Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a653a3a2f34372d3438203d3e203138373334.roa
File:                     323030313a313237383a653a3a2f34372d3438203d3e203138373334.roa (raw, json)
Hash identifier:          pl+dGUK5VHUFidPS90uC6AFreIbM7vvZoMj50Ze2gNI=
Subject key identifier:   2A:81:93:8C:C4:A6:55:96:B1:59:C6:EB:AD:62:E0:13:E2:23:FA:C5
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       0675950F1327B4DCBFEFB09E310A9E87F58A6F50
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a653a3a2f34372d3438203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:45 +0000
ROA not before:           Tue 05 Mar 2024 17:45:45 +0000
ROA not after:            Tue 04 Mar 2025 17:50:45 +0000
asID:                     18734
IP address blocks:        2001:1278:e::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:75:95:0f:13:27:b4:dc:bf:ef:b0:9e:31:0a:9e:87:f5:8a:6f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:45 2024 GMT
            Not After : Mar  4 17:50:45 2025 GMT
        Subject: CN=2A81938CC4A65596B159C6EBAD62E013E223FAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:e8:2a:4a:99:ce:06:84:d1:58:d6:c3:7b:
                    d8:98:32:5b:57:a9:a7:10:94:26:30:bc:ac:d0:c7:
                    7f:8a:1d:ef:86:25:97:2c:38:61:e8:c8:88:cd:c6:
                    01:ad:e8:2b:29:28:6b:48:23:6e:9b:34:64:ec:15:
                    bc:6d:72:a5:e3:50:05:fc:58:34:84:1e:0f:9f:a5:
                    fc:72:dd:99:6a:fc:b5:ca:2f:b0:29:18:b4:ac:5d:
                    d5:c5:f7:f3:d4:43:3e:db:e1:da:7d:a5:c2:1d:95:
                    60:36:99:21:ed:f5:20:f3:a7:ec:ec:78:cc:5c:f2:
                    96:c8:bc:04:50:4b:6f:b7:4e:07:d4:a5:fe:90:ce:
                    9b:2e:21:d0:ce:ca:1a:5f:22:f4:78:a1:bc:3e:d2:
                    3b:7c:a5:b9:aa:ea:4a:7d:4d:4c:21:4d:4d:a3:76:
                    ae:8f:14:91:9c:8f:c6:05:48:30:dd:c9:51:a5:de:
                    fb:65:03:01:fc:ca:c1:c7:80:63:84:ab:0b:ae:cc:
                    7a:92:2a:9e:b1:22:92:6a:05:6b:1b:b1:5b:71:63:
                    31:24:d0:ab:46:6e:77:a9:c1:5c:3a:80:ee:4a:93:
                    08:83:67:a2:0e:5e:1f:20:9c:24:06:65:a3:95:2c:
                    8f:8a:80:25:56:5d:55:cf:3e:26:75:3d:e6:b9:19:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:81:93:8C:C4:A6:55:96:B1:59:C6:EB:AD:62:E0:13:E2:23:FA:C5
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a653a3a2f34372d3438203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:e::/47

    Signature Algorithm: sha256WithRSAEncryption
         7f:5b:54:c1:1c:e1:b3:bc:8c:d9:a5:54:a6:cd:41:fa:81:ec:
         57:9e:95:fb:68:8b:e6:2c:b2:75:93:9f:60:af:04:15:f7:a9:
         4f:9d:fe:c6:db:f3:1c:bc:3a:cb:3a:ee:ac:45:a0:3b:10:a5:
