Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130623a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a3130623a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          sRDVjIEb825a3pIIjl1fOpY4dC3wKpe2qNCE4UTuY/s=
Subject key identifier:   11:13:6D:7C:AF:14:D0:DF:61:C0:46:9D:59:5A:1E:A1:14:03:35:53
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       524180D45966DAB654767569953A03F931DFA6AA
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130623a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:35 +0000
ROA not before:           Tue 05 Mar 2024 18:10:35 +0000
ROA not after:            Tue 04 Mar 2025 18:15:35 +0000
asID:                     271891
IP address blocks:        2801:151:10b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:41:80:d4:59:66:da:b6:54:76:75:69:95:3a:03:f9:31:df:a6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:35 2024 GMT
            Not After : Mar  4 18:15:35 2025 GMT
        Subject: CN=11136D7CAF14D0DF61C0469D595A1EA114033553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:81:99:f2:f5:6a:1c:b6:f7:66:3a:f1:01:
                    9c:1b:c6:20:ae:c2:05:b6:4b:19:5c:26:e9:b8:75:
                    aa:fe:9d:51:c3:f1:d5:f8:75:32:39:ee:14:ba:f0:
                    c9:cf:ff:64:aa:56:75:74:06:85:84:68:5f:eb:a6:
                    1b:08:0c:40:ab:15:11:31:80:e5:af:3f:c8:44:d9:
                    95:9f:18:ba:f4:b1:0d:d4:a5:b1:7f:bd:52:50:45:
                    4b:81:d9:8c:74:29:75:a6:1f:ea:d5:5c:ff:02:59:
                    0e:f0:6a:3e:81:40:72:a2:b9:ff:7e:e7:00:99:eb:
                    87:35:ee:42:f4:37:6e:ca:5c:63:74:8e:37:54:c4:
                    a7:36:17:04:eb:76:3b:25:d1:d1:c1:f8:e2:cb:48:
                    ce:0e:f2:8d:30:17:9f:ab:b8:d8:0d:23:a2:a6:36:
                    e9:63:43:95:14:c1:68:8c:cb:95:c7:27:0e:0a:c3:
                    f3:96:bd:1e:c9:45:17:2b:16:70:6e:e2:0b:83:f8:
                    70:59:04:50:48:f3:43:5e:70:05:17:dd:60:b9:e4:
                    8a:38:6d:0d:30:75:00:d5:f0:20:5f:58:56:2a:eb:
                    96:ff:26:26:48:40:ed:fc:9a:ed:93:89:d2:24:07:
                    0a:29:bf:d3:41:93:d7:f0:75:ac:2c:07:f5:c7:3a:
                    e5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:13:6D:7C:AF:14:D0:DF:61:C0:46:9D:59:5A:1E:A1:14:03:35:53
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130623a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:10b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:6c:9f:cd:50:50:b2:57:aa:98:4a:c4:fb:3d:3f:6d:55:bf:
         18:62:8d:44:55:4b:f4:3b:bd:17:fe:7f:61:7d:bb:3d:22:e7:
         9d:5d:03:3a:18:d5:5a:98:42:67:7c:2f:ed:f3:0f:e1:7f:f1:
         d7:9c:06:bb:4e:a2:70:d9:d8:c8:15:4c:62:82:79:25:0f:67:
         27:98:23:53:4f:b7:c0:ad:74:9d:04:a8:67:77:da:3f:d4:2f:
         68:4f:b9:bd:ae:7c:6d:10:36:3e:2c:7a:7a:04:5a:38:e1:3a:
         94:75:6f:bc:c2:1d:10:32:33:cc:d7:7b:4b:3b:31:4b:e6:a9:
         2f:93:25:24:ed:c7:b9:8d:71:51:b8:76:b3:24:a6:28:f6:c6:
         f5:38:ce:10:a1:74:0c:12:72:f8:c2:53:81:ca:76:c1:63:8a:
         2a:a9:fb:d1:51:89:1c:4e:82:9e:c0:59:f7:4d:3e:41:f2:44:
         bd:b6:03:1c:d3:f3:66:0b:a5:11:51:49:00:2b:72:81:0e:9a:
         4a:0d:fc:99:ef:6a:0c:ad:f2:bb:d2:e2:1a:18:68:ae:94:c1:
         c0:ab:fe:ea:89:27:e7:66:b1:14:5c:f4:6f:70:7d:ba:64:26:
         d0:91:1a:f2:17:5a:38:71:c5:91:2d:fa:6a:2e:19:5a:5e:7b:
         4f:5d:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:32:00 2024 by rpki-client on console-ams.rpki-client.org