Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130313a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a3130313a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          VVub7fXG3wt0mxMqj2tkJCUJolhzVBxNFOb9Ci7GRNY=
Subject key identifier:   C3:5D:FA:61:35:50:C9:79:9E:58:C2:06:B4:24:2B:84:69:41:12:2B
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       6C540924F3051630E5906A97E6300FC817182F62
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130313a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:43 +0000
ROA not before:           Tue 05 Mar 2024 18:10:43 +0000
ROA not after:            Tue 04 Mar 2025 18:15:43 +0000
asID:                     271891
IP address blocks:        2801:151:101::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:54:09:24:f3:05:16:30:e5:90:6a:97:e6:30:0f:c8:17:18:2f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:43 2024 GMT
            Not After : Mar  4 18:15:43 2025 GMT
        Subject: CN=C35DFA613550C9799E58C206B4242B846941122B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:ba:90:8c:e0:e4:3c:44:92:a2:ea:22:04:
                    4f:4a:2e:9e:00:70:17:94:47:00:ee:68:0d:e3:97:
                    f9:9f:86:a9:a9:04:db:bb:a1:8e:72:3f:e9:d3:08:
                    07:b1:97:1f:c8:fd:90:6c:82:af:13:5e:47:db:84:
                    12:2c:fb:33:79:36:e0:37:53:09:92:b0:58:e2:bf:
                    2e:27:a8:8b:71:bd:8f:66:f0:a8:a6:4a:99:06:8b:
                    84:f6:ba:2c:be:4a:c5:7c:f0:41:48:4f:57:88:cc:
                    4b:01:0c:3b:15:3e:eb:b0:11:af:8d:74:a3:a4:b4:
                    4b:04:82:e6:df:44:19:f3:a7:26:45:24:18:fa:54:
                    e6:35:64:51:5e:90:db:dd:15:4c:d4:51:50:c2:02:
                    1f:69:f1:87:8a:57:52:b5:95:46:40:64:d9:5b:15:
                    eb:eb:de:cd:c2:e4:70:90:94:2d:a7:59:8a:63:c4:
                    01:4c:90:7a:26:5b:7a:52:77:aa:b0:12:13:fa:fc:
                    a4:a7:07:84:02:0e:13:60:85:ab:3f:64:6f:34:02:
                    68:d1:23:42:d5:cd:e2:a0:5f:59:23:61:75:7e:77:
                    67:02:34:db:30:db:4b:5b:72:bd:a4:2a:2a:3f:88:
                    3e:20:9b:cf:90:99:b7:68:f7:8c:a0:35:3f:94:bc:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5D:FA:61:35:50:C9:79:9E:58:C2:06:B4:24:2B:84:69:41:12:2B
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130313a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:b1:73:47:43:66:00:c5:47:c0:d9:63:5f:c2:9c:e2:4a:84:
         1a:b0:a5:d1:81:99:b0:4e:ae:5e:41:47:2a:c9:d9:c7:53:4f:
         8a:b0:ff:0e:7d:89:d8:ac:52:5a:2a:c5:59:9e:62:8b:a6:1b:
         0a:c4:f9:c0:b3:1d:bf:f7:db:9b:b9:41:42:6f:a8:f5:08:1e:
         51:8c:5d:23:8c:33:74:95:59:a8:9c:78:4b:14:d0:c5:a7:78:
         4d:45:32:4d:65:fb:6d:8a:ee:d4:ba:dc:3c:aa:ea:ba:24:72:
         eb:75:a6:7a:0f:0a:8e:2c:e7:b2:8a:9f:9a:e8:3b:7a:63:25:
         51:b0:60:af:57:4c:2a:a6:04:81:3d:e8:42:1c:fc:4f:80:5e:
         3a:d1:55:d9:62:36:08:a1:8c:16:31:12:75:60:20:30:99:e9:
         bf:2f:db:2d:06:df:f3:88:00:bb:fb:f4:92:9c:50:2a:d0:5a:
         1d:7b:fa:70:09:63:e9:0d:cf:e6:cc:2c:8d:85:7f:29:54:31:
         f8:d3:f9:40:0e:02:02:23:c8:88:1c:ae:14:19:c9:b6:36:c6:
         89:0d:bf:d2:1f:a6:42:5a:54:de:da:f8:00:3e:eb:6c:b4:2f:
         f0:5a:c0:1b:ff:09:6f:02:24:d6:56:94:c6:e1:f1:f5:27:7f:
         a3:9f:30:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org