Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031663a3a2f34382d3634203d3e203634313034.roa
File:                     323030313a313363373a363031663a3a2f34382d3634203d3e203634313034.roa (raw, json)
Hash identifier:          Pgf86LIS+6bhlwE0+zJWxyHZVSixPij5svhgVPHSYUA=
Subject key identifier:   24:5E:2E:7A:8A:18:67:99:7A:22:83:AA:5D:09:57:56:B0:D8:77:F3
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       69AB6027311F52786C7A6ACFFFA25FDA770F4263
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031663a3a2f34382d3634203d3e203634313034.roa
Signing time:             Tue 15 Apr 2025 13:14:53 +0000
ROA not before:           Tue 15 Apr 2025 13:09:53 +0000
ROA not after:            Tue 14 Apr 2026 13:14:53 +0000
asID:                     64104
IP address blocks:        2001:13c7:601f::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ab:60:27:31:1f:52:78:6c:7a:6a:cf:ff:a2:5f:da:77:0f:42:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Apr 15 13:09:53 2025 GMT
            Not After : Apr 14 13:14:53 2026 GMT
        Subject: CN=245E2E7A8A1867997A2283AA5D095756B0D877F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:35:90:86:b7:97:04:eb:78:de:d2:7d:d8:
                    d6:e0:f0:bb:21:48:6a:79:1e:14:bf:e1:0b:62:ca:
                    c3:5f:63:c1:77:57:27:7b:30:9a:24:34:74:22:97:
                    4e:46:80:cf:56:44:fa:12:6c:ec:7e:e1:9e:d3:c7:
                    44:94:43:a4:10:b6:e8:0b:63:00:17:75:66:4d:be:
                    25:5b:1b:5a:a8:b7:ac:4f:8f:7f:a2:10:ad:97:00:
                    6c:88:01:ef:57:17:aa:d6:04:34:ca:44:bb:db:3a:
                    77:e3:51:68:15:2a:73:30:49:9e:ca:9b:42:05:c7:
                    95:ed:50:1c:01:33:ac:d8:94:51:dc:78:7c:ac:b7:
                    fe:80:54:4c:54:5d:64:17:3c:f0:89:9a:60:7c:fe:
                    c4:72:8f:fd:5f:c5:ae:85:e5:85:5f:81:e3:87:e9:
                    38:b6:59:e4:08:6f:14:f5:a3:96:02:cb:e1:e1:07:
                    73:bd:ec:28:5b:63:68:20:02:0d:19:95:27:bf:71:
                    00:3d:f5:93:0f:62:03:63:fd:23:1d:43:d0:9e:0b:
                    1a:fa:bc:68:7a:82:40:b1:c9:3d:bf:09:af:c7:bd:
                    c2:f6:4b:84:5c:80:31:5b:9b:eb:44:75:95:f5:c1:
                    36:44:1e:fe:f7:66:d5:d6:79:d8:da:11:c2:4b:9c:
                    1f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5E:2E:7A:8A:18:67:99:7A:22:83:AA:5D:09:57:56:B0:D8:77:F3
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031663a3a2f34382d3634203d3e203634313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:601f::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:09:d1:9a:fc:7b:e5:a3:66:90:e9:cb:11:bd:07:90:df:31:
         ea:55:69:cc:58:a2:1a:05:62:a3:b8:73:a2:48:18:2b:f1:4f:
         6b:39:2f:3f:31:cf:06:04:0b:78:9a:62:32:17:00:15:89:70:
         b4:05:e5:6f:b4:d3:38:b2:57:93:ed:ba:a7:75:f9:e8:84:04:
         b5:da:c0:02:59:60:ab:62:33:db:52:3a:03:c1:43:f0:9d:8a:
         85:b6:72:85:0a:a0:da:9b:94:92:f6:c0:9a:b4:4a:16:91:32:
         63:38:3b:39:3b:20:a7:3a:03:64:9a:0d:1f:29:aa:3b:bc:8a:
         b2:45:ab:98:18:3f:ec:57:07:a2:e0:8d:74:af:7f:ff:c4:0f:
         23:70:a0:cd:6b:c6:dd:85:8f:e3:c5:db:cd:92:43:57:e5:16:
         5f:7f:69:36:8e:10:3f:e8:1f:05:bc:56:e5:90:9b:19:ac:bd:
         51:24:f4:bc:04:4d:06:86:63:2b:5f:12:98:e6:73:db:fd:7f:
         22:ad:73:e8:24:7e:88:6a:05:74:43:7e:ea:c8:d3:e2:a6:ae:
         7d:e5:98:4b:ec:34:cf:34:52:63:b2:49:a2:89:c8:73:95:de:
         b7:fe:f4:48:0f:9f:63:bf:5d:4e:c8:b8:a6:3a:4b:ab:79:ed:
         00:84:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:12 2025 by rpki-client on console.sobornost.net