Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031333a3a2f34382d3634203d3e203532343034.roa
File:                     323030313a313363373a363031333a3a2f34382d3634203d3e203532343034.roa (raw, json)
Hash identifier:          a36amkQU7qkrK0l4mclopT4eixxTO/fL6rM3m1hYRRY=
Subject key identifier:   98:B0:95:D6:B3:CB:D4:83:02:A4:02:C0:A3:24:4F:DD:E5:B3:06:18
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       2E8A919D708C1E6BF905AB848DF8B14D45878FF1
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031333a3a2f34382d3634203d3e203532343034.roa
Signing time:             Tue 15 Apr 2025 13:14:55 +0000
ROA not before:           Tue 15 Apr 2025 13:09:55 +0000
ROA not after:            Tue 14 Apr 2026 13:14:55 +0000
asID:                     52404
IP address blocks:        2001:13c7:6013::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 13:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8a:91:9d:70:8c:1e:6b:f9:05:ab:84:8d:f8:b1:4d:45:87:8f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Apr 15 13:09:55 2025 GMT
            Not After : Apr 14 13:14:55 2026 GMT
        Subject: CN=98B095D6B3CBD48302A402C0A3244FDDE5B30618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8a:5d:f4:ce:0a:61:8c:f0:4a:77:94:77:9c:
                    e5:f5:27:43:0b:74:98:23:72:4e:fe:27:a6:a7:f2:
                    ff:15:a7:1f:45:96:0b:99:a5:dd:e4:f1:3c:fd:ec:
                    cc:04:b5:78:3b:d2:55:08:c5:9f:25:56:82:48:3b:
                    73:e8:46:13:be:a4:b5:92:db:98:68:1e:27:29:a1:
                    9a:04:90:5d:89:be:dc:72:69:ed:1a:45:a3:b6:a0:
                    40:7d:ff:06:65:ee:8f:1a:bc:db:ce:b2:7e:41:b1:
                    e6:32:be:9f:cc:84:9a:94:fd:22:e6:1c:6b:f8:02:
                    59:0a:f6:ff:ea:f1:58:c6:81:b9:a5:48:33:c1:3b:
                    61:48:bd:98:1f:8b:aa:47:4f:af:7d:ef:c7:b5:57:
                    1d:5b:e5:b3:e3:48:75:b6:c4:77:0a:c9:56:23:8c:
                    44:4e:54:08:e9:7c:b9:ce:34:39:84:73:79:5c:40:
                    a3:92:91:fa:fb:f6:1b:fe:1a:bd:63:6b:e9:d3:8e:
                    20:e2:6c:8f:7e:8c:a8:14:bc:74:3d:b3:91:10:a6:
                    28:c0:c3:f0:c6:51:8c:26:53:d1:2e:f2:90:83:04:
                    1a:57:12:21:78:4f:f2:de:76:20:85:e0:e1:6a:ba:
                    78:20:c7:17:74:76:5c:87:61:4f:02:eb:16:42:67:
                    f8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B0:95:D6:B3:CB:D4:83:02:A4:02:C0:A3:24:4F:DD:E5:B3:06:18
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031333a3a2f34382d3634203d3e203532343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6013::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:64:d2:96:b5:ab:01:3f:aa:88:a1:53:0d:88:ba:fe:46:9f:
         f2:86:5d:da:39:e3:11:61:84:67:29:d3:df:76:be:c9:6e:c6:
         30:e8:16:41:5c:25:12:03:da:a5:14:dd:66:88:32:c3:25:8d:
         92:cb:b3:2b:a4:58:77:cc:2a:f7:b2:a5:cb:72:b8:a1:df:b2:
         9e:57:b6:c5:73:ed:be:6a:63:d3:54:01:2a:ae:35:98:26:d3:
         11:55:be:e2:6b:67:39:c2:6a:d9:41:b2:8a:30:ce:f1:92:a4:
         df:44:22:a5:eb:d3:c9:0c:7f:d6:99:ac:64:b7:37:11:72:00:
         c9:8f:3d:94:2b:1d:ae:ca:9f:be:2c:65:0a:6f:d0:47:7b:57:
         3a:12:94:4d:7e:2f:fe:ae:e8:4f:c5:6d:c5:2b:ee:78:aa:25:
         4c:5a:b7:f9:f3:cb:d3:92:4b:ec:5c:34:be:91:78:2f:c6:07:
         35:f2:cf:34:c2:69:a0:ad:49:7e:37:28:73:0a:bf:d2:78:0e:
         b0:ac:15:fb:f8:dd:39:6b:13:fd:06:57:d0:c4:86:1e:c4:71:
         01:cc:13:86:6c:c0:88:f1:56:34:bc:b8:e6:e0:3c:28:27:08:
         19:8f:35:f7:fe:33:8d:38:25:35:9c:66:8e:ea:3c:37:39:0b:
         01:d3:43:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:19:38 2025 by rpki-client