Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130353a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a3130353a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          R1QNspPAb/Vg+s2SFRjuCtUqFaNekzjrZ/fB0chFofA=
Subject key identifier:   FF:21:33:F4:7C:27:88:31:C1:BC:0A:C1:D4:47:EF:E9:15:8D:4A:CE
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       1FCF7FE85657703F673375A3CA9360E4DBE16ADD
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130353a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:06 +0000
ROA not before:           Tue 04 Feb 2025 18:40:06 +0000
ROA not after:            Tue 03 Feb 2026 18:45:06 +0000
asID:                     271891
IP address blocks:        2801:151:105::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cf:7f:e8:56:57:70:3f:67:33:75:a3:ca:93:60:e4:db:e1:6a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:06 2025 GMT
            Not After : Feb  3 18:45:06 2026 GMT
        Subject: CN=FF2133F47C278831C1BC0AC1D447EFE9158D4ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:4c:48:88:ae:35:07:21:a2:e1:e3:00:54:
                    e9:2e:e1:fa:a0:a2:02:55:a3:a0:d7:0c:ad:2f:98:
                    3b:2f:36:e1:29:97:40:fe:27:03:73:67:00:d5:02:
                    d3:4d:52:49:86:03:34:4c:46:9b:24:cc:9f:b5:e6:
                    d1:85:37:88:a3:2d:a0:f9:f2:f6:8c:cc:98:53:79:
                    43:7c:19:1f:3a:1e:22:4b:8a:5f:87:c1:7a:22:b4:
                    1c:2c:4a:ca:f3:2f:d7:d6:93:66:44:71:5c:f6:65:
                    ee:8a:df:d0:28:83:e7:21:96:48:6f:40:f5:ca:67:
                    ee:3c:15:9a:1a:3d:44:63:fd:d5:03:b0:9c:c7:6c:
                    a8:fa:c0:51:3a:b4:58:84:7c:36:5a:a8:b1:36:53:
                    b7:fc:5f:c5:af:86:c3:47:87:ca:7b:8d:43:c2:a1:
                    aa:e7:53:7b:23:e0:e7:a6:86:fd:81:6a:e4:d9:f1:
                    77:d4:0c:7e:6a:aa:3a:96:a7:17:01:fa:5d:6b:97:
                    89:5d:bf:9c:97:42:e5:26:ae:f2:90:4a:d9:ba:ed:
                    93:19:f4:4d:3d:fb:d7:fe:13:0d:a6:94:fa:5e:0b:
                    29:c0:e1:ca:8e:a3:fa:17:03:28:4d:d3:48:f1:0f:
                    95:d3:c2:72:eb:56:af:05:80:03:f2:56:b1:0c:ae:
                    74:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:21:33:F4:7C:27:88:31:C1:BC:0A:C1:D4:47:EF:E9:15:8D:4A:CE
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130353a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:105::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:8a:ef:88:17:3e:31:00:cf:78:cf:bf:ef:b0:61:dc:78:c4:
         a5:2c:86:f4:a1:32:e2:70:24:cd:b4:72:76:bf:1c:be:2e:ce:
         0f:14:35:92:df:cc:dd:2b:a6:c8:ae:b7:b5:d0:8d:87:a9:c2:
