Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030323a3a2f34382d3438203d3e2037373737.roa
File:                     323030313a313363373a373030323a3a2f34382d3438203d3e2037373737.roa (raw, json)
Hash identifier:          qHvgoTUCHJrMJ2GA9ZOo73fXQAEBfKt3CCOlGOb7B8I=
Subject key identifier:   55:95:6E:F3:5C:99:06:6B:93:DF:D6:85:1B:03:DD:B4:CF:79:CB:AE
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       47B97C7AB5A3D4D8F605A38B02B59BF4C7371287
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030323a3a2f34382d3438203d3e2037373737.roa
Signing time:             Mon 17 Mar 2025 15:12:09 +0000
ROA not before:           Mon 17 Mar 2025 15:07:09 +0000
ROA not after:            Mon 16 Mar 2026 15:12:09 +0000
asID:                     7777
IP address blocks:        2001:13c7:7002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b9:7c:7a:b5:a3:d4:d8:f6:05:a3:8b:02:b5:9b:f4:c7:37:12:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar 17 15:07:09 2025 GMT
            Not After : Mar 16 15:12:09 2026 GMT
        Subject: CN=55956EF35C99066B93DFD6851B03DDB4CF79CBAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:e4:b0:c5:22:d0:90:09:e8:f0:b3:f5:d8:
                    da:cf:09:65:e6:ba:29:0a:9d:16:2a:d4:38:d3:99:
                    a6:dc:f9:6a:c1:a0:d4:0d:83:76:c2:12:b1:0c:51:
                    af:9f:66:49:e2:64:f2:07:66:52:e4:07:30:b9:33:
                    6c:e5:31:35:17:79:40:6c:cb:11:52:84:9d:c1:8c:
                    a1:2c:a6:dd:49:41:e7:0d:1a:ee:a2:42:1a:a5:c1:
                    1a:cb:3e:c1:96:b2:e4:b1:77:61:39:67:b7:44:0d:
                    3c:6e:ba:47:d7:4c:a8:b0:f1:af:02:6b:43:89:c7:
                    5a:89:f2:10:a3:b2:d6:fd:4b:84:49:e1:35:05:98:
                    25:09:be:d5:3c:81:7d:e5:93:c8:fb:9f:62:c8:83:
                    c4:5a:c4:21:62:98:5d:fc:b7:0a:40:e3:5a:85:c3:
                    59:d7:89:79:64:de:f5:0b:25:a7:0f:a9:e1:06:e8:
                    35:9a:73:08:c5:79:bb:7c:d1:35:b5:eb:cb:a7:84:
                    6c:35:ba:0c:fb:ec:68:db:11:47:47:41:cd:cd:1d:
                    69:fa:65:f8:d4:ce:db:90:d8:68:0f:cc:f1:39:fc:
                    a2:6a:84:00:cc:ed:fb:e7:f1:56:e1:8b:b3:ec:ee:
                    c0:e6:fd:65:39:d4:d9:d5:7c:22:07:60:90:75:a1:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:95:6E:F3:5C:99:06:6B:93:DF:D6:85:1B:03:DD:B4:CF:79:CB:AE
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030323a3a2f34382d3438203d3e2037373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         e1:b8:10:87:97:e6:fe:6d:65:df:0b:7d:2e:de:db:a5:8c:b0:
         c3:c6:83:79:2a:8d:5e:e2:a4:4b:85:3f:f9:2f:65:1c:a5:d9:
         1c:b8:1c:85:66:27:9f:f0:c2:02:bc:f5:e5:4d:1e:c3:52:7c:
         1a:c9:4e:98:f8:32:f6:ff:18:79:81:16:70:04:5d:6c:a9:b4:
         da:af:1e:25:3f:b0:64:66:27:ab:17:24:dc:78:3e:43:40:51:
         ae:ce:33:4a:61:0e:18:5a:98:85:04:3f:a0:cf:d9:0e:8b:0e:
         b4:ce:47:74:b0:6d:74:a2:73:5a:dc:22:82:f5:8c:96:24:be:
         ed:ac:3e:e8:b6:8b:cf:f3:23:a9:8e:99:4e:c6:18:9e:2d:61:
         af:61:b6:42:38:58:ad:f2:06:82:86:80:61:5e:e0:91:ec:03:
         fb:28:1d:a4:c8:6f:01:cd:76:c8:ec:53:86:43:75:d6:3d:79:
         52:9f:90:16:0c:86:e9:f0:57:cd:93:2a:83:44:55:55:83:29:
         4e:52:55:ba:b3:15:dd:94:37:05:17:62:e8:17:04:8b:a5:1b:
         d0:da:3b:ca:cc:48:e8:36:f9:51:9c:b1:d1:3c:4e:a4:57:4d:
         04:b5:b2:6d:b8:02:ed:a1:05:81:98:e2:8c:cc:ba:8b:5f:51:
         d8:ca:2e:68
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUR7l8erWj1Nj2BaOLArWb9Mc3EocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNTAzMTcxNTA3MDlaFw0yNjAzMTYxNTEyMDlaMDMxMTAvBgNV
BAMTKDU1OTU2RUYzNUM5OTA2NkI5M0RGRDY4NTFCMDNEREI0Q0Y3OUNCQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjoeSwxSLQkAno8LP12NrPCWXm
uikKnRYq1DjTmabc+WrBoNQNg3bCErEMUa+fZkniZPIHZlLkBzC5M2zlMTUXeUBs
yxFShJ3BjKEspt1JQecNGu6iQhqlwRrLPsGWsuSxd2E5Z7dEDTxuukfXTKiw8a8C
a0OJx1qJ8hCjstb9S4RJ4TUFmCUJvtU8gX3lk8j7n2LIg8RaxCFimF38twpA41qF
w1nXiXlk3vULJacPqeEG6DWacwjFebt80TW168unhGw1ugz77GjbEUdHQc3NHWn6
ZfjUztuQ2GgPzPE5/KJqhADM7fvn8Vbhi7Ps7sDm/WU51NnVfCIHYJB1ofKbAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUVZVu81yZBmuT39aFGwPdtM95y64wHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzcz
MDMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNzM3MzczNy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACABE8dwAjANBgkqhkiG9w0BAQsFAAOCAQEA4bgQh5fm/m1l3wt9Lt7bpYyww8aD
eSqNXuKkS4U/+S9lHKXZHLgchWYnn/DCArz15U0ew1J8GslOmPgy9v8YeYEWcARd
bKm02q8eJT+wZGYnqxck3Hg+Q0BRrs4zSmEOGFqYhQQ/oM/ZDosOtM5HdLBtdKJz
WtwigvWMliS+7aw+6LaLz/MjqY6ZTsYYni1hr2G2QjhYrfIGgoaAYV7gkewD+ygd
pMhvAc12yOxThkN11j15Up+QFgyG6fBXzZMqg0RVVYMpTlJVurMV3ZQ3BRdi6BcE
i6Ub0No7ysxI6Db5UZyx0TxOpFdNBLWybbgC7aEFgZjijMy6i19R2MouaA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:01 2025 by rpki-client