Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030323a3a2f34382d3438203d3e2037373737.roa
File:                     323030313a313363373a373030323a3a2f34382d3438203d3e2037373737.roa (raw, json)
Hash identifier:          uNRVeRkq2qh7uBj+M7PgM1msenNvfFTUbbpY6LOu/ic=
Subject key identifier:   9D:C5:98:23:9A:8F:09:26:60:A9:DE:AB:26:D3:67:F9:16:79:4B:0B
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       5D216E461A29128ACA566F614D3DA4CE1819E4AE
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030323a3a2f34382d3438203d3e2037373737.roa
Signing time:             Mon 15 Apr 2024 14:15:00 +0000
ROA not before:           Mon 15 Apr 2024 14:10:00 +0000
ROA not after:            Mon 14 Apr 2025 14:15:00 +0000
asID:                     7777
IP address blocks:        2001:13c7:7002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:21:6e:46:1a:29:12:8a:ca:56:6f:61:4d:3d:a4:ce:18:19:e4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Apr 15 14:10:00 2024 GMT
            Not After : Apr 14 14:15:00 2025 GMT
        Subject: CN=9DC598239A8F092660A9DEAB26D367F916794B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:37:47:c3:b9:22:b2:0b:0d:1e:a6:52:72:
                    8e:de:39:1e:03:50:a9:6d:c5:80:59:bf:fa:c3:4d:
                    75:cf:cb:e9:a8:be:73:37:32:8c:08:d6:8b:a6:0a:
                    71:9b:7f:54:c7:69:6a:61:92:0c:f5:9e:5c:d1:6b:
                    d6:76:39:54:e9:86:95:7c:d8:22:68:c6:d8:a7:37:
                    3f:b9:25:e4:ec:c1:6c:c4:17:36:32:2c:a1:f6:46:
                    7e:76:9c:74:4f:ce:00:ab:4a:8b:1b:7b:b6:f1:5c:
                    7d:7e:cf:b2:46:5f:ad:63:59:f1:81:27:c5:bf:7f:
                    37:50:3d:f5:59:21:9a:42:a8:b5:46:dc:be:71:52:
                    67:46:4b:0b:9d:ab:de:73:cd:55:d6:d0:49:e0:2c:
                    5c:fb:62:ce:ef:37:d5:7c:61:ed:94:82:9f:c1:e0:
                    ee:ad:7a:a7:98:46:40:50:f1:42:52:3b:f2:da:57:
                    69:ea:d6:24:4e:c5:bb:9f:8f:95:b5:85:56:f8:7b:
                    fd:8b:1c:c0:45:ae:c8:f4:7f:a6:c2:73:ee:06:e5:
                    2a:90:b3:a5:4b:f2:07:7b:67:fd:c6:e0:90:ef:4a:
                    6a:8b:bd:4f:3f:9a:e9:8a:4b:6f:5f:9a:d4:4b:d7:
                    dd:67:a1:f7:82:a0:1c:63:c7:29:30:b6:04:68:05:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C5:98:23:9A:8F:09:26:60:A9:DE:AB:26:D3:67:F9:16:79:4B:0B
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030323a3a2f34382d3438203d3e2037373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         db:ff:b4:01:5a:ce:f0:4a:61:74:4b:23:aa:a5:0d:1d:c3:8a:
         f0:80:ea:af:a4:74:53:26:3f:c9:6f:2a:25:90:17:17:a0:d5:
         c1:99:48:d7:d2:b9:20:99:dd:34:d5:d4:73:6f:cc:97:1c:71:
         21:94:4a:c9:84:44:31:69:b8:8c:c6:ea:c9:ec:3e:fb:29:0c:
         3e:16:3a:1b:12:b3:36:fd:3c:4d:c7:1d:81:48:c7:a1:bf:68:
         5f:5c:60:3c:64:e7:fb:8c:1c:cd:a3:21:ff:e8:d2:f7:e7:62:
         b9:f5:25:79:de:8e:c8:a5:92:7f:1e:75:d9:54:ef:0a:58:ae:
         45:47:5a:62:9d:ea:98:be:65:25:1b:70:2f:fd:40:3d:ef:44:
         26:5e:e9:30:5e:4a:b8:e0:fc:2f:9f:42:5a:02:73:a7:a4:0f:
         4e:b5:51:eb:3e:39:42:c2:70:e2:e6:c3:f0:37:47:16:46:4e:
         92:58:f9:6e:e6:c7:0b:03:94:a7:cf:a8:d9:41:99:a2:2e:06:
         e5:40:cd:2b:06:76:62:7a:13:d6:4a:8b:a5:c7:40:18:5f:0e:
         27:6e:f3:ca:a0:1e:9b:eb:79:aa:68:db:f6:67:9e:79:a6:57:
         a4:a3:f3:91:6c:25:07:ed:b9:f5:9d:87:66:a3:a6:03:29:19:
         0a:22:c3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:17 2024 by rpki-client on console-ams.rpki-client.org