         a8:cb:11:e8:5a:3b:e2:8b:c2:0a:a0:00:57:4c:41:9f:1e:8c:
         a7:c6:f6:e5:50:72:ff:7a:98:bd:b8:23:76:8b:77:20:02:e5:
         bc:6d:6f:62:3a:e8:cd:a6:13:9e:69:17:65:80:b5:44:7c:7e:
         4f:11:62:6f:9b:2d:e4:7c:60:a9:0c:6b:27:47:08:db:48:1a:
         cf:29:86:10:a3:cd:92:e6:ac:e8:03:21:05:a0:60:ee:d2:8b:
         9b:b1:48:43:18:50:7c:6b:c1:83:c9:a5:e6:b2:e8:fe:b2:0e:
         4b:21:43:87:e0:4e:9d:d2:00:90:fe:3d:33:b0:39:b1:67:02:
         ca:a9:28:44:8f:e3:2c:22:57:b0:32:05:74:0b:2e:fc:46:2b:
         e0:d4:88:98:ba:fb:62:60:88:6d:33:5f:c9:ec:2f:75:ab:6b:
         70:5d:c9:da:db:18:dd:d2:a2:00:4f:74:1a:80:39:8d:f3:6a:
         9c:06:87:ca:d4:26:b5:a0:78:24:0c:d5:f2:18:7b:f1:e5:04:
         7a:65:c6:cb
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUH89/6FZXcD9nM3WjypNg5Nvhat0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMxMkFDQjIyMjZGOEI4OEU1RTg5RUYyRjE0NDJCOEVF
RkIzQjI3OTAeFw0yNTAyMDQxODQwMDZaFw0yNjAyMDMxODQ1MDZaMDMxMTAvBgNV
BAMTKEZGMjEzM0Y0N0MyNzg4MzFDMUJDMEFDMUQ0NDdFRkU5MTU4RDRBQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPE0xIiK41ByGi4eMAVOku4fqg
ogJVo6DXDK0vmDsvNuEpl0D+JwNzZwDVAtNNUkmGAzRMRpskzJ+15tGFN4ijLaD5
8vaMzJhTeUN8GR86HiJLil+HwXoitBwsSsrzL9fWk2ZEcVz2Ze6K39Aog+chlkhv
QPXKZ+48FZoaPURj/dUDsJzHbKj6wFE6tFiEfDZaqLE2U7f8X8WvhsNHh8p7jUPC
oarnU3sj4Oemhv2BauTZ8XfUDH5qqjqWpxcB+l1rl4ldv5yXQuUmrvKQStm67ZMZ
9E09+9f+Ew2mlPpeCynA4cqOo/oXAyhN00jxD5XTwnLrVq8FgAPyVrEMrnRHAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU/yEz9HwniDHBvArB1Efv6RWNSs4wHwYDVR0j
BBgwFoAUQxKssiJvi4jl6J7y8UQrju+zsnkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjgxNUM3OERERDQwQjQ5MjdEOTgwRkE5NEU4RDA3QUQz
NEMzNDNBQTFGMjNDRDVEREU5NUZFRjlGQkNGMUE0LzAvNDMxMkFDQjIyMjZGOEI4
OEU1RTg5RUYyRjE0NDJCOEVFRkIzQjI3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzEyQUNCMjIyNkY4Qjg4RTVF
ODlFRjJGMTQ0MkI4RUVGQjNCMjc5LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI4MTVDNzhEREQ0MEI0OTI3RDk4MEZBOTRFOEQwN0FEMzRDMzQzQUEx
RjIzQ0Q1RERFOTVGRUY5RkJDRjFBNC8wLzMyMzgzMDMxM2EzMTM1MzEzYTMxMzAz
NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMTM4MzkzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAVEBBTANBgkqhkiG9w0BAQsFAAOCAQEArIrviBc+MQDPeM+/77Bh3HjEpSyG
9KEy4nAkzbRydr8cvi7ODxQ1kt/M3SumyK63tdCNh6nCqMsR6Fo74ovCCqAAV0xB
nx6Mp8b25VBy/3qYvbgjdot3IALlvG1vYjrozaYTnmkXZYC1RHx+TxFib5st5Hxg
qQxrJ0cI20gazymGEKPNkuas6AMhBaBg7tKLm7FIQxhQfGvBg8ml5rLo/rIOSyFD
h+BOndIAkP49M7A5sWcCyqkoRI/jLCJXsDIFdAsu/EYr4NSImLr7YmCIbTNfyewv
datrcF3J2tsY3dKiAE90GoA5jfNqnAaHytQmtaB4JAzV8hh78eUEemXGyw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:01:15 2025 by rpki-client