Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34382d3438203d3e203532323234.roa
File:                     323030313a313363373a373031303a3a2f34382d3438203d3e203532323234.roa (raw, json)
Hash identifier:          7OXCC06tq4IVHoDpx0lil2XnWV6nWO4chYmMT+t2thc=
Subject key identifier:   2E:02:B1:9B:E5:AE:2D:8D:3B:B7:B9:68:2E:0F:F6:CB:60:02:16:6B
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       3E0DC670ED5B5107432F0616DCDE403EE545D488
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34382d3438203d3e203532323234.roa
Signing time:             Tue 05 Mar 2024 17:39:55 +0000
ROA not before:           Tue 05 Mar 2024 17:34:55 +0000
ROA not after:            Tue 04 Mar 2025 17:39:55 +0000
asID:                     52224
IP address blocks:        2001:13c7:7010::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0d:c6:70:ed:5b:51:07:43:2f:06:16:dc:de:40:3e:e5:45:d4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:55 2024 GMT
            Not After : Mar  4 17:39:55 2025 GMT
        Subject: CN=2E02B19BE5AE2D8D3BB7B9682E0FF6CB6002166B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:74:cc:da:2a:96:fa:7a:0f:37:d3:5d:b2:
                    af:b7:a2:90:50:c9:de:3d:73:25:20:5f:e3:65:9e:
                    c4:5e:29:f2:f9:2d:cf:b5:aa:18:a3:5e:a3:d7:3f:
                    ad:d7:58:43:d8:ec:3c:90:1f:81:7e:e3:5f:94:b5:
                    9b:c6:97:f9:4e:22:a4:5e:08:9c:16:f5:9d:29:f9:
                    e2:37:40:d8:89:d7:d3:52:d9:ae:76:69:8d:e4:8e:
                    16:ad:cb:0f:f1:07:86:ec:6f:6b:8c:a4:1d:97:41:
                    ab:de:26:be:e2:9b:2e:ef:80:f7:43:ba:97:9c:89:
                    7b:bc:61:0d:1a:79:ac:74:81:74:b0:e1:6b:05:4e:
                    f3:e9:2a:27:49:25:6e:b0:79:b1:06:79:d1:2c:87:
                    96:98:ad:90:55:f5:7d:61:d5:c3:81:e0:92:88:35:
                    98:58:94:8a:74:0d:a5:cc:a2:70:31:f9:92:d3:4f:
                    4d:d8:5f:17:16:70:a6:b0:3f:d3:7b:38:51:5b:88:
                    1f:ec:dc:37:a8:d1:dd:d4:93:2a:5d:94:e4:5a:d6:
                    9d:63:81:ac:2a:39:39:88:05:7f:3e:a7:99:e1:f0:
                    36:3d:ef:af:53:30:bb:b2:da:7c:26:5b:bf:da:fb:
                    3f:a9:41:f2:42:03:bf:f4:21:4e:9e:7a:34:57:f5:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:02:B1:9B:E5:AE:2D:8D:3B:B7:B9:68:2E:0F:F6:CB:60:02:16:6B
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34382d3438203d3e203532323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7010::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:4c:86:59:3a:e1:14:49:dc:80:12:97:fc:d7:55:f2:5c:5a:
         44:fe:ce:33:f2:05:39:80:c3:47:ba:ff:21:a4:d0:ea:3a:a3:
         ba:08:8f:c6:b9:4a:fe:12:76:9c:c9:44:30:8b:ef:cd:3c:43:
         7b:92:1c:22:b4:30:46:26:48:72:03:8f:0b:97:cc:3d:1a:f2:
         1a:ee:b3:05:c7:dc:94:3a:59:9b:c0:9e:c1:cf:95:d8:15:cd:
         9f:03:b6:fd:25:a1:40:43:5e:76:ed:33:4f:02:e0:00:72:5a:
         e7:d3:5b:8d:da:aa:fe:b9:6b:2e:a7:a7:24:48:32:1a:6f:4d:
         71:6f:dc:bf:11:34:ed:7a:af:99:8c:a5:e8:b4:df:aa:fa:d5:
         6f:e7:23:b7:2e:7f:80:f1:4a:99:24:c9:74:6d:73:5c:04:45:
         2e:aa:be:b1:e7:96:6e:e0:44:c3:48:44:04:55:41:b2:dc:19:
         9a:32:4f:fe:5f:0d:d9:1f:d6:a2:0c:f9:b0:f0:2a:d9:4e:35:
         63:e8:99:dd:0e:8e:f4:a4:4f:24:7b:2c:04:97:03:db:ec:06:
         57:4e:43:4b:31:87:e5:9e:da:46:73:4d:19:1b:81:77:ee:78:
         3f:7c:55:27:06:f0:8c:88:60:66:49:bf:14:ac:b9:59:a8:d2:
         5b:00:33:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:22 2024 by rpki-client on console-fra.rpki-client.org