Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030333a3a2f34382d3438203d3e2037373737.roa
File:                     323030313a313363373a373030333a3a2f34382d3438203d3e2037373737.roa (raw, json)
Hash identifier:          Xs5FQY/GgXpRhb1nG2FY4CMCME0hJDgR13EP4xcvPXI=
Subject key identifier:   00:C0:2F:D7:88:AA:9E:45:F6:E9:CA:D7:C4:88:4A:5C:E8:E2:34:56
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       443172210CA692285D9148FF0BB0B98DEF59CAC3
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030333a3a2f34382d3438203d3e2037373737.roa
Signing time:             Mon 17 Mar 2025 15:12:08 +0000
ROA not before:           Mon 17 Mar 2025 15:07:08 +0000
ROA not after:            Mon 16 Mar 2026 15:12:08 +0000
asID:                     7777
IP address blocks:        2001:13c7:7003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:31:72:21:0c:a6:92:28:5d:91:48:ff:0b:b0:b9:8d:ef:59:ca:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar 17 15:07:08 2025 GMT
            Not After : Mar 16 15:12:08 2026 GMT
        Subject: CN=00C02FD788AA9E45F6E9CAD7C4884A5CE8E23456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:a1:0a:4e:f1:6a:37:da:64:08:5e:57:88:
                    cd:33:78:3a:11:f6:ea:c6:53:07:b8:7e:9e:d3:a3:
                    86:ba:c2:20:eb:ad:32:24:31:b5:8c:20:8d:d0:b7:
                    e6:dd:33:19:f9:04:ce:8f:0c:a3:4c:d4:46:99:ae:
                    a0:56:d2:50:85:a8:21:00:0f:57:ce:c5:5a:84:2b:
                    89:fa:c4:b1:66:e1:bf:80:f7:f0:37:f6:e2:7c:93:
                    33:93:52:4e:a5:35:bb:30:50:84:bc:26:c1:e2:c7:
                    ca:1d:9c:91:ae:96:28:61:80:e7:d1:53:3d:6b:da:
                    0c:59:b3:08:14:65:65:66:7c:e9:3b:af:c7:b2:8e:
                    4c:3e:df:21:07:2f:33:4a:29:06:57:69:68:bd:78:
                    03:25:cb:c9:95:67:e1:fb:05:d5:b7:b6:26:9b:01:
                    cf:02:c4:38:3a:dd:a5:ee:07:71:33:c6:fc:67:56:
                    ee:4b:16:63:96:b5:f6:67:46:74:c9:7b:e9:7c:ed:
                    18:8c:6c:7a:41:05:97:21:5d:e2:f3:05:15:a5:eb:
                    53:f5:36:7a:7b:ea:c6:2f:c4:45:d7:c6:62:11:8d:
                    9a:6a:f9:da:ea:7b:a9:d2:1d:ba:f2:4e:da:21:35:
                    13:5c:d0:2a:c7:65:d4:2a:1a:23:59:eb:4f:a4:ce:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C0:2F:D7:88:AA:9E:45:F6:E9:CA:D7:C4:88:4A:5C:E8:E2:34:56
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030333a3a2f34382d3438203d3e2037373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7003::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:52:2d:92:e8:85:e1:20:8b:80:75:c3:86:b4:55:ee:5f:a9:
         91:aa:eb:06:62:d2:35:aa:4c:c5:70:b5:64:6e:00:e5:84:d2:
         e2:73:fd:f1:9f:99:7d:a2:19:f4:40:bc:00:73:79:89:56:ad:
         8f:9a:a1:a4:4b:a2:8e:b3:77:78:ef:de:f8:cb:b7:00:40:95:
         ba:79:92:b6:6e:cb:31:1e:90:98:21:ca:7b:20:94:16:35:0c:
         8a:fa:83:d2:22:ca:b8:6e:04:1c:52:7e:cd:0f:71:98:52:9b:
         26:70:da:2d:dc:c8:b5:f0:59:13:1c:61:bf:9c:c4:53:84:25:
         d1:ef:3d:f7:e3:04:8f:be:9c:a4:85:ee:7e:27:9a:a6:f0:74:
         a7:54:95:00:cf:df:4f:2d:86:3c:98:da:ae:23:43:4d:cd:20:
         9f:54:07:b0:f0:cc:c1:78:80:56:fb:d7:95:8c:43:ea:31:81:
         e6:99:01:e2:4a:58:45:76:c1:70:70:9e:1c:23:8e:92:cc:68:
         ba:2b:ae:7b:b6:3b:30:b9:ca:aa:9d:09:14:bf:c5:4f:43:1c:
         12:48:73:f0:6a:8e:e8:df:dd:f8:eb:b2:93:52:1c:e2:2d:e9:
         4b:e4:6f:b6:b5:6f:d6:df:8f:72:d9:97:9c:c9:0b:91:f0:ae:
         ea:3f:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:26:56 2025 by rpki-client