Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33353a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a33353a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          Xczqg/7pV7t4ZhB9ftNk63R90CzKSB/5Pj48927m+L0=
Subject key identifier:   2C:86:CE:FE:8C:ED:F4:2C:C3:D5:7E:47:EF:CE:6C:9B:61:B1:CB:77
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       13D00D6768FDEAA7E842B2C604CC712D0A9BA2E0
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33353a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:05 +0000
ROA not before:           Tue 04 Feb 2025 18:40:05 +0000
ROA not after:            Tue 03 Feb 2026 18:45:05 +0000
asID:                     271891
IP address blocks:        2801:151:35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d0:0d:67:68:fd:ea:a7:e8:42:b2:c6:04:cc:71:2d:0a:9b:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:05 2025 GMT
            Not After : Feb  3 18:45:05 2026 GMT
        Subject: CN=2C86CEFE8CEDF42CC3D57E47EFCE6C9B61B1CB77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:66:52:57:7f:a9:a7:1c:ab:a3:50:eb:b1:
                    68:97:d5:61:ee:2b:d6:63:55:03:2d:99:79:c5:eb:
                    23:94:b8:ee:cf:fa:32:85:1d:40:01:9d:90:70:e3:
                    4c:07:6d:09:d1:0a:df:4a:61:9c:79:97:92:3c:07:
                    f2:ee:59:a0:51:40:98:0f:e5:79:ac:96:c1:bc:b9:
                    3a:59:f7:5b:fb:1c:cd:66:ce:e3:6c:37:cc:ba:a9:
                    49:b5:79:14:2d:77:e8:ed:05:af:de:46:f9:73:bb:
                    4c:36:e5:c3:e2:ac:60:7b:d4:41:4e:06:d8:54:ac:
                    9a:35:b7:be:18:a7:d4:ba:99:50:05:f2:4e:d1:fb:
                    92:5c:4c:33:fc:3f:b7:70:f7:56:28:26:7a:42:fa:
                    31:c1:19:d6:28:f9:17:a1:eb:1e:86:36:0f:d2:aa:
                    02:d8:75:47:1f:8d:24:b6:5d:3e:c3:85:91:72:4c:
                    ed:66:d2:0f:91:ad:c6:ca:6e:21:50:95:62:3e:36:
                    8f:f4:3a:80:56:31:7c:5f:47:b8:0e:15:cd:7d:06:
                    9d:38:72:c9:d7:a5:47:42:57:8d:ce:34:12:48:d7:
                    4a:05:ff:ee:64:5c:d7:15:8d:3c:2b:a9:53:0a:6a:
                    c2:10:bc:07:1b:42:bd:96:3b:17:4d:76:c6:61:84:
                    7f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:86:CE:FE:8C:ED:F4:2C:C3:D5:7E:47:EF:CE:6C:9B:61:B1:CB:77
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33353a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:35::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:97:31:42:ce:f8:ae:e3:ae:c7:0e:58:e1:52:1c:6b:ad:
         d8:02:61:8c:9e:40:8f:bd:09:95:36:0c:c2:df:b1:ed:10:4a:
         56:1e:59:e6:f8:01:3f:f8:fb:1d:d6:d7:6f:39:91:07:9e:d9:
         f6:1c:c3:e3:58:1a:2a:ed:60:7c:e6:b5:87:9d:3b:c9:70:29:
         8f:33:ce:04:ac:99:08:c9:5c:23:6e:2e:2e:3c:3b:80:20:9c:
         8c:14:0a:34:3a:98:01:bf:d7:a2:54:a1:21:68:96:ef:ec:7c:
         e9:e6:ad:34:9a:30:bc:b1:bb:f9:58:49:d1:4f:3e:ca:77:49:
         8b:bc:8c:83:31:fa:9f:ad:eb:33:e1:95:b8:d8:8b:5d:ce:b0:
         a9:d9:38:5f:b3:51:e4:ef:42:50:6d:cb:19:e8:a0:e5:34:0c:
         b2:22:a8:43:53:fa:44:32:8d:fc:14:9c:a4:de:01:be:83:f3:
         ca:2c:23:18:cf:95:d7:a4:f6:22:02:ce:96:ed:39:a4:ba:92:
         a9:d7:d8:0a:37:80:9c:f4:cd:ae:5f:97:fa:94:6e:3d:0d:0d:
         a1:9d:27:fb:11:c6:66:86:a4:f3:5c:d8:e2:8b:19:2b:d7:b3:
         fa:0d:1d:62:77:f1:97:b1:df:85:bd:c1:df:c7:f7:e0:04:aa:
         39:d3:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:27:00 2025 by rpki-client