Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33373a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a33373a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          9FaCMoz8MW0NgIOZrLXKt4rww8tu6OlHu9QNgqQcJYU=
Subject key identifier:   98:33:77:A6:79:B7:F2:13:8F:F6:AD:58:E3:A4:C9:BF:BE:A0:73:0C
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       683C958B28E2242BA5DF7209E448A935A7F224DB
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33373a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:41 +0000
ROA not before:           Tue 05 Mar 2024 18:10:41 +0000
ROA not after:            Tue 04 Mar 2025 18:15:41 +0000
asID:                     271891
IP address blocks:        2801:151:37::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3c:95:8b:28:e2:24:2b:a5:df:72:09:e4:48:a9:35:a7:f2:24:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:41 2024 GMT
            Not After : Mar  4 18:15:41 2025 GMT
        Subject: CN=983377A679B7F2138FF6AD58E3A4C9BFBEA0730C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:5e:0e:e4:17:73:de:88:c8:1e:9e:c8:5e:
                    bf:7a:4a:72:8e:b5:e3:51:93:0c:db:f5:68:aa:f9:
                    f6:6f:33:a4:a2:08:65:64:c3:dc:ac:9c:6a:a3:0c:
                    32:5c:09:39:e4:fa:7f:9d:cc:f7:4b:ee:67:1a:43:
                    ac:5d:d5:4e:07:c1:50:94:99:fd:0e:3c:89:0e:01:
                    f4:e5:d4:25:af:32:cf:2a:f6:6a:43:86:a6:ea:c4:
                    ba:be:a9:62:7c:b8:f2:20:7b:cd:c3:84:55:90:a2:
                    4c:0c:f1:ca:97:69:69:d1:1c:00:bd:b0:b6:0e:92:
                    a2:89:89:76:e5:dd:f9:51:ff:3b:30:74:79:53:5d:
                    dc:84:3e:8c:d7:f8:1a:57:75:4b:7f:67:9e:f8:0b:
                    d6:67:0e:df:1d:94:fc:67:25:46:89:63:ab:e2:98:
                    a7:c3:9c:b0:16:5a:ec:f2:15:7a:02:4c:85:5f:ea:
                    d8:87:b4:5b:4b:7c:11:d7:2d:73:ba:3d:73:10:70:
                    a5:e6:f2:37:e3:a1:6f:58:fd:70:69:95:82:05:b9:
                    55:84:c0:26:9e:5e:d0:e5:dd:fb:07:45:1a:bb:98:
                    5c:0a:72:80:60:f3:d3:15:11:74:84:93:9e:fd:0d:
                    07:2c:ee:11:18:93:1f:b9:5f:09:5c:0d:02:92:2c:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:33:77:A6:79:B7:F2:13:8F:F6:AD:58:E3:A4:C9:BF:BE:A0:73:0C
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33373a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:37::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:a9:91:24:e4:ee:9e:f2:48:1d:34:b0:ae:f4:ec:e5:a0:06:
         71:d6:16:b5:f9:af:37:ed:3d:8e:05:f6:62:07:75:19:33:d1:
         fb:82:64:fe:1d:22:42:55:30:fd:93:1c:b0:02:ee:0e:aa:f8:
         44:91:10:78:2e:32:d3:bf:d7:24:66:13:4e:ba:4d:ec:21:b7:
         20:c2:be:c4:e9:20:47:14:ab:c6:b7:49:5d:2b:e9:cb:5f:2c:
         e3:ae:c3:05:83:fa:4c:dd:51:c1:10:d8:e9:fb:41:2d:fe:0b:
         1f:5e:55:eb:51:42:20:49:19:49:0a:c2:b8:1e:83:12:fe:b5:
         b3:39:e6:fd:b0:34:f0:df:78:09:c2:3c:94:64:13:be:35:29:
         f2:3b:35:8a:3c:a0:2c:62:73:8a:6b:4b:d7:d5:d6:f1:b7:80:
         d4:6e:88:8f:32:0b:3e:36:21:54:61:95:0b:0a:4b:41:a1:94:
         97:c1:23:cc:8f:e5:7b:9e:f5:0b:39:c7:7e:86:5d:a9:0f:c5:
         23:f1:cf:19:e8:86:3d:38:e9:3e:35:93:73:0a:f4:48:a4:71:
         9a:e7:01:99:18:46:a0:b6:2c:50:56:e6:9f:29:7f:5e:bc:e8:
         8b:29:fb:d5:07:03:13:6b:c0:bb:cf:f0:a2:24:17:72:20:d3:
         e6:3e:cc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org