Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130383a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a3130383a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          LFLJN8CA9d0mIJf0egZhPaW8eThbfJ54LbfjnsCftSs=
Subject key identifier:   A3:CE:40:30:4E:BE:6D:B9:A7:43:58:E9:DD:F6:D1:DA:EA:DD:F7:87
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       32AB5B823C713525FD13A4D894D3F1D0FF5681F7
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130383a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:45 +0000
ROA not before:           Tue 05 Mar 2024 18:10:45 +0000
ROA not after:            Tue 04 Mar 2025 18:15:45 +0000
asID:                     271891
IP address blocks:        2801:151:108::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ab:5b:82:3c:71:35:25:fd:13:a4:d8:94:d3:f1:d0:ff:56:81:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:45 2024 GMT
            Not After : Mar  4 18:15:45 2025 GMT
        Subject: CN=A3CE40304EBE6DB9A74358E9DDF6D1DAEADDF787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:45:64:53:b7:e7:57:e0:54:e6:75:22:49:
                    88:60:97:62:4d:ee:de:b2:45:95:ce:97:24:b3:99:
                    28:05:ab:af:25:70:9a:82:51:12:8a:52:6c:e0:ad:
                    09:c2:7b:6e:dc:9d:78:ab:49:12:8d:57:e8:50:3e:
                    26:8c:f6:2f:18:f3:62:fc:d0:04:f9:29:85:4e:84:
                    74:97:2a:81:43:c5:1a:f1:de:a4:9b:88:26:3f:07:
                    3b:5b:6c:71:03:0f:6f:0f:a9:ea:6a:e5:bf:02:08:
                    b4:dc:45:fc:d7:a3:27:ac:e3:76:91:d0:b1:e9:38:
                    34:19:a7:a9:55:fa:61:c6:08:bb:66:c4:e3:bd:e3:
                    66:8d:c2:05:b6:5b:43:cc:3d:07:35:fa:1c:0f:0a:
                    b2:cc:a9:af:e6:0c:b2:56:7c:59:de:92:b5:7f:d9:
                    84:bb:0c:a1:71:35:77:f0:f0:92:40:13:a2:19:2f:
                    17:8e:4e:b4:ba:8b:29:b0:8f:90:30:35:2b:31:05:
                    b1:09:41:85:73:49:60:10:ef:d7:25:b1:85:5b:a7:
                    9c:16:73:c7:ee:f2:40:bf:e7:ec:86:e7:9e:08:bc:
                    9f:17:cf:41:73:19:f1:01:9a:bb:7c:97:9c:9d:a1:
                    3b:2b:ac:83:8a:d4:0a:3c:d5:d5:af:9b:b9:26:18:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CE:40:30:4E:BE:6D:B9:A7:43:58:E9:DD:F6:D1:DA:EA:DD:F7:87
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130383a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:108::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:ce:0a:8f:93:9f:a1:90:df:e9:78:78:4d:d7:d5:de:67:75:
         bf:2c:24:d4:cd:4f:89:3e:51:1f:54:76:0f:0b:98:e4:c0:ec:
         37:1e:f9:68:21:2d:fc:d3:9c:44:a9:d8:f9:28:1a:18:39:b2:
         ba:62:00:3f:c9:6f:33:73:e2:e0:6d:18:66:64:5a:44:18:68:
         ff:37:d1:89:fc:53:23:b8:e2:8f:ff:8b:3e:07:85:d5:e9:45:
         56:86:3a:20:5e:f2:8e:8f:5f:80:48:0a:85:83:ea:03:ad:3b:
         37:79:dc:88:94:b3:cc:8b:91:40:dd:c9:71:ce:f2:8f:d2:2a:
         76:86:2f:91:15:7f:e2:0d:65:a4:27:c6:dd:f3:cf:9c:c5:47:
         01:8e:26:ac:ef:95:0a:30:1e:ba:c2:a2:fb:5b:eb:9b:95:82:
         f3:67:ef:36:41:9f:72:4d:35:f3:fa:7e:ca:89:ce:45:d0:9b:
         2e:52:f9:c0:a7:63:08:b3:4b:69:b8:db:78:01:a5:f0:1e:a0:
         c4:da:f8:50:8e:6e:aa:e1:80:cd:6c:73:c9:a6:33:d5:f5:e8:
         f2:ad:30:be:4b:85:3c:21:05:d1:b1:d1:d7:25:ad:b1:de:44:
         d9:57:91:2d:d0:75:44:be:d0:f0:87:dc:ca:4a:14:a9:e7:b4:
         2f:27:f1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org