Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34383a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a34383a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          9jCVXqFWhO/c1EzVqTwgxPrOOajVX193a0hUcpSXOeg=
Subject key identifier:   73:CC:52:D3:E6:2B:47:23:89:51:E5:17:AA:30:7D:77:6E:5A:23:28
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       2EDEAC6CFAD6E8EE28FDFCF7ED3C3D51D0FBAF82
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34383a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:07 +0000
ROA not before:           Tue 04 Feb 2025 18:40:07 +0000
ROA not after:            Tue 03 Feb 2026 18:45:07 +0000
asID:                     271891
IP address blocks:        2801:151:48::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:de:ac:6c:fa:d6:e8:ee:28:fd:fc:f7:ed:3c:3d:51:d0:fb:af:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:07 2025 GMT
            Not After : Feb  3 18:45:07 2026 GMT
        Subject: CN=73CC52D3E62B47238951E517AA307D776E5A2328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:4a:5f:28:f0:61:12:31:42:7a:66:f9:cf:
                    b4:21:5e:98:b3:7e:f8:c9:d0:2c:de:90:da:37:08:
                    12:fd:3f:d0:e0:2f:d5:a8:f9:16:d4:4c:db:ed:42:
                    0e:ae:64:6e:61:ee:0a:cf:f3:53:45:65:93:38:4d:
                    37:3a:75:62:fe:5e:e8:1b:8b:3e:df:a7:81:60:d5:
                    86:c8:d5:b8:5b:57:2b:ad:10:53:8a:60:23:06:07:
                    67:b0:ca:95:35:4d:9e:ff:c5:e8:b3:d3:5b:3b:83:
                    ad:e1:06:3d:ea:a7:20:44:69:6c:f3:b5:f7:63:4a:
                    0b:98:a2:d6:f8:a5:ad:78:ad:50:39:e5:f0:e6:58:
                    2b:74:49:12:af:18:c5:4c:f3:d2:39:bf:b7:06:78:
                    3c:79:d4:25:d9:38:7c:83:31:0b:98:9a:54:f8:33:
                    64:41:28:0e:dd:19:1b:d2:0f:5a:4a:de:93:af:4f:
                    98:7f:b9:25:76:35:1f:d9:1f:a2:f7:75:fa:3c:fa:
                    a7:1f:b9:4a:1c:9f:9b:81:a2:c6:77:aa:2b:31:25:
                    4f:74:c1:7c:b1:32:71:39:f2:bb:9e:e8:1a:31:1b:
                    05:04:4b:2b:80:4d:7f:d9:0f:e6:8b:13:2e:8b:21:
                    e9:d8:c0:4e:67:b3:66:76:17:85:28:68:cc:3e:df:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CC:52:D3:E6:2B:47:23:89:51:E5:17:AA:30:7D:77:6E:5A:23:28
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34383a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:48::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:3a:ce:7d:70:ee:81:85:9a:42:fd:fb:3b:86:36:05:c5:65:
         c2:e0:17:73:70:32:1a:df:ef:21:02:23:03:fa:c6:a7:22:3e:
         95:49:f3:85:79:7d:1f:7e:72:dc:89:42:38:76:a0:fd:3b:c7:
         6d:f3:e8:fd:5a:4d:b8:d5:2b:d6:c3:c7:43:30:1a:72:e9:b7:
         81:0c:fb:f1:a6:b8:26:3d:c5:cd:e2:3f:25:c8:a4:4d:26:e4:
         fa:1a:fc:a6:0b:1f:2b:c8:40:ce:93:01:ff:d2:a1:94:30:00:
         16:ef:aa:69:ab:e7:19:c5:a7:21:c6:d8:38:30:d3:bc:f0:99:
         9a:e2:98:85:64:12:fe:0a:81:7d:a5:69:62:83:8b:d4:d9:57:
         91:10:71:79:a6:a2:3a:2d:9c:db:ad:c7:39:3f:d5:72:d8:77:
         c3:5a:6e:e7:7e:a1:8f:f1:30:e2:11:09:71:5d:35:d8:2f:e3:
         31:8e:c9:4a:58:0e:3b:eb:fc:cb:a1:dd:ef:98:50:d9:7d:86:
         1a:3b:46:a6:cd:48:03:21:de:27:24:99:29:f3:15:1f:94:89:
         08:70:eb:a4:1b:d5:8f:3f:9e:18:a7:0a:90:a4:a3:6e:ad:fd:
         62:49:9f:50:e1:f9:05:37:01:97:79:78:bc:b0:f5:b4:1b:00:
         5d:03:60:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:03:52 2025 by rpki-client