Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a363a3a2f34382d3438203d3e203138373334.roa
File:                     323030313a313237383a363a3a2f34382d3438203d3e203138373334.roa (raw, json)
Hash identifier:          a0crVESGp6/iT0l0vGrGKwA8NGBkdQaBDLgPPlsrW4Y=
Subject key identifier:   0F:92:B6:01:B5:CF:27:8E:16:27:BF:7A:69:0F:C9:57:A3:74:7E:8F
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       2A49E754855088A89901E5C7633AB25AB7F5A07D
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a363a3a2f34382d3438203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:54 +0000
ROA not before:           Tue 04 Feb 2025 18:01:54 +0000
ROA not after:            Tue 03 Feb 2026 18:06:54 +0000
asID:                     18734
IP address blocks:        2001:1278:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:49:e7:54:85:50:88:a8:99:01:e5:c7:63:3a:b2:5a:b7:f5:a0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:54 2025 GMT
            Not After : Feb  3 18:06:54 2026 GMT
        Subject: CN=0F92B601B5CF278E1627BF7A690FC957A3747E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:16:f2:0c:b3:f4:f0:8a:12:4a:f7:c2:6a:dd:
                    04:47:ee:f0:dc:45:1d:5b:26:26:81:db:8f:2d:1c:
                    a5:e4:82:81:33:88:8e:80:54:01:82:84:6d:40:b2:
                    14:5c:66:0d:7b:14:25:7d:7d:76:45:45:ef:f2:d4:
                    39:3c:fc:8c:61:fc:40:2b:d3:02:ee:84:7b:a9:a5:
                    2b:c6:06:b0:ce:56:72:86:8c:c5:ae:6b:aa:c9:34:
                    87:0f:b4:43:6a:c6:3d:fe:34:62:ef:0c:5b:af:f2:
                    a5:45:46:bd:9a:df:1e:05:89:a3:bf:98:a5:8e:c0:
                    e5:e1:51:90:98:c7:8b:77:17:3f:bc:2d:ee:91:68:
                    24:2a:69:39:2e:a4:36:ae:b4:9b:83:06:33:20:c7:
                    d9:78:9a:35:43:0e:14:b9:76:da:97:4f:0e:a3:46:
                    f2:03:77:7e:91:37:40:fa:31:1c:ba:f0:bf:f6:c9:
                    29:3f:7c:55:39:e3:7f:c3:d2:9d:a2:5e:1a:bf:fd:
                    4b:c6:97:ff:1c:9f:d1:71:66:55:84:52:4d:eb:4c:
                    f7:2e:17:73:16:91:fb:d4:4e:20:40:68:74:73:ab:
                    c5:33:85:02:22:c2:cb:7d:bd:1a:59:fd:26:e1:fe:
                    ab:91:aa:c6:d0:ed:25:32:b4:5c:0f:fb:a6:64:79:
                    07:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:92:B6:01:B5:CF:27:8E:16:27:BF:7A:69:0F:C9:57:A3:74:7E:8F
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a363a3a2f34382d3438203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:ae:d8:79:46:ec:16:d6:33:4e:a7:4c:dc:eb:40:b1:91:b2:
         bd:76:bb:01:1e:8a:2b:15:8d:46:06:81:c0:9c:4b:e2:34:ad:
         85:aa:33:bb:df:57:1c:2b:b0:83:5c:db:83:0a:e0:27:65:ac:
