Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34382d3438203d3e20323634383435.roa
File:                     323030313a313363373a373032303a3a2f34382d3438203d3e20323634383435.roa (raw, json)
Hash identifier:          oz+Wn3s+RUUHcPh+/T5pOEJkOMQwoN4JxgmX9Z4YuZ4=
Subject key identifier:   01:47:7A:9E:6C:50:80:E5:96:36:D6:C2:9B:4A:A5:7D:8F:66:8B:92
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       31A423A4702C58F776D4BEA1F89C3A2E362C85C6
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34382d3438203d3e20323634383435.roa
Signing time:             Thu 03 Apr 2025 19:13:48 +0000
ROA not before:           Thu 03 Apr 2025 19:08:48 +0000
ROA not after:            Thu 02 Apr 2026 19:13:48 +0000
asID:                     264845
IP address blocks:        2001:13c7:7020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a4:23:a4:70:2c:58:f7:76:d4:be:a1:f8:9c:3a:2e:36:2c:85:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Apr  3 19:08:48 2025 GMT
            Not After : Apr  2 19:13:48 2026 GMT
        Subject: CN=01477A9E6C5080E59636D6C29B4AA57D8F668B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:8c:b6:61:b6:f2:a7:ea:db:f9:d4:cb:f8:
                    99:64:4f:73:5f:af:07:72:61:83:7d:ad:6a:e2:1d:
                    13:a0:c8:20:7a:8b:22:81:e7:16:a0:f5:40:ad:ea:
                    80:43:9c:a3:19:8a:44:51:c2:1e:23:bc:92:d3:2c:
                    6a:f0:a0:e1:97:0a:f8:e3:d1:e6:df:d1:cf:f9:2b:
                    6b:fc:a7:cc:4a:43:a3:3b:b5:44:27:cc:54:e2:67:
                    28:02:f7:77:cf:78:94:f8:27:8b:e5:33:59:5b:a4:
                    09:5e:3d:09:46:e0:15:4e:fb:a4:85:17:86:2a:cb:
                    8d:7e:ac:30:86:59:fe:b5:4a:54:d7:63:f4:cb:18:
                    d3:6a:f8:d5:57:7b:4c:37:22:3d:99:6c:e9:f5:03:
                    29:c7:7d:17:1c:42:19:ab:93:b9:46:86:d1:fa:8d:
                    56:ac:14:6e:83:0f:d2:8d:ae:b4:1f:21:58:50:36:
                    18:7e:50:5f:17:f2:d8:53:f5:7f:87:82:f4:ee:df:
                    b1:a1:dc:a1:f4:3e:0a:10:92:79:4b:e5:02:6f:b9:
                    b7:4d:5a:49:c2:97:bd:35:cd:c7:19:a8:6c:33:20:
                    3f:61:2b:b5:8f:3f:0f:a5:81:fe:45:d4:3c:01:8f:
                    09:2b:9c:81:dc:01:76:3d:cf:5a:76:3f:b1:60:25:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:47:7A:9E:6C:50:80:E5:96:36:D6:C2:9B:4A:A5:7D:8F:66:8B:92
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34382d3438203d3e20323634383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:7b:83:dd:74:5e:53:0b:1d:43:e3:09:89:f6:e6:cd:b1:10:
         c4:96:ab:00:70:5f:ce:34:b5:c2:b7:c8:3c:92:63:4d:e5:82:
         8e:02:cb:be:44:01:8a:92:26:ee:ea:3d:28:10:64:d0:ea:a9:
         f4:7d:48:86:2d:cc:ad:e2:f1:f2:40:b2:27:8a:e1:37:01:22:
         e1:a5:21:59:84:60:32:f9:1d:ab:8d:2f:8a:9c:9a:75:08:89:
         a3:87:af:35:71:df:1c:8d:ec:c9:d7:24:09:a7:02:40:59:fe:
         78:7c:a4:18:d0:3d:08:65:b6:5d:ad:87:69:44:eb:99:ef:f6:
         48:f9:19:47:11:ad:ce:e3:34:ed:ce:b1:66:c1:08:51:df:7b:
         1e:12:24:af:29:f7:50:0c:07:fb:0e:e5:a2:83:42:37:6b:5e:
         83:d2:35:38:1b:4d:81:e1:c4:e8:23:b5:c2:12:91:73:19:23:
         53:2e:9c:df:01:eb:d2:fa:d1:a9:ce:da:7b:67:0d:a4:4f:78:
         df:f8:ef:52:48:89:3f:4e:7a:ea:5b:7b:5c:49:5b:cd:f4:20:
         ef:3f:38:a3:7e:26:82:3f:dd:07:94:cd:16:df:39:ab:2a:b3:
         10:70:d1:f5:a3:f3:95:d5:b9:76:97:4a:6c:8f:2d:ce:06:31:
         ab:cb:96:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:31 2025 by rpki-client