Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a383a3a2f34352d3438203d3e203138373334.roa
File:                     323030313a313237383a383a3a2f34352d3438203d3e203138373334.roa (raw, json)
Hash identifier:          a8DQxGT3fB3RUr5Xosx9CgFiDYRcjuPa2DCMxmys+dw=
Subject key identifier:   6C:A7:D1:7B:E5:44:48:58:89:9A:49:C9:CD:EB:02:AA:20:EC:E1:3F
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       5516C20465B1A8D60E4E01B49DAE5391FD661B93
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a383a3a2f34352d3438203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:54 +0000
ROA not before:           Tue 04 Feb 2025 18:01:54 +0000
ROA not after:            Tue 03 Feb 2026 18:06:54 +0000
asID:                     18734
IP address blocks:        2001:1278:8::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:16:c2:04:65:b1:a8:d6:0e:4e:01:b4:9d:ae:53:91:fd:66:1b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:54 2025 GMT
            Not After : Feb  3 18:06:54 2026 GMT
        Subject: CN=6CA7D17BE5444858899A49C9CDEB02AA20ECE13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:aa:a1:d8:e5:33:77:73:cd:81:04:27:b6:
                    bf:c8:91:78:34:97:7e:5d:32:82:89:6b:bf:80:cc:
                    ac:fa:79:53:a8:61:01:6e:19:07:cb:c7:f8:b8:f9:
                    ba:2c:d4:9b:87:ab:c9:3a:71:60:ca:d8:3c:6d:f2:
                    a0:63:f2:6b:bd:39:a5:a3:04:35:d8:22:55:15:89:
                    a3:3a:ed:aa:db:c8:58:d9:a9:e7:10:ae:14:7e:87:
                    3e:9b:73:43:f2:bb:f9:eb:f0:3a:4b:60:38:f3:66:
                    ea:92:62:2d:ba:54:68:85:23:e2:f8:4d:d4:cf:8d:
                    59:68:5e:fc:a5:93:ec:82:fb:d8:90:48:7b:07:fc:
                    cb:fb:a3:af:31:e4:30:e4:86:74:22:0d:1d:c1:41:
                    d1:86:53:df:b6:58:00:75:db:77:ca:15:44:2f:9a:
                    a9:06:3f:c1:0e:b3:b1:9c:c3:03:cb:31:36:15:24:
                    88:af:8d:ae:90:d5:8e:e2:9c:fb:8e:5f:b9:bd:e1:
                    6f:a0:47:21:3d:20:9a:d9:d5:6c:46:41:18:68:5f:
                    12:b3:ee:6d:98:b2:b0:4c:65:7d:9a:31:ce:06:46:
                    96:21:f1:78:a1:7b:b8:11:c1:75:c1:88:38:26:a3:
                    7c:d7:bf:24:cc:3d:b3:a0:5b:01:ac:20:74:c2:4d:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A7:D1:7B:E5:44:48:58:89:9A:49:C9:CD:EB:02:AA:20:EC:E1:3F
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a383a3a2f34352d3438203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:8::/45

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:10:ce:c9:e6:2f:b2:1f:72:48:4f:5c:ae:a3:31:03:2c:
         de:6e:bb:25:b0:b9:38:8e:f6:51:9f:41:d1:d7:0b:e4:ab:82:
         52:a7:e3:26:d3:ec:dc:83:ee:3d:3b:7e:ed:d0:87:07:99:1a:
         68:a1:be:47:7f:2f:fa:f9:2b:a7:ad:e5:2c:13:b0:0d:5f:cb:
         ff:08:84:60:b7:f4:d8:f3:84:87:39:ae:66:ac:13:7f:ae:34:
         e8:c6:ea:23:75:ed:f7:22:a1:d6:3b:98:e9:54:40:5d:59:40:
         01:5b:94:90:07:14:24:59:ad:96:fa:7e:35:48:68:fd:01:51:
         34:5e:c6:17:86:94:ea:9f:64:5a:1b:b3:44:30:0a:bb:f1:50:
         cc:25:cc:0e:d2:3a:ea:62:1c:3c:8d:95:fa:ba:40:10:13:18:
         15:36:b0:a9:4f:79:83:43:a9:34:b6:94:0f:a1:ff:71:46:94:
         a1:f6:dd:93:a1:3d:30:b0:09:f2:80:64:ae:7a:2e:a5:0e:2c:
         97:d8:cf:2d:2e:43:de:d0:86:f5:17:69:b8:87:1e:01:17:6d:
         18:07:08:3b:4d:de:24:0d:f4:74:d2:48:41:43:a0:17:8a:99:
         0a:14:cd:89:d9:6c:f2:b1:70:a9:23:65:41:2e:46:ac:36:23:
         6f:18:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:27:46 2025 by rpki-client