Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a353a3a2f34382d3438203d3e203138373334.roa
File:                     323030313a313237383a353a3a2f34382d3438203d3e203138373334.roa (raw, json)
Hash identifier:          wToBPk1We0vKhhsLRkpOctMgOMTlrhSXx3bzXVUPubI=
Subject key identifier:   8F:8A:12:0D:56:AB:D3:A0:F7:4A:B3:98:99:27:22:10:FF:5F:94:DA
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       47EA437618EE7E55529C2B13D9DD0221DAD11D37
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a353a3a2f34382d3438203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:38 +0000
ROA not before:           Tue 05 Mar 2024 17:45:38 +0000
ROA not after:            Tue 04 Mar 2025 17:50:38 +0000
asID:                     18734
IP address blocks:        2001:1278:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ea:43:76:18:ee:7e:55:52:9c:2b:13:d9:dd:02:21:da:d1:1d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:38 2024 GMT
            Not After : Mar  4 17:50:38 2025 GMT
        Subject: CN=8F8A120D56ABD3A0F74AB39899272210FF5F94DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:26:98:5b:d3:b7:4e:18:a8:96:72:e9:fd:ab:
                    75:c6:ed:c5:39:e1:10:26:4e:d0:30:15:d4:1f:6e:
                    1c:0b:cd:c4:4f:59:36:80:cf:f8:92:7b:9b:e7:50:
                    0e:09:f7:22:17:ce:12:5d:b7:1f:20:57:38:01:34:
                    cc:71:0f:8b:81:83:35:b2:cf:7a:fe:73:b1:d6:a8:
                    85:90:99:37:45:b2:8c:a3:1a:22:78:c6:d7:f4:c4:
                    a8:1d:4b:2a:99:5f:a4:0d:93:98:6f:ec:f3:81:0b:
                    98:56:50:05:ac:f8:61:5f:dd:49:0a:2e:ad:cb:f9:
                    2c:6e:41:4e:03:89:7a:e6:69:7b:7a:8b:f4:7b:55:
                    54:08:29:3b:e2:c8:3a:59:0d:78:a8:91:d5:d1:a2:
                    08:95:9d:a5:7c:7a:ff:b2:e5:cc:42:a6:09:ee:8e:
                    a9:74:dd:22:88:83:a4:9f:13:9c:8d:fc:d7:38:79:
                    e4:1e:a0:9c:59:ec:9d:da:3a:49:70:ed:b1:88:a8:
                    0a:8c:3d:70:fb:ec:28:ba:e0:04:fa:76:63:ea:a0:
                    8d:88:17:22:0e:e3:ca:f5:4a:27:ce:26:6b:6a:97:
                    1f:95:af:bc:8a:9e:c2:19:0a:4c:4e:bb:97:f6:7d:
                    04:1b:5d:a3:9d:c3:c3:a0:81:36:cf:b0:a2:d2:12:
                    2f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8A:12:0D:56:AB:D3:A0:F7:4A:B3:98:99:27:22:10:FF:5F:94:DA
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a353a3a2f34382d3438203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:a9:6c:f9:70:a4:bd:20:ea:c9:28:94:4a:88:e1:0d:0b:38:
         f0:72:84:a7:0f:20:76:31:e9:26:ee:62:1f:a4:3a:2e:37:c9:
         41:44:58:49:9b:26:f4:f4:1e:e9:8d:98:d2:a5:39:e9:d9:d5:
         00:b2:fb:c0:be:2d:f7:7f:ac:d7:1d:75:ba:f3:48:f2:24:9c:
         c8:82:a4:03:f4:12:cb:bf:75:2b:62:b9:b7:58:52:2c:f6:02:
         27:d5:3d:73:ef:fa:23:2f:0b:ee:5f:6c:3d:fc:df:95:28:f3:
         ba:c7:15:b8:5b:5a:ad:69:fc:1b:21:3b:0e:40:e2:8c:56:06:
         b4:7a:df:5c:94:d5:22:21:74:f9:e7:4c:5f:2f:a2:e6:b8:bb:
         ff:26:34:f9:50:4b:a3:44:4d:84:ea:aa:22:8f:12:73:ef:33:
         88:36:26:d8:10:66:35:88:c5:a2:7e:06:e3:6b:c2:0c:bf:20:
         e5:c4:50:44:14:12:a3:af:9b:af:b7:aa:a9:31:f4:c9:88:8d:
         6d:80:f5:28:05:40:d7:1b:ab:2b:c0:1a:4f:d3:6b:c2:59:30:
         69:45:e4:30:f0:cb:31:b3:08:63:5c:f6:8e:de:df:10:87:12:
         e9:7a:5c:e0:5e:5b:74:90:66:d1:ab:17:ec:2f:c1:9f:d9:c6:
         91:37:da:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:12:15 2024 by rpki-client on console-fra.rpki-client.org