Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032663a3a2f34382d3438203d3e20333934333533.roa
File:                     323030313a313363373a373032663a3a2f34382d3438203d3e20333934333533.roa (raw, json)
Hash identifier:          OTEFwLlL6LSVHv+ztrWlzY+fpOXUtNXlCP62a/ssp8U=
Subject key identifier:   FB:19:2F:99:31:49:89:EB:FB:50:61:B4:1A:58:81:74:E2:99:9F:6E
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       6F50E2617C80483B6A59B9AEA6D96A014DBB2710
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032663a3a2f34382d3438203d3e20333934333533.roa
Signing time:             Tue 05 Mar 2024 17:39:54 +0000
ROA not before:           Tue 05 Mar 2024 17:34:54 +0000
ROA not after:            Tue 04 Mar 2025 17:39:54 +0000
asID:                     394353
IP address blocks:        2001:13c7:702f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:50:e2:61:7c:80:48:3b:6a:59:b9:ae:a6:d9:6a:01:4d:bb:27:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:54 2024 GMT
            Not After : Mar  4 17:39:54 2025 GMT
        Subject: CN=FB192F99314989EBFB5061B41A588174E2999F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:07:34:3c:0f:5c:d1:0d:0b:8d:e7:de:6a:
                    39:17:23:2f:a7:41:e8:11:52:11:3c:f5:dd:3f:1e:
                    53:7c:24:73:ac:c1:e2:8c:e2:4d:2d:0e:0c:ca:4f:
                    2e:8d:00:aa:9c:3e:88:27:3b:11:e6:79:24:35:5d:
                    5e:b4:40:0d:60:1e:56:4b:7b:8a:45:50:2f:c7:cb:
                    05:28:e5:7a:4a:5b:fd:9f:30:a9:ee:d5:5b:f5:e4:
                    b9:41:10:3c:e6:d8:14:77:07:77:19:31:c7:ab:f3:
                    6d:50:19:cd:91:d8:29:2d:94:f0:ae:43:c4:6d:64:
                    3c:30:cb:da:4f:dc:5c:a3:bf:b6:58:ac:87:f6:de:
                    21:f2:8b:42:19:49:36:8e:90:5a:94:43:cf:6a:c3:
                    07:b0:d6:a1:77:53:33:e0:1f:e2:a9:10:30:13:17:
                    d1:b4:6a:10:ab:af:4e:bd:58:97:99:97:e6:41:be:
                    35:45:42:13:ec:4c:df:9b:a4:6f:40:f6:54:22:78:
                    9c:c9:69:4f:fd:e6:cb:fb:7b:7a:7b:cd:cd:1a:05:
                    8f:e6:e4:5f:be:8f:5d:37:d3:06:fe:20:cb:8d:aa:
                    30:4c:66:78:48:bb:98:e9:31:91:fe:e4:00:f2:93:
                    c4:49:16:74:07:c0:3f:e7:b9:fd:7d:66:15:0f:2c:
                    da:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:19:2F:99:31:49:89:EB:FB:50:61:B4:1A:58:81:74:E2:99:9F:6E
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032663a3a2f34382d3438203d3e20333934333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:702f::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:62:13:76:79:1b:c9:e8:49:8e:39:7a:9b:39:33:b0:e8:b7:
         b1:1e:70:d7:22:37:3c:f6:d0:62:06:a1:56:8b:0c:8a:a5:2c:
         41:45:fe:ae:0f:71:95:dd:e4:28:38:63:dc:71:dc:5e:08:cd:
         ae:af:d2:25:f2:42:ab:46:4a:7b:d6:2c:9f:f7:3e:d1:a7:9f:
         21:03:6c:dc:56:fc:2e:bb:73:77:6a:19:e4:49:c8:06:75:2b:
         e8:c6:e1:95:e7:69:ab:f8:aa:73:1b:17:3c:b1:51:3c:8d:a9:
         bd:ea:84:6f:df:b1:3a:e4:fd:e3:cc:e9:af:62:ac:a7:4e:3c:
         eb:a1:c5:7c:85:5c:20:13:07:55:72:5a:af:cd:a0:e2:66:8b:
         40:b4:56:2a:11:ec:3c:e3:6b:c5:1e:71:dc:79:86:83:bd:d8:
         3b:a7:a1:7f:16:b4:33:bc:c5:4f:55:0d:86:d1:aa:3e:ac:ab:
         97:d2:f8:b9:b9:a5:0e:18:13:1c:51:38:c7:a7:73:f4:63:a6:
         e5:b5:1f:68:c4:81:d1:3f:1a:6e:34:46:59:bc:29:0d:fe:64:
         c7:75:f8:c9:36:7f:f4:fd:40:cb:1d:46:bd:19:a2:c1:02:9a:
         fd:e5:90:70:b2:f1:4a:c5:57:62:02:8a:1a:22:5d:38:f6:59:
         2a:bf:4b:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:37 2024 by rpki-client on console-ams.rpki-client.org