Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303031.roa
File:                     323030313a313363373a373031303a3a2f34362d3438203d3e203238303031.roa (raw, json)
Hash identifier:          ZF34Stpbi/QrBRrQhr2ZD7o6oQ4ZC87LgJ7FYMqIvB4=
Subject key identifier:   2C:24:3B:B1:7A:F6:BC:70:23:A9:28:88:0F:83:0F:87:27:34:A0:03
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       281537433B8B4A39390F94EF9D5E8EC6E4F98728
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303031.roa
Signing time:             Tue 05 Mar 2024 17:39:50 +0000
ROA not before:           Tue 05 Mar 2024 17:34:50 +0000
ROA not after:            Tue 04 Mar 2025 17:39:50 +0000
asID:                     28001
IP address blocks:        2001:13c7:7010::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:15:37:43:3b:8b:4a:39:39:0f:94:ef:9d:5e:8e:c6:e4:f9:87:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:50 2024 GMT
            Not After : Mar  4 17:39:50 2025 GMT
        Subject: CN=2C243BB17AF6BC7023A928880F830F872734A003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d4:7c:8e:0e:b2:47:c4:87:55:78:f3:05:f6:
                    5f:ec:dc:64:21:85:1b:00:e2:87:59:15:77:07:bf:
                    c8:7e:2d:c9:27:75:8b:94:73:2b:08:6d:8c:2b:9c:
                    28:97:e9:36:99:c0:76:ff:a0:84:b4:b6:1c:29:28:
                    31:80:34:d9:5b:23:3d:c5:bc:d2:eb:69:12:27:9a:
                    79:aa:3c:1d:ae:1f:d6:e5:de:8f:3e:51:fd:0d:fe:
                    5e:d6:14:57:a5:2f:0e:65:f6:9c:44:a7:f5:c6:85:
                    97:d2:ab:2a:08:f2:27:ba:0c:34:58:2a:3e:f3:db:
                    87:38:13:52:31:c6:44:6f:46:32:51:56:bf:a4:63:
                    e4:42:2f:ae:af:31:97:c1:e4:65:66:fe:7f:73:90:
                    b6:3b:ab:15:e6:80:68:4f:02:52:6f:95:e7:d1:95:
                    99:8a:f8:aa:e2:09:15:07:54:94:2d:22:20:f3:55:
                    d4:57:1f:bd:0b:85:25:f5:b0:40:7e:f6:4a:31:c5:
                    73:4a:7b:a8:d0:04:fc:cc:7a:4c:1d:60:09:df:5d:
                    32:c0:17:0c:c4:cb:7a:f4:63:0b:98:34:e6:e1:91:
                    3c:43:87:bc:70:2c:89:a4:98:01:e2:60:97:a4:13:
                    c0:28:b4:7e:a6:f1:16:4c:0f:d8:95:aa:2b:15:0b:
                    ef:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:24:3B:B1:7A:F6:BC:70:23:A9:28:88:0F:83:0F:87:27:34:A0:03
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7010::/46

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:7e:a0:77:46:90:a3:75:fa:de:62:aa:dc:77:ae:ad:b0:
         83:73:be:29:22:01:a1:e8:e0:f8:93:29:6e:a2:23:93:5c:0b:
         52:fc:3a:f1:16:a7:29:4c:f0:de:ed:a7:e7:05:8c:64:2c:a8:
         70:88:4c:53:52:d1:87:4e:6b:f6:02:59:84:1c:cb:2d:dd:8e:
         38:5d:b1:95:a8:6c:fe:b5:4e:3b:75:c0:31:c8:a3:15:b6:46:
         00:95:ee:96:95:f4:5d:56:bc:11:82:15:b5:94:d8:6e:21:43:
         9e:ac:87:b6:05:b0:16:27:58:b3:10:00:d4:6b:5c:f2:be:b5:
         4b:79:59:56:f8:f2:19:fb:a1:42:f2:d9:ee:6b:c5:ec:01:24:
         f5:48:77:cd:2a:a0:e0:5e:be:b1:8b:ed:43:a7:44:4d:29:e7:
         97:52:be:92:09:73:a4:9d:2a:7d:a5:a2:af:ff:aa:c6:85:52:
         ae:1d:55:26:23:16:58:2f:10:82:60:ac:f6:af:e9:aa:0e:9e:
         1e:b9:67:8c:d9:2b:cd:67:9e:17:ff:d3:5e:bd:15:24:c5:98:
         63:b2:ae:fb:40:7d:e8:fd:5f:f4:43:d2:12:18:f5:97:c8:c1:
         f5:4e:7a:d0:3d:0b:d9:4e:a8:ce:ec:e9:63:eb:a0:a2:47:09:
         ed:f3:d5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:22 2024 by rpki-client on console-fra.rpki-client.org