Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303030.roa
File:                     323030313a313363373a373031303a3a2f34362d3438203d3e203238303030.roa (raw, json)
Hash identifier:          2za+w1RM4gdkWquEdSWF1ry119L+LQNB+IkE1rh06/g=
Subject key identifier:   2A:58:91:7A:75:AC:A2:C6:88:73:6E:61:D4:96:3F:47:1B:B2:D5:7A
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       3D0B85800A9A34B62653FD55C32CF2F9DFA9DDAE
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303030.roa
Signing time:             Tue 05 Mar 2024 17:39:56 +0000
ROA not before:           Tue 05 Mar 2024 17:34:56 +0000
ROA not after:            Tue 04 Mar 2025 17:39:56 +0000
asID:                     28000
IP address blocks:        2001:13c7:7010::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0b:85:80:0a:9a:34:b6:26:53:fd:55:c3:2c:f2:f9:df:a9:dd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:56 2024 GMT
            Not After : Mar  4 17:39:56 2025 GMT
        Subject: CN=2A58917A75ACA2C688736E61D4963F471BB2D57A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:89:96:f9:ed:0b:f6:e7:08:08:ed:4d:bb:
                    b1:d7:f8:30:5d:f8:b3:2f:02:5e:c6:f4:3c:1e:4f:
                    6b:96:5e:f0:6c:34:9f:a1:c7:4a:51:e3:15:88:cb:
                    4d:2d:9f:8d:5b:b6:99:c5:a1:03:e5:42:0c:2a:5c:
                    3c:c3:43:ba:5f:83:18:40:77:c1:64:4b:b6:e1:d1:
                    f2:66:4d:4f:17:f0:40:a1:69:22:34:99:cb:4b:7d:
                    73:38:37:d5:8e:01:41:ce:f5:7a:92:b9:b7:ca:10:
                    86:08:89:31:2b:c1:fb:5f:88:c2:b2:52:0a:cf:0b:
                    20:e6:f1:c6:14:29:b5:4d:93:37:b7:9b:a5:34:33:
                    03:5e:cd:42:ab:ac:6d:6a:3a:49:f1:da:57:e9:ab:
                    c4:2e:85:d5:9e:8c:38:f6:d5:a9:d2:e0:66:31:2f:
                    e1:ba:a3:2d:d3:e3:bb:b3:ea:84:af:e1:9a:13:b3:
                    cd:4f:c8:05:ad:60:59:a8:e3:3e:1b:c6:ab:28:9b:
                    ab:ad:bc:77:aa:2c:06:51:ab:41:be:ea:c2:69:8c:
                    ea:ef:9e:82:0d:f6:9c:cb:96:29:cc:00:ed:9a:e6:
                    3e:f3:9c:9b:59:f6:8e:a0:fd:b6:59:40:08:35:d6:
                    7c:f5:3a:e3:90:6d:c0:9b:67:fe:88:88:88:70:05:
                    6d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:58:91:7A:75:AC:A2:C6:88:73:6E:61:D4:96:3F:47:1B:B2:D5:7A
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7010::/46

    Signature Algorithm: sha256WithRSAEncryption
         8e:86:99:c5:fd:c0:de:95:3c:d9:99:2d:5b:28:ce:a2:4e:49:
         dd:e0:c8:d8:e6:8a:9a:20:5d:56:3b:65:94:99:7c:09:32:9f:
         d1:4b:13:d9:b6:62:d6:e6:76:64:93:11:02:5a:aa:51:73:b1:
         28:eb:42:72:5c:2f:4d:b5:ff:7f:6e:e1:c6:55:78:0a:d4:7b:
         c3:e1:51:01:47:70:1f:cc:62:79:04:98:0d:7c:c3:20:69:ea:
         fb:b9:60:f5:82:96:e0:d7:96:f1:c4:70:64:ef:8e:34:8e:26:
         fb:7f:f2:32:90:4c:69:b6:bf:c4:7f:4b:8d:ed:a8:1b:f5:b4:
         0e:ef:90:d5:96:4c:98:a5:3a:93:54:12:6a:1b:6a:fd:45:3f:
         9d:dc:2e:0d:16:5a:bd:09:72:54:7e:99:28:50:d4:ea:06:cd:
         f2:ab:a8:fa:0c:50:a9:2c:f7:70:0c:9d:d3:a4:ef:ae:e6:dd:
         f9:a9:44:e3:ec:e2:f8:56:fa:9c:18:09:26:41:25:7d:cd:43:
         3a:6d:c5:48:22:09:32:6a:d9:29:1d:65:af:03:ab:79:a4:1d:
         61:a5:66:2d:7d:2c:0d:7a:83:7f:e5:d5:3b:c1:47:ab:2a:ae:
         a8:52:a9:53:5b:8e:df:d2:d4:76:8f:12:da:83:56:b6:18:50:
         6e:a2:df:73
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPQuFgAqaNLYmU/1Vwyzy+d+p3a4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNDAzMDUxNzM0NTZaFw0yNTAzMDQxNzM5NTZaMDMxMTAvBgNV
BAMTKDJBNTg5MTdBNzVBQ0EyQzY4ODczNkU2MUQ0OTYzRjQ3MUJCMkQ1N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxomW+e0L9ucICO1Nu7HX+DBd
+LMvAl7G9DweT2uWXvBsNJ+hx0pR4xWIy00tn41btpnFoQPlQgwqXDzDQ7pfgxhA
d8FkS7bh0fJmTU8X8EChaSI0mctLfXM4N9WOAUHO9XqSubfKEIYIiTErwftfiMKy
UgrPCyDm8cYUKbVNkze3m6U0MwNezUKrrG1qOknx2lfpq8QuhdWejDj21anS4GYx
L+G6oy3T47uz6oSv4ZoTs81PyAWtYFmo4z4bxqsom6utvHeqLAZRq0G+6sJpjOrv
noIN9pzLlinMAO2a5j7znJtZ9o6g/bZZQAg11nz1OuOQbcCbZ/6IiIhwBW03AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUKliRenWsosaIc25h1JY/Rxuy1XowHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzcz
MDMxMzAzYTNhMmYzNDM2MmQzNDM4MjAzZDNlMjAzMjM4MzAzMDMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcCIAETx3AQMA0GCSqGSIb3DQEBCwUAA4IBAQCOhpnF/cDelTzZmS1bKM6iTknd
4MjY5oqaIF1WO2WUmXwJMp/RSxPZtmLW5nZkkxECWqpRc7Eo60JyXC9Ntf9/buHG
VXgK1HvD4VEBR3AfzGJ5BJgNfMMgaer7uWD1gpbg15bxxHBk7440jib7f/IykExp
tr/Ef0uN7agb9bQO75DVlkyYpTqTVBJqG2r9RT+d3C4NFlq9CXJUfpkoUNTqBs3y
q6j6DFCpLPdwDJ3TpO+u5t35qUTj7OL4VvqcGAkmQSV9zUM6bcVIIgkyatkpHWWv
A6t5pB1hpWYtfSwNeoN/5dU7wUerKq6oUqlTW47f0tR2jxLag1a2GFBuot9z
-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:22 2024 by rpki-client on console-fra.rpki-client.org