Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303030.roa
File:                     323030313a313363373a373031303a3a2f34362d3438203d3e203238303030.roa (raw, json)
Hash identifier:          z8KSSs19od0Df8WtjdjkhU6N0MuSETUQGu0BYU9SL5Q=
Subject key identifier:   00:46:A2:91:1F:39:2E:EF:B0:83:D6:4B:0A:50:35:D5:DA:BF:3E:22
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       0FB73C91350868FD2A9C6364A422A2BE21C1421D
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303030.roa
Signing time:             Tue 04 Feb 2025 18:19:40 +0000
ROA not before:           Tue 04 Feb 2025 18:14:40 +0000
ROA not after:            Tue 03 Feb 2026 18:19:40 +0000
asID:                     28000
IP address blocks:        2001:13c7:7010::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b7:3c:91:35:08:68:fd:2a:9c:63:64:a4:22:a2:be:21:c1:42:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:40 2025 GMT
            Not After : Feb  3 18:19:40 2026 GMT
        Subject: CN=0046A2911F392EEFB083D64B0A5035D5DABF3E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:e6:70:45:0d:20:74:38:18:c3:46:4a:c5:
                    1f:26:e9:ee:f3:86:c6:d0:9e:27:15:4f:de:a9:8a:
                    84:a6:13:12:41:63:06:a3:9d:d5:58:af:c4:ad:a8:
                    9c:bf:ab:0b:05:58:b3:c9:df:36:de:42:da:89:ec:
                    01:00:49:3b:0f:5b:89:67:6b:2c:51:65:6c:75:56:
                    98:7d:4e:3c:bc:fb:c0:d9:4f:95:90:14:04:65:bf:
                    d1:bb:53:30:d3:db:1a:98:6f:50:8b:61:dc:e1:c0:
                    14:a6:cc:c7:8d:4d:7b:24:0c:6f:ef:b7:fd:bb:5e:
                    1b:e7:10:bc:20:27:77:b6:d9:1d:11:60:ae:33:78:
                    7c:14:07:7a:9c:61:e0:c1:0d:c2:35:05:97:62:e7:
                    22:fe:cb:a3:d2:4e:c8:4f:2a:17:a0:4d:fb:82:d4:
                    bb:bc:09:dc:b9:2a:5e:c9:ea:42:73:c6:27:be:47:
                    43:12:23:e9:db:fa:ea:57:94:1b:d0:c7:cb:e7:3b:
                    b1:d4:4e:da:d4:35:88:e4:ca:2d:bd:5d:76:65:e4:
                    4d:d3:06:64:74:b5:40:48:d8:94:c3:6e:af:2d:84:
                    b6:61:95:4e:98:a5:f0:52:d0:af:04:7f:d3:62:13:
                    27:19:3d:a0:db:2d:76:2f:04:a5:49:cb:5c:38:3d:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:46:A2:91:1F:39:2E:EF:B0:83:D6:4B:0A:50:35:D5:DA:BF:3E:22
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7010::/46

    Signature Algorithm: sha256WithRSAEncryption
         d5:e3:b7:a4:6f:7c:0c:5d:ca:9f:e0:85:3a:11:79:fc:bd:d6:
         8b:81:40:74:d3:34:b4:be:f4:d6:db:e2:93:48:7e:ac:a1:cc:
         b5:fe:81:3b:f3:ec:1b:6f:40:5d:09:17:26:bb:bc:00:8b:c2:
         32:8f:fd:2b:4c:28:2a:02:8a:85:d0:6d:ff:83:55:e9:30:a9:
         bc:7a:5d:e6:8c:11:5f:67:c1:65:e9:51:a9:45:eb:f2:8c:99:
         6b:96:ea:8b:91:19:3f:74:50:20:ec:eb:fd:ca:3c:80:2b:4f:
         42:86:11:d7:12:d7:e9:b0:56:d9:36:22:56:65:a3:cf:5c:2e:
         34:ed:80:3f:70:cc:3d:3d:18:4c:73:45:f0:ac:65:20:a3:b1:
         2f:d6:61:78:2e:da:0c:2d:6c:b9:f8:b3:d2:52:ba:ef:9c:7c:
         f8:66:27:c1:c0:14:7a:b7:26:a6:44:27:b5:10:c3:a6:73:aa:
         c1:6f:10:6f:f1:d1:24:d6:36:05:ce:e1:85:6b:9c:cc:ff:33:
         1b:41:c2:b9:7b:2c:14:48:05:e9:18:99:c8:13:6d:8f:cf:16:
         bb:9a:75:8c:af:15:ce:79:ae:ad:b7:c8:6b:6d:9c:18:97:49:
         84:13:0d:1a:cc:ec:61:71:53:95:7d:9f:ca:9e:fc:e4:09:15:
         8a:8f:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:53:06 2025 by rpki-client