Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/323030313a313363373a363030303a3a2f34382d3438203d3e203134393730.roa
File:                     323030313a313363373a363030303a3a2f34382d3438203d3e203134393730.roa (raw, json)
Hash identifier:          kuiIi5OJBax3xELoyJqr1OR5r1R8UOfZbFQFdAdEUaA=
Subject key identifier:   88:27:BD:7B:11:8E:7B:C2:3A:3D:E4:1D:1F:FC:C4:95:16:B5:A0:27
Certificate issuer:       /CN=40CA6B9FED4B436E60321ACFED6F9A3845FE93A3
Certificate serial:       717497E551A811FEB19EC93514434685E951FA27
Authority key identifier: 40:CA:6B:9F:ED:4B:43:6E:60:32:1A:CF:ED:6F:9A:38:45:FE:93:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/323030313a313363373a363030303a3a2f34382d3438203d3e203134393730.roa
Signing time:             Tue 05 Mar 2024 17:48:34 +0000
ROA not before:           Tue 05 Mar 2024 17:43:34 +0000
ROA not after:            Tue 04 Mar 2025 17:48:34 +0000
asID:                     14970
IP address blocks:        2001:13c7:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:74:97:e5:51:a8:11:fe:b1:9e:c9:35:14:43:46:85:e9:51:fa:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CA6B9FED4B436E60321ACFED6F9A3845FE93A3
        Validity
            Not Before: Mar  5 17:43:34 2024 GMT
            Not After : Mar  4 17:48:34 2025 GMT
        Subject: CN=8827BD7B118E7BC23A3DE41D1FFCC49516B5A027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c6:02:bf:b6:aa:24:fd:1f:32:d8:a7:7e:ea:
                    7a:75:e5:ec:87:bb:87:ac:0a:a9:e1:7d:80:b6:17:
                    40:d5:af:46:ff:de:57:28:02:5d:a9:62:eb:56:16:
                    f3:dd:59:38:17:2a:fc:31:5c:8e:e4:ba:0e:c3:d4:
                    e8:79:ff:a9:7b:99:a0:63:7a:3f:4c:b3:21:bd:86:
                    54:9f:32:aa:df:b8:87:f4:75:d2:50:aa:98:6c:32:
                    06:a0:fd:50:6c:87:d9:96:92:8a:1a:86:87:db:f6:
                    6c:b7:78:05:d5:40:89:11:e7:05:ef:bb:a3:0d:f6:
                    4e:e2:2d:d3:9a:e5:24:86:a9:6d:cd:9c:e4:91:88:
                    de:bb:70:22:52:33:5e:7a:ff:29:98:e4:50:d4:9d:
                    7f:c1:45:ea:68:0c:5c:21:f1:40:31:f5:70:d3:2e:
                    d7:a7:a2:2a:7e:9c:3c:0b:7d:40:58:fa:8f:20:03:
                    a3:02:28:79:17:eb:7b:6c:a7:93:46:27:3f:45:1e:
                    a4:56:f0:0b:b9:ac:1d:56:c2:0d:1b:2e:89:d7:1d:
                    71:c3:4d:d1:ee:54:b3:6f:24:93:64:bf:52:84:e1:
                    e2:4b:59:6d:20:c7:31:6a:21:fe:1d:69:bb:81:b8:
                    5a:da:eb:6f:a8:3c:81:17:8d:56:dc:3c:92:e4:1a:
                    6a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:27:BD:7B:11:8E:7B:C2:3A:3D:E4:1D:1F:FC:C4:95:16:B5:A0:27
            X509v3 Authority Key Identifier:
                keyid:40:CA:6B:9F:ED:4B:43:6E:60:32:1A:CF:ED:6F:9A:38:45:FE:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/323030313a313363373a363030303a3a2f34382d3438203d3e203134393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:d5:4c:19:21:a2:27:54:b0:91:57:50:9e:2b:7a:b8:47:e0:
         38:6f:c6:5b:1e:13:a7:71:0e:eb:2b:a0:85:d8:9f:60:b9:e1:
         20:e8:fd:52:55:fd:58:07:1b:f9:9f:ad:ec:03:af:88:ec:56:
         29:f5:d4:04:5c:95:92:8c:06:db:a3:bb:1b:30:9d:e7:18:89:
         9e:b5:2a:6c:6e:be:96:60:7a:8a:27:07:da:3b:a5:6b:d2:0a:
         25:59:d3:c3:c5:5c:6e:a7:e7:3c:8d:27:02:b1:a1:17:3b:1c:
         1a:dd:a3:5a:59:8f:84:84:cc:9f:1d:57:88:42:79:57:b5:07:
         4b:93:f6:84:b3:39:68:e7:38:dd:2f:07:ba:82:6f:7c:09:34:
         e0:bb:65:8c:6a:9a:97:e6:a5:bb:87:65:df:57:dd:98:ab:14:
         57:c8:6c:47:ef:db:5d:c2:85:91:72:b6:da:4d:f8:2f:dc:5a:
         c1:9e:38:50:0b:5b:62:de:25:f0:63:e9:96:cb:a2:a1:bb:f6:
         5a:7f:a5:c0:8f:0d:03:89:bb:49:45:e3:ce:c8:1f:02:a1:63:
         4d:2f:56:0c:e5:79:1d:81:30:88:43:a5:c6:37:45:02:bc:7d:
         0f:84:f1:75:1f:3c:88:1f:e2:af:69:c4:81:27:c6:1b:96:e3:
         f2:1f:db:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org