Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34382d3438203d3e203532323234.roa
File:                     323030313a313363373a373031303a3a2f34382d3438203d3e203532323234.roa (raw, json)
Hash identifier:          eJh2Lx2Sbm4Kd7b2IpXJmoCoDmRmebFELABY5y3uzV0=
Subject key identifier:   7C:65:0C:2B:5B:4F:AC:39:DE:45:FA:92:E8:D7:7C:E9:E3:5D:EB:DE
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       0968413A07464E756EC7FF071B45AFBA6050E776
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34382d3438203d3e203532323234.roa
Signing time:             Tue 04 Feb 2025 18:19:41 +0000
ROA not before:           Tue 04 Feb 2025 18:14:41 +0000
ROA not after:            Tue 03 Feb 2026 18:19:41 +0000
asID:                     52224
IP address blocks:        2001:13c7:7010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:68:41:3a:07:46:4e:75:6e:c7:ff:07:1b:45:af:ba:60:50:e7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:41 2025 GMT
            Not After : Feb  3 18:19:41 2026 GMT
        Subject: CN=7C650C2B5B4FAC39DE45FA92E8D77CE9E35DEBDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0d:ef:4d:6b:95:0d:d1:31:ec:3b:0e:c4:bf:
                    79:cd:f9:4d:88:ad:a6:cf:2d:75:ae:43:bf:1e:e2:
                    9b:27:fc:cc:2d:0c:ba:3b:d7:92:02:b6:a3:40:04:
                    52:27:3d:ac:18:96:36:47:46:0c:f6:f5:24:e7:fc:
                    db:4f:b6:91:5d:c0:91:02:87:2a:57:ad:86:95:4b:
                    2c:fc:b7:ed:b6:0e:78:39:01:00:39:d9:96:bb:20:
                    39:32:54:ff:28:b5:f7:1d:2a:f7:a3:da:28:e4:80:
                    70:62:b9:88:6e:d8:1d:3f:ca:cc:a3:90:24:2d:fe:
                    21:f3:f4:68:8d:11:4d:3a:b4:82:da:6f:3e:a1:bf:
                    37:e6:41:9d:69:ee:d1:80:4e:1c:da:13:6b:74:eb:
                    67:52:1b:1c:b7:b3:bc:36:ca:01:00:94:b8:2b:40:
                    18:10:58:2e:86:13:41:3e:07:2b:52:2f:5d:e7:7e:
                    d4:4b:8c:f7:a0:b1:cd:c1:12:9c:a2:78:b4:86:4f:
                    cc:b2:11:ac:bf:d0:76:09:79:60:46:53:ab:21:69:
                    a0:5d:37:0e:89:13:7e:d7:f7:e7:d2:51:6e:6a:23:
                    63:6a:c8:d3:de:43:a7:1e:71:4f:be:4a:77:54:b2:
                    28:0d:18:8f:f6:2c:38:4b:41:3b:80:bf:01:c1:cb:
                    d2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:65:0C:2B:5B:4F:AC:39:DE:45:FA:92:E8:D7:7C:E9:E3:5D:EB:DE
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34382d3438203d3e203532323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7010::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:8e:47:b9:87:da:7d:90:4d:02:aa:22:e0:99:e2:7d:ae:4a:
         50:64:17:25:5f:d6:8d:5b:d3:19:01:b0:d2:cc:4a:89:e5:b9:
         d4:30:d7:7e:43:88:07:94:0c:cf:36:5f:36:84:f5:8a:97:46:
         82:97:aa:59:73:3c:3e:9a:b3:37:19:a7:f7:c6:29:61:95:dc:
         27:88:9b:94:6b:09:49:1a:73:78:8e:11:57:fc:08:70:35:52:
         02:59:7e:fc:ce:29:e3:a8:54:aa:b2:0b:17:08:b2:c4:c0:c7:
         e5:01:3f:46:31:b7:c0:61:f6:7b:4b:ae:ce:e5:98:9f:84:0c:
         a4:b5:8b:8a:5b:d2:ed:b1:75:d2:3d:59:11:f3:37:de:a2:5d:
         bc:51:2f:7d:ae:27:a2:62:41:59:22:77:b5:d6:2d:08:d8:b1:
         40:bb:f4:85:0f:1b:d0:8b:5b:2a:92:21:d8:42:c7:74:31:d0:
         c3:c8:8d:69:f5:34:5f:c2:34:6d:dd:e6:ad:2d:52:71:e6:10:
         ad:b3:9f:b6:d1:4f:14:e1:fb:9b:e4:0d:18:35:f4:a8:b8:7f:
         fe:26:6b:32:bc:53:b9:aa:81:2d:87:d5:19:6b:a8:70:41:96:
         02:38:31:81:f9:c7:d4:34:b1:91:50:99:1a:97:a1:eb:b8:2d:
         e1:73:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:31:02 2025 by rpki-client