Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34383a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a34383a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          k/2xmFMmHERwKYnlEnQkYKlkbnmK1BQRZlq3MRvO6Kg=
Subject key identifier:   ED:A0:92:11:54:AE:26:26:93:5E:66:78:77:31:1D:ED:A1:C6:3B:A0
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       35CD3491923BFE398B6BB2274149634345489602
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34383a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:41 +0000
ROA not before:           Tue 05 Mar 2024 18:10:41 +0000
ROA not after:            Tue 04 Mar 2025 18:15:41 +0000
asID:                     271891
IP address blocks:        2801:151:48::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cd:34:91:92:3b:fe:39:8b:6b:b2:27:41:49:63:43:45:48:96:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:41 2024 GMT
            Not After : Mar  4 18:15:41 2025 GMT
        Subject: CN=EDA0921154AE2626935E667877311DEDA1C63BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:eb:7f:82:66:c2:c3:88:74:a4:39:17:dd:
                    9c:54:73:87:f4:ad:cf:92:8d:c1:b2:53:b2:b6:d6:
                    7f:97:88:b9:a7:b6:c0:06:4f:28:e7:0b:28:3e:43:
                    f5:3d:62:a5:f4:fb:95:5e:0b:b9:0b:16:c4:9b:55:
                    67:37:b9:88:37:c2:68:02:66:fb:2a:ec:e6:fe:7c:
                    ac:7d:b7:5d:76:e0:5d:46:b4:67:00:ae:fc:27:a7:
                    fb:8b:c2:c4:39:58:e0:7e:5c:2b:0f:29:10:be:62:
                    6a:37:15:b1:1e:7e:64:48:cb:8d:1c:e2:d7:32:7e:
                    a6:33:66:b0:07:c5:19:d9:85:25:63:d2:8f:d1:c9:
                    7a:f8:e0:42:64:ad:c2:23:44:a6:e5:52:8b:e0:48:
                    70:cc:be:9e:ef:f8:6b:17:be:55:02:40:2c:d8:7d:
                    0f:63:54:89:de:c9:1c:de:b2:69:b7:c9:38:6f:09:
                    08:d2:d2:71:ac:d5:78:27:7d:10:39:86:ea:1a:d7:
                    c1:ff:ef:3d:0d:0a:50:dc:bb:b8:ec:98:18:17:99:
                    37:ce:e4:9d:3f:88:6c:37:0e:ec:8d:22:7e:21:eb:
                    1c:a8:93:46:99:f7:e8:de:6c:62:40:a6:02:62:a9:
                    e4:fd:23:ef:0a:b9:9b:9a:4e:92:1a:d9:b0:fb:35:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A0:92:11:54:AE:26:26:93:5E:66:78:77:31:1D:ED:A1:C6:3B:A0
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34383a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:48::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:20:4b:8c:9b:7c:86:c3:73:61:cf:a3:c3:f3:41:de:ef:a0:
         6a:ea:51:39:a1:a8:7f:14:44:c7:21:e9:c0:04:21:17:38:b7:
         3e:d3:8d:8b:38:79:a7:66:25:ae:09:68:db:a4:94:30:85:23:
         72:2a:88:3c:6e:3e:57:ef:d2:fd:78:4e:d8:2e:e4:e5:b2:0e:
         67:3b:53:90:6d:4d:68:4d:f8:31:c8:1f:e2:8a:6b:2e:4b:f3:
         ee:17:f8:ca:6b:7b:f2:72:1b:51:15:53:94:cb:a2:d5:6b:47:
         55:15:50:f2:8e:61:dc:c7:56:e3:ab:9a:8b:0b:43:1d:5f:10:
         5c:b6:37:67:3c:d3:c6:e9:b4:0d:25:28:d0:b6:d0:a6:7d:96:
         07:e3:62:b4:5d:8b:f5:33:7c:7a:ee:88:fa:64:07:4b:b5:d3:
         6b:4d:1a:32:58:cc:07:9b:2e:f0:04:4e:ab:62:67:57:14:7b:
         e0:ec:e3:ee:f3:a3:e9:73:70:1f:3a:67:36:15:a8:89:6d:31:
         10:d8:14:98:d8:db:24:22:8a:5a:80:ee:f4:5f:ec:a0:c3:98:
         c7:e1:fd:83:ed:ee:f9:7d:32:34:f9:ec:b2:dd:aa:24:eb:dd:
         01:0c:28:93:25:e7:bf:74:16:32:9f:4a:a1:ab:e5:cf:c0:93:
         20:55:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org