Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030373a3a2f34382d3634203d3e203532323934.roa
File:                     323030313a313363373a363030373a3a2f34382d3634203d3e203532323934.roa (raw, json)
Hash identifier:          YQBClahaRRGwGyrcqD3GFpDYW5K3ve2nRzc5VFqWK1A=
Subject key identifier:   60:9D:A2:C4:B5:A4:0D:87:49:59:0D:2D:F9:B1:97:F2:17:54:59:83
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       111E880AF1477C877CED12A13C6190AE7A90848A
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030373a3a2f34382d3634203d3e203532323934.roa
Signing time:             Tue 15 Apr 2025 13:14:57 +0000
ROA not before:           Tue 15 Apr 2025 13:09:57 +0000
ROA not after:            Tue 14 Apr 2026 13:14:57 +0000
asID:                     52294
IP address blocks:        2001:13c7:6007::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1e:88:0a:f1:47:7c:87:7c:ed:12:a1:3c:61:90:ae:7a:90:84:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Apr 15 13:09:57 2025 GMT
            Not After : Apr 14 13:14:57 2026 GMT
        Subject: CN=609DA2C4B5A40D8749590D2DF9B197F217545983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:6d:26:eb:dc:72:7f:e4:83:b2:1f:4a:ba:
                    d1:50:f2:b4:13:92:6f:e4:5d:3c:a9:13:c0:b9:8f:
                    a1:9b:fa:32:65:53:1d:bb:bf:41:70:01:62:90:16:
                    05:b5:7b:70:f4:73:84:f7:e0:6e:d2:c7:8d:e4:ea:
                    42:7e:68:ee:f8:77:25:65:61:b7:5e:30:d8:b9:20:
                    00:39:c9:e2:7f:9b:1d:ba:d6:3f:9e:bb:1a:b5:e3:
                    40:18:01:94:2e:f4:df:19:22:0c:f1:77:61:8b:d6:
                    05:97:14:8d:e3:d2:ca:47:bb:68:09:5d:6e:e2:a7:
                    24:26:8f:b9:e7:bd:25:e9:60:46:29:2f:e7:cf:e6:
                    3f:6e:4b:57:18:ba:86:50:8a:c0:cb:8f:ba:f9:c6:
                    6b:c4:7a:6d:66:e0:b7:d9:1a:16:0c:b9:99:27:d1:
                    4e:fb:ab:dd:9d:8c:30:a0:e3:51:3c:93:3e:85:ef:
                    60:50:86:13:31:6e:e6:07:0d:0e:36:3e:d1:41:a4:
                    e1:03:ad:6d:66:d4:a7:b3:0d:b1:ad:85:fa:b4:e9:
                    bb:fe:af:f0:02:db:3e:65:a8:42:0a:7e:6d:92:e3:
                    05:cb:69:8f:64:6c:5c:54:be:ad:0e:16:2f:b1:4d:
                    47:41:e3:78:c8:03:47:26:f2:61:f2:89:e6:e9:b2:
                    19:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9D:A2:C4:B5:A4:0D:87:49:59:0D:2D:F9:B1:97:F2:17:54:59:83
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030373a3a2f34382d3634203d3e203532323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6007::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:4c:ba:8e:90:98:ea:c1:e5:11:59:c2:29:9e:53:0e:85:fb:
         da:23:74:e4:52:7d:9b:46:86:44:f6:e8:f8:62:c1:74:61:3b:
         8c:12:60:70:d0:e3:fe:3c:e5:5d:f9:d0:d0:f5:03:52:6e:3f:
         76:72:09:3f:c5:70:3f:4d:27:2b:80:82:66:8a:17:ed:85:4c:
         c1:03:e5:30:2e:59:c0:55:5c:d8:4c:ea:d8:9a:60:33:bb:95:
         36:df:b1:9a:e5:d8:fe:c6:0b:1a:80:1c:9d:a0:f3:ca:1e:63:
         7d:b5:d2:b1:06:12:a7:7d:c9:67:dc:05:97:cc:53:09:a2:ac:
         05:1e:61:1f:64:d1:d5:84:69:e4:54:09:89:34:cd:73:fb:e5:
         ed:f0:3e:9b:37:30:28:e1:12:fe:b0:4a:6f:a2:8b:3c:28:dd:
         86:94:c6:ce:3a:d6:35:a2:bc:99:be:97:33:64:aa:e8:4d:9c:
         95:70:d0:b7:a1:f7:ee:73:98:71:c8:46:e5:ff:a7:80:7c:48:
         ab:5d:59:7d:b7:c9:01:09:a2:85:1d:be:e4:ea:0a:54:e1:54:
         b6:3d:09:cf:35:25:55:80:ff:77:c6:6a:97:5b:99:a8:ba:80:
         44:bb:74:f7:73:42:4c:3f:7f:3e:65:71:07:01:ac:04:0e:71:
         e9:3e:2d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:12 2025 by rpki-client on console.sobornost.net