         75:1c:90:3c:dd:af:80:5d:40:33:ed:21:a6:53:c9:5d:98:24:
         df:41:61:dc:d4:09:fc:41:91:31:22:18:35:b3:32:d6:4d:da:
         a2:af:fd:b5:a8:7e:b2:39:d3:69:7a:35:a7:7c:84:d5:7a:3b:
         9f:70:7d:df:2d:73:39:de:f1:1f:0c:95:56:30:99:df:61:57:
         25:70:a3:81:5d:08:cd:39:dc:23:00:44:af:88:ef:05:5d:35:
         eb:37:c3:cb:a2:ed:22:02:f4:03:ce:dd:9e:12:2e:d8:a9:ff:
         6f:15:f4:7f:07:bf:39:5f:89:34:8c:16:d3:2f:bf:2d:df:f4:
         95:02:ca:6b:e8:51:e1:b0:13:f9:f5:b5:4e:f3:82:a7:d4:5d:
         eb:81:34:4d:77:5b:ae:4d:2d:b4:3c:fb:af:89:1e:8f:2c:9b:
         07:da:a4:6f:8f:27:b6:25:93:a9:61:89:a7:0a:bd:72:8a:57:
         cf:bd:26:45:ea:2a:a8:d4:cb:32:14:e3:38:39:9f:ff:e1:6f:
         3c:b7:10:49
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUKknnVIVQiKiZAeXHYzqyWrf1oH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5N0EyNTgzNkI0MjlFOUU2RDE1NTE4REM3Mzk3MDBC
NkM5QzRGRDAeFw0yNTAyMDQxODAxNTRaFw0yNjAyMDMxODA2NTRaMDMxMTAvBgNV
BAMTKDBGOTJCNjAxQjVDRjI3OEUxNjI3QkY3QTY5MEZDOTU3QTM3NDdFOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdFvIMs/TwihJK98Jq3QRH7vDc
RR1bJiaB248tHKXkgoEziI6AVAGChG1AshRcZg17FCV9fXZFRe/y1Dk8/Ixh/EAr
0wLuhHuppSvGBrDOVnKGjMWua6rJNIcPtENqxj3+NGLvDFuv8qVFRr2a3x4FiaO/
mKWOwOXhUZCYx4t3Fz+8Le6RaCQqaTkupDautJuDBjMgx9l4mjVDDhS5dtqXTw6j
RvIDd36RN0D6MRy68L/2ySk/fFU543/D0p2iXhq//UvGl/8cn9FxZlWEUk3rTPcu
F3MWkfvUTiBAaHRzq8UzhQIiwst9vRpZ/Sbh/quRqsbQ7SUytFwP+6ZkeQfNAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUD5K2AbXPJ44WJ796aQ/JV6N0fo8wHwYDVR0j
BBgwFoAUeZeiWDa0Kenm0VUY3HOXALbJxP0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjJGRkZCMEIzODM0MDQ1RjdDNDI4MkFFQjRDNjQ1REQ5
NDYxNzUwQ0NENTMzOEY4Q0M2RkQ2NUY1QUUxQ0NBLzAvNzk5N0EyNTgzNkI0MjlF
OUU2RDE1NTE4REM3Mzk3MDBCNkM5QzRGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OTk3QTI1ODM2QjQyOUU5RTZE
MTU1MThEQzczOTcwMEI2QzlDNEZELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEYyRkZGQjBCMzgzNDA0NUY3QzQyODJBRUI0QzY0NUREOTQ2MTc1MEND
RDUzMzhGOENDNkZENjVGNUFFMUNDQS8wLzMyMzAzMDMxM2EzMTMyMzczODNhMzYz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM4MzczMzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAES
eAAGMA0GCSqGSIb3DQEBCwUAA4IBAQBwrth5RuwW1jNOp0zc60CxkbK9drsBHoor
FY1GBoHAnEviNK2FqjO731ccK7CDXNuDCuAnZax1HJA83a+AXUAz7SGmU8ldmCTf
QWHc1An8QZExIhg1szLWTdqir/21qH6yOdNpejWnfITVejufcH3fLXM53vEfDJVW
MJnfYVclcKOBXQjNOdwjAESviO8FXTXrN8PLou0iAvQDzt2eEi7Yqf9vFfR/B785
X4k0jBbTL78t3/SVAspr6FHhsBP59bVO84Kn1F3rgTRNd1uuTS20PPuviR6PLJsH
2qRvjye2JZOpYYmnCr1yilfPvSZF6iqo1MsyFOM4OZ//4W88txBJ
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:13 2025 by rpki-client