Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a363a3a2f34372d3438203d3e203138373334.roa
File:                     323030313a313237383a363a3a2f34372d3438203d3e203138373334.roa (raw, json)
Hash identifier:          F1LImp3TNyu7wwVrmBg1QLyZ3jEchlrLYByPFQtl3Zk=
Subject key identifier:   B1:EC:B4:21:78:0C:D1:EA:7A:05:15:DB:58:1B:88:11:E0:57:F0:89
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       7A0AEFA348040A276767D9DD227473ADC8D145AC
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a363a3a2f34372d3438203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:42 +0000
ROA not before:           Tue 05 Mar 2024 17:45:42 +0000
ROA not after:            Tue 04 Mar 2025 17:50:42 +0000
asID:                     18734
IP address blocks:        2001:1278:6::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0a:ef:a3:48:04:0a:27:67:67:d9:dd:22:74:73:ad:c8:d1:45:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:42 2024 GMT
            Not After : Mar  4 17:50:42 2025 GMT
        Subject: CN=B1ECB421780CD1EA7A0515DB581B8811E057F089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:a5:c7:99:c2:1b:e5:02:a3:34:61:3c:56:
                    a7:73:86:c6:27:c9:6d:4b:6b:6d:1a:79:54:e0:43:
                    97:c8:70:e9:1a:5d:dd:14:9c:9e:e7:93:a0:fd:b1:
                    32:7a:fe:37:87:fe:7c:fc:18:63:35:56:ba:73:7a:
                    17:be:07:12:60:1b:4c:89:55:97:f4:2f:bb:af:d5:
                    51:09:48:12:9b:56:ec:6a:75:6f:55:fc:cd:56:f1:
                    02:bd:19:8c:bc:c4:a2:95:7f:a0:e4:f0:59:1b:f8:
                    f3:bd:50:96:c3:1d:3c:00:7b:d8:50:fb:c6:32:fb:
                    2e:cb:5e:91:fc:1c:ba:59:b6:51:ff:78:17:f0:e6:
                    0a:76:52:cb:25:41:97:6e:b6:79:5b:07:e6:74:37:
                    30:f4:10:4f:3b:90:92:31:b6:fe:96:8d:3f:1a:48:
                    53:83:15:38:38:b9:02:70:1a:8e:d9:42:e8:54:d4:
                    ac:3b:cb:77:40:95:c6:3c:19:f1:51:fd:bf:d0:54:
                    8d:71:6a:4d:af:c4:ff:bd:94:4c:35:e7:eb:af:e4:
                    ee:6c:b0:30:e5:6a:7c:1f:5f:84:1e:5f:a8:78:68:
                    be:57:da:04:7c:79:81:2a:94:46:f9:8e:14:73:b5:
                    aa:80:4d:5c:de:a9:a8:ec:6b:bb:e5:65:8d:dc:19:
                    63:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EC:B4:21:78:0C:D1:EA:7A:05:15:DB:58:1B:88:11:E0:57:F0:89
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a363a3a2f34372d3438203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:6::/47

    Signature Algorithm: sha256WithRSAEncryption
         06:9f:ba:7c:00:d2:75:ca:36:f4:17:48:1f:b9:d9:e3:d1:e5:
         36:db:60:f6:15:66:dc:77:bd:18:5f:d0:88:f8:21:09:30:56:
