Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33663a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a33663a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          yOF6Aun5a4tfGquxFmRCa4BYesLAvH13qHF8A1eos0o=
Subject key identifier:   2A:6B:A8:28:4C:3D:79:6B:E2:DF:25:DF:C1:39:BE:4F:80:72:A6:FA
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       AD00BAB884A0A1C73574C972E255CB1C2CDCB3
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33663a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:19 +0000
ROA not before:           Tue 04 Feb 2025 18:40:19 +0000
ROA not after:            Tue 03 Feb 2026 18:45:19 +0000
asID:                     271891
IP address blocks:        2801:151:3f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ad:00:ba:b8:84:a0:a1:c7:35:74:c9:72:e2:55:cb:1c:2c:dc:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:19 2025 GMT
            Not After : Feb  3 18:45:19 2026 GMT
        Subject: CN=2A6BA8284C3D796BE2DF25DFC139BE4F8072A6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ad:0a:af:94:ef:a5:6a:fd:33:cf:47:a9:f6:
                    78:aa:9f:0e:f6:c6:3a:55:2b:b1:ee:24:10:0b:f9:
                    c6:be:d1:6a:02:75:ab:d9:01:fa:d4:74:af:12:8f:
                    f0:1c:64:55:e6:e6:69:82:6a:c1:b8:c0:51:f1:61:
                    d1:f7:28:ae:e0:9c:0c:24:02:92:6f:86:50:92:06:
                    e2:a0:64:39:11:2f:a1:1e:e5:3a:01:bb:c4:90:2d:
                    1d:7c:9c:e5:b2:73:41:93:5a:ae:be:01:da:77:4c:
                    7a:73:cc:39:c0:9a:a6:60:ad:c8:cd:39:68:f8:45:
                    6e:db:df:ef:d4:b6:96:68:f7:e1:7a:5b:5c:16:15:
                    0d:33:f5:03:64:0c:38:fc:6a:2f:73:fc:c3:8d:f4:
                    a9:ff:e8:ed:69:01:2f:61:1a:9d:43:5c:67:5a:de:
                    f0:7f:5f:b2:01:2a:a3:39:68:65:66:cd:db:be:01:
                    fd:45:23:2d:b8:63:fa:45:fe:7c:67:8d:17:7b:6f:
                    9b:41:a4:a2:5c:72:bd:db:bb:da:fd:a4:18:02:d6:
                    c8:22:f4:f4:d5:fd:92:42:0f:32:21:b9:34:6d:c7:
                    50:e3:0f:d5:9d:06:34:c0:d8:3c:4d:a6:04:56:d6:
                    30:32:1a:d0:17:4f:07:44:d8:53:5c:9b:2b:22:a7:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6B:A8:28:4C:3D:79:6B:E2:DF:25:DF:C1:39:BE:4F:80:72:A6:FA
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33663a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:3f::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:07:a1:f9:0d:74:2a:22:27:25:83:66:b4:aa:0b:36:42:00:
         7d:fc:9e:65:6f:be:80:90:65:45:0c:c0:14:bb:11:d6:fe:06:
         ba:cb:ef:86:5a:bb:42:04:f4:75:87:d7:a4:63:03:10:03:e3:
         5e:55:2f:c2:e8:4a:00:23:e5:4a:6b:53:0c:90:50:61:1f:c6:
         62:8f:13:64:6a:46:ee:e8:65:d2:0b:aa:3c:8c:f3:21:28:23:
         01:4f:c9:be:2d:8d:ec:7c:de:63:63:b8:51:e7:32:f5:1a:d8:
         03:dc:69:7b:af:c7:69:cc:af:82:fa:a3:35:22:58:b4:df:5a:
         da:7d:a9:6c:e6:80:4d:95:30:6e:9e:cb:dc:ed:9e:ad:71:cb:
         10:46:f2:84:6e:00:a6:62:88:e1:9d:ea:10:2b:93:09:d9:43:
         2c:ba:25:93:37:3e:42:91:e3:06:5d:e7:9e:76:27:32:22:ff:
         f3:8f:2a:40:be:36:af:3a:06:a3:46:76:82:27:5b:ad:21:1e:
         2e:92:8e:28:92:4d:05:70:bf:b7:be:48:6a:a5:72:b1:fb:d3:
         c8:17:7c:45:59:95:ae:a1:c8:aa:b5:b1:61:55:82:14:fd:01:
         0e:35:38:b8:fc:40:ad:a4:44:03:8e:39:b4:28:25:f3:ed:4f:
         3c:d6:38:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:41:19 2025 by rpki-client