B52AF2F273725C6ADABFB05359BAD38C61265D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:09:c3:61:a8:7b:fc:41:64:3c:4d:94:46:
                    d2:0c:4f:51:36:4f:36:38:54:ee:bd:e7:c6:cf:b0:
                    e5:31:bc:70:1b:fd:ba:12:13:b0:dc:d6:8d:d2:c5:
                    fa:4d:ad:e6:ea:d8:9e:dd:04:85:50:06:1d:a0:d6:
                    0f:29:23:82:bd:12:58:89:ef:3c:48:73:59:1d:1c:
                    d3:64:70:e2:6c:39:53:eb:27:33:a5:ed:96:d4:96:
                    c5:c9:09:f7:05:0a:15:62:92:3a:61:ea:7a:e8:d7:
                    67:7c:ed:80:4a:68:b8:65:2c:73:86:ad:5c:52:45:
                    cf:b9:12:6a:54:cc:b1:a0:23:f1:90:bb:0b:0c:26:
                    dc:d3:a9:6b:f9:af:9b:8d:1e:f2:a2:08:1b:ef:22:
                    fb:7d:81:8d:50:3b:96:49:c9:0f:03:9e:a5:58:d0:
                    3d:12:ee:c5:b4:c7:78:2e:39:47:97:2f:c7:15:11:
                    bd:3a:cf:b3:62:6b:fb:1a:94:b2:f8:3c:8c:c6:6b:
                    cf:59:2e:68:3a:52:7b:63:82:73:6f:d6:af:64:d7:
                    00:fa:1b:4c:e0:95:2b:96:50:0a:c6:7c:2e:8f:47:
                    2d:d8:57:5f:97:44:2f:b6:34:64:71:59:5b:9e:a2:
                    ee:38:f5:88:f8:4b:52:e7:25:ea:65:7a:b4:2f:88:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B5:2A:F2:F2:73:72:5C:6A:DA:BF:B0:53:59:BA:D3:8C:61:26:5D
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030313a3a2f34382d3438203d3e2037373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7001::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:6e:c0:fc:3a:35:32:52:9c:31:01:69:c4:0d:29:44:80:25:
         0d:6e:4a:28:36:58:8a:96:7c:8d:55:be:ed:9b:cf:62:70:20:
         8b:e2:52:86:28:5a:74:95:c4:26:08:47:89:2f:1a:0b:89:a3:
         d0:64:b2:6b:66:bb:79:93:b3:b7:1d:ef:95:aa:02:55:0c:ad:
         ed:c2:aa:1b:d8:d0:2e:99:7c:16:5f:0e:34:95:da:0e:6d:ea:
         5f:bc:63:29:ef:1c:85:4e:14:1c:e6:6d:16:3d:50:58:88:ef:
         ef:73:3c:0e:05:38:04:7d:8e:5f:5e:d8:b3:bf:78:bd:ba:1b:
         33:ea:ea:f2:23:6e:a1:3f:6c:b8:d1:0a:be:0f:29:9c:ef:19:
         4e:da:25:1e:be:ec:2f:1a:fc:c2:4e:c6:ca:d1:31:0a:40:0b:
         5c:ff:08:4f:c2:c0:73:53:e4:4e:e0:18:e4:b0:83:dc:2d:75:
         cb:59:f3:5f:f3:fe:b4:f1:17:b5:84:5a:6b:ab:06:55:e4:96:
         00:8b:43:df:3b:f8:19:78:1e:f2:93:b6:cb:0b:8b:e9:9c:3c:
         cd:c4:b4:9f:1c:2f:2c:ff:f3:95:3b:39:b9:63:20:4d:b5:de:
         e3:87:34:f8:5f:f8:eb:b9:5c:0f:d5:4e:37:91:2d:1e:63:a6:
         3b:6d:0b:b3
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUOp25/OjXKEt5nQdCf3y9segYwIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNDA0MTUxNDEwMDFaFw0yNTA0MTQxNDE1MDFaMDMxMTAvBgNV
BAMTKDUxQjUyQUYyRjI3MzcyNUM2QURBQkZCMDUzNTlCQUQzOEM2MTI2NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZgnDYah7/EFkPE2URtIMT1E2
TzY4VO6958bPsOUxvHAb/boSE7Dc1o3SxfpNrebq2J7dBIVQBh2g1g8pI4K9EliJ
7zxIc1kdHNNkcOJsOVPrJzOl7ZbUlsXJCfcFChVikjph6nro12d87YBKaLhlLHOG
rVxSRc+5EmpUzLGgI/GQuwsMJtzTqWv5r5uNHvKiCBvvIvt9gY1QO5ZJyQ8DnqVY
0D0S7sW0x3guOUeXL8cVEb06z7Nia/salLL4PIzGa89ZLmg6UntjgnNv1q9k1wD6
G0zglSuWUArGfC6PRy3YV1+XRC+2NGRxWVueou449Yj4S1LnJeplerQviMy7AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUUbUq8vJzclxq2r+wU1m604xhJl0wHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzcz
MDMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNzM3MzczNy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACABE8dwATANBgkqhkiG9w0BAQsFAAOCAQEAz27A/Do1MlKcMQFpxA0pRIAlDW5K
KDZYipZ8jVW+7ZvPYnAgi+JShihadJXEJghHiS8aC4mj0GSya2a7eZOztx3vlaoC
VQyt7cKqG9jQLpl8Fl8ONJXaDm3qX7xjKe8chU4UHOZtFj1QWIjv73M8DgU4BH2O
X17Ys794vbobM+rq8iNuoT9suNEKvg8pnO8ZTtolHr7sLxr8wk7GytExCkALXP8I
T8LAc1PkTuAY5LCD3C11y1nzX/P+tPEXtYRaa6sGVeSWAItD3zv4GXge8pO2ywuL
6Zw8zcS0nxwvLP/zlTs5uWMgTbXe44c0+F/467lcD9VON5EtHmOmO20Lsw==
-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:53 2024 by rpki-client on console-fra.rpki-client.org