         40:74:c6:2e:55:f2:99:06:46:80:e5:d8:98:04:07:3a:5b:6c:
         7d:88:38:2e:3e:8b:4e:0e:77:f0:9a:c2:11:20:f3:d2:7e:11:
         d9:57:80:da:a1:55:21:6b:64:59:71:3e:df:19:ec:ef:d8:25:
         11:ca:87:aa:10:ed:6a:b4:12:4c:c7:ab:75:de:e8:60:f1:3e:
         df:8c:ce:56:72:94:84:a8:d9:81:8f:58:b1:74:b9:0a:d5:81:
         d5:84:99:ce:25:0d:42:af:ca:ae:d0:0d:c4:df:60:1c:da:ce:
         fb:5d:ba:bd:64:f5:31:8c:82:21:2b:d0:43:65:eb:f1:7f:a4:
         c0:a2:9c:dc:5d:8f:9b:b1:c4:30:a6:2b:61:c5:21:39:57:f3:
         f7:57:2d:cf:06:53:9a:a5:96:c0:f2:b1:64:e2:7a:1b:54:62:
         56:88:37:47:89:ad:6a:47:61:1e:25:fc:41:a3:82:ec:38:14:
         a8:b2:9b:5b:dd:d0:8c:db:b3:1b:25:b7:dc:05:72:33:e4:fa:
         dd:3c:f5:d6:39:1d:a8:c8:c5:4e:ab:ee:a2:71:1d:d5:2a:ef:
         78:f6:d5:db
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUegrvo0gECidnZ9ndInRzrcjRRawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5N0EyNTgzNkI0MjlFOUU2RDE1NTE4REM3Mzk3MDBC
NkM5QzRGRDAeFw0yNDAzMDUxNzQ1NDJaFw0yNTAzMDQxNzUwNDJaMDMxMTAvBgNV
BAMTKEIxRUNCNDIxNzgwQ0QxRUE3QTA1MTVEQjU4MUI4ODExRTA1N0YwODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBKXHmcIb5QKjNGE8VqdzhsYn
yW1La20aeVTgQ5fIcOkaXd0UnJ7nk6D9sTJ6/jeH/nz8GGM1Vrpzehe+BxJgG0yJ
VZf0L7uv1VEJSBKbVuxqdW9V/M1W8QK9GYy8xKKVf6Dk8Fkb+PO9UJbDHTwAe9hQ
+8Yy+y7LXpH8HLpZtlH/eBfw5gp2UsslQZdutnlbB+Z0NzD0EE87kJIxtv6WjT8a
SFODFTg4uQJwGo7ZQuhU1Kw7y3dAlcY8GfFR/b/QVI1xak2vxP+9lEw15+uv5O5s
sDDlanwfX4QeX6h4aL5X2gR8eYEqlEb5jhRztaqATVzeqajsa7vlZY3cGWNNAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUsey0IXgM0ep6BRXbWBuIEeBX8IkwHwYDVR0j
BBgwFoAUeZeiWDa0Kenm0VUY3HOXALbJxP0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjJGRkZCMEIzODM0MDQ1RjdDNDI4MkFFQjRDNjQ1REQ5
NDYxNzUwQ0NENTMzOEY4Q0M2RkQ2NUY1QUUxQ0NBLzAvNzk5N0EyNTgzNkI0MjlF
OUU2RDE1NTE4REM3Mzk3MDBCNkM5QzRGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OTk3QTI1ODM2QjQyOUU5RTZE
MTU1MThEQzczOTcwMEI2QzlDNEZELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEYyRkZGQjBCMzgzNDA0NUY3QzQyODJBRUI0QzY0NUREOTQ2MTc1MEND
RDUzMzhGOENDNkZENjVGNUFFMUNDQS8wLzMyMzAzMDMxM2EzMTMyMzczODNhMzYz
YTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMTM4MzczMzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAES
eAAGMA0GCSqGSIb3DQEBCwUAA4IBAQAGn7p8ANJ1yjb0F0gfudnj0eU222D2FWbc
d70YX9CI+CEJMFZAdMYuVfKZBkaA5diYBAc6W2x9iDguPotODnfwmsIRIPPSfhHZ
V4DaoVUha2RZcT7fGezv2CURyoeqEO1qtBJMx6t13uhg8T7fjM5WcpSEqNmBj1ix
dLkK1YHVhJnOJQ1Cr8qu0A3E32Ac2s77Xbq9ZPUxjIIhK9BDZevxf6TAopzcXY+b
scQwpithxSE5V/P3Vy3PBlOapZbA8rFk4nobVGJWiDdHia1qR2EeJfxBo4LsOBSo
sptb3dCM27MbJbfcBXIz5PrdPPXWOR2oyMVOq+6icR3VKu949tXb
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org