         cb:b3:bb:6d:65:9b:2a:ab:67:68:b4:8c:2c:51:b1:13:8a:a6:
         91:89:84:fd:a6:e4:cd:67:9b:b3:44:72:de:3a:91:3b:cb:ca:
         a3:2d:44:84:0b:83:b1:5f:c7:24:cb:c5:af:0f:9d:06:19:d6:
         cd:8e:28:40:ec:0c:d3:17:cd:51:73:62:e8:20:5d:af:41:78:
         82:ab:31:90:91:24:3e:a9:55:50:de:88:23:67:7b:56:3b:09:
         f8:36:31:2f:a9:9c:b5:38:04:95:96:04:c4:65:09:09:84:4f:
         cf:af:6a:28:dc:e8:c1:5a:3f:6e:1b:49:78:bd:70:90:16:80:
         aa:3c:25:83:06:3c:cf:b6:86:48:1c:c7:ed:8e:e4:a2:a5:18:
         48:ed:00:2f:8e:a7:3c:d8:8c:b9:bd:0c:f0:4e:46:f7:1e:5b:
         03:f4:79:e3:af:3f:14:30:92:7a:c9:0a:8e:38:e6:88:96:43:
         a7:7e:a7:ba:2c:c6:93:6e:2d:79:6d:d0:01:b4:8b:38:25:08:
         40:08:4e:a3
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUBnWVDxMntNy/77CeMQqeh/WKb1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5N0EyNTgzNkI0MjlFOUU2RDE1NTE4REM3Mzk3MDBC
NkM5QzRGRDAeFw0yNDAzMDUxNzQ1NDVaFw0yNTAzMDQxNzUwNDVaMDMxMTAvBgNV
BAMTKDJBODE5MzhDQzRBNjU1OTZCMTU5QzZFQkFENjJFMDEzRTIyM0ZBQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZOgqSpnOBoTRWNbDe9iYMltX
qacQlCYwvKzQx3+KHe+GJZcsOGHoyIjNxgGt6CspKGtII26bNGTsFbxtcqXjUAX8
WDSEHg+fpfxy3Zlq/LXKL7ApGLSsXdXF9/PUQz7b4dp9pcIdlWA2mSHt9SDzp+zs
eMxc8pbIvARQS2+3TgfUpf6QzpsuIdDOyhpfIvR4obw+0jt8pbmq6kp9TUwhTU2j
dq6PFJGcj8YFSDDdyVGl3vtlAwH8ysHHgGOEqwuuzHqSKp6xIpJqBWsbsVtxYzEk
0KtGbnepwVw6gO5KkwiDZ6IOXh8gnCQGZaOVLI+KgCVWXVXPPiZ1Pea5GekzAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUKoGTjMSmVZaxWcbrrWLgE+Ij+sUwHwYDVR0j
BBgwFoAUeZeiWDa0Kenm0VUY3HOXALbJxP0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjJGRkZCMEIzODM0MDQ1RjdDNDI4MkFFQjRDNjQ1REQ5
NDYxNzUwQ0NENTMzOEY4Q0M2RkQ2NUY1QUUxQ0NBLzAvNzk5N0EyNTgzNkI0MjlF
OUU2RDE1NTE4REM3Mzk3MDBCNkM5QzRGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OTk3QTI1ODM2QjQyOUU5RTZE
MTU1MThEQzczOTcwMEI2QzlDNEZELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEYyRkZGQjBCMzgzNDA0NUY3QzQyODJBRUI0QzY0NUREOTQ2MTc1MEND
RDUzMzhGOENDNkZENjVGNUFFMUNDQS8wLzMyMzAzMDMxM2EzMTMyMzczODNhNjUz
YTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMTM4MzczMzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAES
eAAOMA0GCSqGSIb3DQEBCwUAA4IBAQB/W1TBHOGzvIzZpVSmzUH6gexXnpX7aIvm
LLJ1k59grwQV96lPnf7G2/McvDrLOu6sRaA7EKXLs7ttZZsqq2dotIwsUbETiqaR
iYT9puTNZ5uzRHLeOpE7y8qjLUSEC4OxX8cky8WvD50GGdbNjihA7AzTF81Rc2Lo
IF2vQXiCqzGQkSQ+qVVQ3ogjZ3tWOwn4NjEvqZy1OASVlgTEZQkJhE/Pr2oo3OjB
Wj9uG0l4vXCQFoCqPCWDBjzPtoZIHMftjuSipRhI7QAvjqc82Iy5vQzwTkb3HlsD
9Hnjrz8UMJJ6yQqOOOaIlkOnfqe6LMaTbi15bdABtIs4JQhACE6j
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:44 2024 by rpki-client on console-fra.rpki-client.org