Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/323030313a313363373a363030343a3a2f34372d3536203d3e203238303137.roa
File:                     323030313a313363373a363030343a3a2f34372d3536203d3e203238303137.roa (raw, json)
Hash identifier:          NHlPGqTrUZxTRRiuf6e69fOd+YNcxCsAhkXzsTzeAjY=
Subject key identifier:   03:8B:19:E3:64:60:35:09:E6:CB:B6:AB:E3:46:ED:9B:2B:0F:3D:79
Certificate issuer:       /CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
Certificate serial:       565C8366997E5C87BBD90CE14E87451953C69998
Authority key identifier: D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/323030313a313363373a363030343a3a2f34372d3536203d3e203238303137.roa
Signing time:             Tue 05 Mar 2024 17:58:53 +0000
ROA not before:           Tue 05 Mar 2024 17:53:53 +0000
ROA not after:            Tue 04 Mar 2025 17:58:53 +0000
asID:                     28017
IP address blocks:        2001:13c7:6004::/47 maxlen: 56

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5c:83:66:99:7e:5c:87:bb:d9:0c:e1:4e:87:45:19:53:c6:99:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
        Validity
            Not Before: Mar  5 17:53:53 2024 GMT
            Not After : Mar  4 17:58:53 2025 GMT
        Subject: CN=038B19E364603509E6CBB6ABE346ED9B2B0F3D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a3:6d:e0:cc:a4:6a:b7:65:a5:ea:d3:82:2e:
                    5c:18:3c:9b:83:d4:10:38:f8:28:2c:dd:6b:82:65:
                    4d:16:eb:96:52:fc:09:e7:f3:25:a4:1d:42:db:0a:
                    fa:ce:d9:a5:a9:9d:e9:3c:57:98:9e:95:30:de:1c:
                    5d:e5:78:01:85:9b:65:bb:16:ed:b9:46:b3:ad:28:
                    86:00:61:0a:3c:4c:62:5c:b4:82:e0:d4:1d:ce:c5:
                    ad:86:fa:3b:db:6a:49:8f:ce:1c:b9:72:0d:77:75:
                    60:3c:66:32:f8:b1:c2:02:90:35:2c:8f:55:30:3d:
                    e3:39:08:78:d7:e2:43:bc:bb:ec:a9:12:02:e4:b5:
                    0b:e3:0d:9e:cb:e4:5b:e0:04:99:8e:cf:93:ee:b6:
                    67:88:7d:94:e9:a0:b8:41:a4:b5:22:d0:f0:b9:0f:
                    64:30:f5:57:e5:bd:6e:b8:9e:f7:47:17:db:f7:00:
                    7c:3a:3e:5b:43:0e:38:6a:06:5c:2f:85:70:bd:64:
                    19:f5:2f:df:5d:c9:df:52:30:26:3b:31:1a:48:ae:
                    f8:42:4b:0a:37:6a:d5:f7:72:f1:cd:94:c6:08:63:
                    d7:5b:98:3d:ad:53:6d:39:d6:31:b1:8c:22:b4:b6:
                    fc:a5:94:20:97:64:7c:64:79:10:a6:21:42:02:fa:
                    6d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8B:19:E3:64:60:35:09:E6:CB:B6:AB:E3:46:ED:9B:2B:0F:3D:79
            X509v3 Authority Key Identifier:
                keyid:D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/323030313a313363373a363030343a3a2f34372d3536203d3e203238303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6004::/47

    Signature Algorithm: sha256WithRSAEncryption
         06:2f:fe:e0:2c:8b:67:16:15:a0:96:04:b9:87:00:16:b0:34:
         1a:d7:da:43:da:22:80:7e:a4:d4:13:3b:f3:84:3c:f6:bf:76:
         27:22:32:02:6f:c3:e6:6e:1c:50:ed:7b:cf:08:75:48:93:95:
         92:97:cf:83:4e:26:07:5e:8d:c6:9d:a5:9f:50:77:31:4f:21:
         d7:22:b2:ef:40:66:68:65:48:04:65:2e:a6:da:7b:a7:61:3f:
         2c:7d:20:75:4c:aa:7a:15:b9:e8:c3:1e:bc:f9:c2:73:1f:3d:
         5a:92:f1:5d:02:ce:f6:35:eb:35:a0:ce:44:85:b1:7a:bb:37:
         bb:e0:b4:d6:65:b2:46:b4:b5:6f:41:37:7f:74:7e:53:dc:1e:
         fb:6b:c9:a8:1f:68:22:d5:6c:04:52:ee:54:a4:2f:d5:2d:3d:
         27:45:4f:13:18:6a:60:ac:72:de:95:36:b5:29:ab:9f:43:87:
         df:ac:ca:10:d5:7a:9b:ed:a3:af:84:6b:b9:2f:70:04:94:e3:
         a6:4c:a9:b6:c2:5b:ee:a2:c6:4e:b8:2d:d4:c1:be:a2:87:4f:
         3d:91:ce:f0:0c:03:08:ea:dc:98:7a:83:7f:f0:70:cd:97:60:
         20:5e:90:de:84:89:e3:2c:15:74:c6:fa:92:10:df:3b:da:9e:
         78:23:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org