Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/323030313a313366383a3a2f33322d3438203d3e203237383137.roa
File:                     323030313a313366383a3a2f33322d3438203d3e203237383137.roa (raw, json)
Hash identifier:          SLnoOvjKzJ5RxVGAxE69WoxBfJw4c8/eXUe038eRgCE=
Subject key identifier:   FA:79:5A:31:0C:67:6F:6E:3A:FF:DA:BE:ED:AC:67:88:87:11:8F:0A
Certificate issuer:       /CN=F8097A80F65CAD011E316F610FD2A7189B6F9D80
Certificate serial:       60E6A22FFD2CF85F9C7858C2777271B8C52DF2A1
Authority key identifier: F8:09:7A:80:F6:5C:AD:01:1E:31:6F:61:0F:D2:A7:18:9B:6F:9D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/323030313a313366383a3a2f33322d3438203d3e203237383137.roa
Signing time:             Tue 04 Feb 2025 18:18:32 +0000
ROA not before:           Tue 04 Feb 2025 18:13:32 +0000
ROA not after:            Tue 03 Feb 2026 18:18:32 +0000
asID:                     27817
IP address blocks:        2001:13f8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 10:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e6:a2:2f:fd:2c:f8:5f:9c:78:58:c2:77:72:71:b8:c5:2d:f2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8097A80F65CAD011E316F610FD2A7189B6F9D80
        Validity
            Not Before: Feb  4 18:13:32 2025 GMT
            Not After : Feb  3 18:18:32 2026 GMT
        Subject: CN=FA795A310C676F6E3AFFDABEEDAC678887118F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:92:3a:2e:5a:27:e7:07:b8:3b:ef:17:0c:
                    00:ea:e0:ec:de:6c:09:62:12:42:88:86:d0:82:c0:
                    e5:36:74:f3:0f:44:ca:2a:f2:2d:3d:eb:ec:ab:ec:
                    43:32:01:56:c5:05:aa:14:b9:2e:41:fd:c7:f1:4c:
                    39:5e:78:1b:ac:1a:79:d7:f8:ea:dd:a4:6c:93:fc:
                    4b:13:b7:3d:dd:75:7c:e2:ae:f4:28:12:5d:f7:b6:
                    fe:43:fe:d7:f9:4a:7e:c1:7a:86:7f:c9:fa:30:06:
                    80:d1:28:1d:9f:22:cb:7a:bb:83:6d:78:ea:f6:16:
                    28:16:04:a3:e5:b5:62:eb:02:07:e3:36:29:de:ef:
                    26:79:5d:4b:6b:0b:44:61:4f:c0:2f:56:6b:c9:dc:
                    cf:93:6d:48:af:d1:18:85:ba:f9:f3:6b:ce:a1:c5:
                    8c:7c:c3:ad:ae:ef:bf:60:6b:34:eb:3a:e7:ac:a2:
                    25:57:25:1a:c4:0e:1f:4b:98:54:34:fe:93:f3:3e:
                    53:75:39:71:6f:8a:71:5e:04:2b:df:9a:7e:d2:f7:
                    68:f7:41:73:29:7b:1b:5d:b0:f0:8f:71:65:7c:7a:
                    93:5e:f4:7f:4f:65:cd:43:7f:d3:8d:52:36:85:38:
                    82:25:e3:b9:ae:59:fc:3b:a6:00:81:79:eb:51:c0:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:79:5A:31:0C:67:6F:6E:3A:FF:DA:BE:ED:AC:67:88:87:11:8F:0A
            X509v3 Authority Key Identifier:
                keyid:F8:09:7A:80:F6:5C:AD:01:1E:31:6F:61:0F:D2:A7:18:9B:6F:9D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/323030313a313366383a3a2f33322d3438203d3e203237383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:35:6d:e4:30:54:9c:bd:53:12:3c:64:aa:72:9e:1c:bf:2f:
         d5:ed:0a:a0:11:d2:7f:f5:58:e6:5b:ad:74:0e:87:54:0f:48:
         9d:eb:37:66:fd:e3:2b:ac:48:57:34:e1:44:45:28:41:86:cd:
         95:fd:2e:77:b7:04:34:f7:2f:1f:d6:c6:a5:b4:c1:c4:15:fd:
         da:36:04:a6:ef:bd:42:f7:be:4f:6d:6c:3d:c0:fb:7f:db:ce:
         af:83:17:1d:e5:b4:a1:ec:47:d0:bf:f2:5a:66:3f:b3:9e:9a:
         97:34:9f:77:31:24:48:03:69:c3:e5:7c:ca:2b:62:b6:1f:14:
         85:3f:ca:f1:61:f4:21:2e:ff:04:48:21:eb:3b:36:98:87:57:
         64:b7:9d:81:15:0b:cf:41:8e:ac:be:af:a9:9a:09:0b:1b:04:
         8f:80:73:84:76:5b:9f:32:fb:e0:07:46:e7:fb:49:89:d1:eb:
         01:41:98:14:3c:0a:03:b8:29:b5:12:d3:b9:ad:11:a2:df:7b:
         1e:16:66:2d:9b:0d:de:a7:98:01:99:8c:b3:2c:cf:62:6d:37:
         68:26:06:48:f8:1e:ec:8a:26:ff:5b:eb:82:3b:f1:dd:43:14:
         d8:17:d5:c7:93:58:42:5e:19:c7:5f:7e:b1:94:1d:77:0e:90:
         6f:0d:47:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:34 2025 by rpki-client