Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130393a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a3130393a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          Y5BhbX8KgYTgTrf5BqRR7e2tIYU1hejAXXw5mCIGnwg=
Subject key identifier:   2D:38:E0:22:86:5E:05:5C:C6:73:7C:5C:3C:60:68:B5:10:3C:D1:A5
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       4573094A8A5C3F8E0C2AD26B2E683D2EA87A4D9A
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130393a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:46 +0000
ROA not before:           Tue 05 Mar 2024 18:10:46 +0000
ROA not after:            Tue 04 Mar 2025 18:15:46 +0000
asID:                     271891
IP address blocks:        2801:151:109::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:73:09:4a:8a:5c:3f:8e:0c:2a:d2:6b:2e:68:3d:2e:a8:7a:4d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:46 2024 GMT
            Not After : Mar  4 18:15:46 2025 GMT
        Subject: CN=2D38E022865E055CC6737C5C3C6068B5103CD1A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ce:b0:4d:81:ab:17:ae:61:0f:12:eb:09:ca:
                    4b:b8:87:59:20:95:6b:ff:6b:13:70:0d:2d:b5:92:
                    d3:6b:40:6a:15:ca:bc:ef:39:6a:50:41:04:51:69:
                    8d:de:0a:ab:20:73:8c:08:d8:1b:80:44:fa:18:24:
                    af:45:41:5e:9e:b7:e8:80:c0:80:2a:61:b3:16:a5:
                    05:2f:13:91:27:de:d1:02:a6:9d:89:f4:c7:d6:85:
                    4d:5e:48:59:e4:ff:ea:79:58:ad:8d:90:97:1b:fe:
                    ed:58:fd:f7:af:d3:53:9b:14:33:e3:c6:65:a2:7b:
                    7c:2a:e1:20:dc:d6:42:f4:e0:91:57:1a:82:3d:38:
                    eb:3c:95:26:47:6d:4e:47:0a:1b:07:e0:51:dc:d4:
                    18:e9:8f:75:78:9f:49:de:fc:8c:e4:59:23:44:03:
                    d3:b8:b4:5e:a8:f0:e8:38:72:1f:f8:2e:ca:57:1a:
                    fb:ad:22:29:23:2e:f0:41:7d:29:48:e2:52:b3:61:
                    e0:43:3a:ee:c5:74:93:72:70:51:ee:a3:10:fd:6d:
                    2b:1c:42:eb:05:83:82:0d:0d:e6:49:9e:00:5d:0c:
                    1f:10:49:c6:58:3c:a5:95:e9:9f:da:c1:2a:df:a5:
                    a0:e8:87:ae:cf:37:f3:64:9c:58:89:84:f5:0d:c4:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:38:E0:22:86:5E:05:5C:C6:73:7C:5C:3C:60:68:B5:10:3C:D1:A5
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130393a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:109::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:20:54:c4:23:de:7c:66:49:1b:b0:ac:d6:7f:3c:98:61:93:
         bc:b7:4a:88:d5:ce:22:84:44:24:87:7a:c6:00:24:0a:da:94:
         08:2a:c6:2e:ef:cc:0a:dc:09:03:09:5c:c6:47:2b:2e:f3:44:
         01:7d:92:aa:05:66:08:0e:54:f8:f1:f0:82:7d:e4:19:2c:f6:
         72:14:94:39:ca:7b:98:40:81:b6:55:e3:c1:0b:37:9f:d1:d7:
         f2:16:fb:10:20:0e:ac:1d:4e:a4:15:84:12:82:cd:3d:cd:16:
         2a:75:58:ed:a7:ad:d2:8e:0d:30:e3:c0:b9:f3:5d:33:1c:d9:
         c8:eb:88:e4:f0:f0:61:21:1f:a4:08:64:4a:4c:9b:c1:7d:bd:
         af:8b:49:63:da:43:a4:c5:a4:91:6c:16:be:ff:41:0b:80:6a:
         a2:8f:3c:6b:23:e5:1b:9c:7e:f0:2c:f3:5f:9d:88:3b:b3:3a:
         21:27:24:f5:0a:92:16:b0:8d:a7:e1:4d:c0:4d:b9:20:5d:22:
         a8:21:9d:3e:55:57:a2:3d:44:6e:57:d2:29:0e:77:ca:50:d8:
         aa:71:e9:22:9f:a2:24:fe:45:d4:4e:a2:2a:b9:8c:20:18:7f:
         0a:ea:f9:7d:c7:8c:49:14:65:89:fb:81:65:93:2a:fc:6f:43:
         b1:3a:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org