Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/323030313a313231383a3a2f33322d3438203d3e20323738.roa
File:                     323030313a313231383a3a2f33322d3438203d3e20323738.roa (raw, json)
Hash identifier:          gMeOWxlzPQ7idlMqflVR2HTjdw2gxg2Si5PeuDjkFGw=
Subject key identifier:   B0:DE:BE:BC:BE:B9:7C:0F:0E:94:BA:D3:8D:40:5F:50:7A:75:6E:93
Certificate issuer:       /CN=7F34532F322CC805D15BBA71423D1C8F04148FC7
Certificate serial:       4AADBBA555DA69C3D660C14A521C76CAE87AEEA3
Authority key identifier: 7F:34:53:2F:32:2C:C8:05:D1:5B:BA:71:42:3D:1C:8F:04:14:8F:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/323030313a313231383a3a2f33322d3438203d3e20323738.roa
Signing time:             Tue 05 Mar 2024 18:02:08 +0000
ROA not before:           Tue 05 Mar 2024 17:57:08 +0000
ROA not after:            Tue 04 Mar 2025 18:02:08 +0000
asID:                     278
IP address blocks:        2001:1218::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ad:bb:a5:55:da:69:c3:d6:60:c1:4a:52:1c:76:ca:e8:7a:ee:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F34532F322CC805D15BBA71423D1C8F04148FC7
        Validity
            Not Before: Mar  5 17:57:08 2024 GMT
            Not After : Mar  4 18:02:08 2025 GMT
        Subject: CN=B0DEBEBCBEB97C0F0E94BAD38D405F507A756E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3d:5a:23:87:45:ac:d4:02:72:d2:60:92:84:
                    01:d4:db:54:46:b0:ed:09:a5:da:34:ef:60:6b:d7:
                    b3:9f:af:2c:3d:55:47:7d:8e:f4:35:ef:2f:36:9e:
                    83:27:f9:75:cf:ca:58:7f:4f:10:60:80:7e:48:40:
                    ec:7b:5b:7b:95:5c:1f:a7:fc:8f:8f:0c:71:8b:a1:
                    99:d1:7c:ca:18:34:26:f8:89:4c:f1:c6:4a:7d:0f:
                    56:68:5c:7e:3c:25:11:a1:42:8e:33:6b:c9:af:03:
                    3f:22:7a:1e:08:a2:68:ee:54:92:6e:45:7f:a1:e5:
                    08:c4:ef:29:95:a3:e4:61:f6:65:18:e5:1e:43:aa:
                    d0:fe:58:cd:de:0c:2a:7f:30:fb:12:aa:ac:f4:5a:
                    13:51:0a:4b:6a:18:69:14:48:cf:11:62:59:4b:3b:
                    66:0d:69:9e:d9:cf:0a:4e:4c:0a:89:6b:a1:08:a8:
                    8d:51:a2:b7:07:5d:3b:81:42:1e:b0:c0:1e:4e:58:
                    80:5e:15:3d:74:3b:be:59:71:46:b5:76:d7:28:ec:
                    0e:07:f2:1a:15:d7:fc:36:a7:61:1b:88:5e:91:99:
                    57:a7:2d:f4:48:20:0c:62:0a:79:d1:1e:9e:d6:04:
                    fb:8e:85:84:38:70:b8:04:ce:b7:f6:5e:60:d4:19:
                    74:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DE:BE:BC:BE:B9:7C:0F:0E:94:BA:D3:8D:40:5F:50:7A:75:6E:93
            X509v3 Authority Key Identifier:
                keyid:7F:34:53:2F:32:2C:C8:05:D1:5B:BA:71:42:3D:1C:8F:04:14:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/323030313a313231383a3a2f33322d3438203d3e20323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:cc:75:06:47:c3:da:0c:48:a3:c0:fa:78:79:25:07:2f:42:
         49:4d:36:5d:fa:26:35:f3:b0:c5:90:6a:52:53:90:f5:40:f5:
         ad:49:fb:d8:fd:a9:32:ba:7e:72:3d:93:41:88:7e:6e:3d:6a:
         33:93:e7:ba:96:0c:36:eb:a1:12:d5:4f:76:2a:9f:4b:3b:99:
         99:c6:75:4b:26:94:84:1f:90:5c:e3:44:5d:5b:a2:ce:3a:53:
         81:90:d6:5a:f8:21:c1:69:ec:21:01:93:85:33:dd:22:2f:08:
         0f:92:f3:4d:b6:a2:ef:cd:4d:ce:e6:bc:93:06:cc:b5:f0:69:
         10:d3:b2:17:6e:68:71:1c:e3:53:7f:3a:97:f3:4f:20:0e:1e:
         e7:0f:a8:60:d6:eb:38:a5:b7:d2:cd:36:da:77:6f:78:bb:ec:
         22:1d:4d:38:8c:9a:61:92:47:7a:2e:e2:a8:88:07:a8:c8:1b:
         4c:40:c4:66:0c:3e:86:64:dc:04:ce:00:13:c5:f7:0a:67:96:
         6c:f2:8a:b7:9f:71:c8:b7:73:09:48:d4:44:4c:e7:ee:44:aa:
         06:6a:d4:f1:73:b9:25:e8:e3:34:be:e1:04:a4:f0:29:85:fd:
         38:aa:0e:d5:10:ca:aa:90:26:bd:7f:c4:f3:ac:78:f5:39:8c:
         6c:81:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org