Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34623a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a34623a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          K9eIo12y9mMo2Cj8flcO2V1DQK2F5zF4uH4lU9wi3qc=
Subject key identifier:   02:4D:D6:E1:EF:6D:E1:F8:9F:93:AE:0B:54:75:B0:4C:09:95:87:34
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       459E16220E27469CF2C9123AC79B22E467AB17AF
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34623a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:41 +0000
ROA not before:           Tue 05 Mar 2024 18:10:41 +0000
ROA not after:            Tue 04 Mar 2025 18:15:41 +0000
asID:                     271891
IP address blocks:        2801:151:4b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 21:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9e:16:22:0e:27:46:9c:f2:c9:12:3a:c7:9b:22:e4:67:ab:17:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:41 2024 GMT
            Not After : Mar  4 18:15:41 2025 GMT
        Subject: CN=024DD6E1EF6DE1F89F93AE0B5475B04C09958734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4a:f8:f9:9a:a4:79:1b:4c:8e:c5:fa:1f:50:
                    dd:46:c6:40:f3:fe:00:ba:15:68:2f:61:eb:f3:51:
                    99:8c:c6:53:59:62:27:1a:c1:a4:2f:7e:30:d9:30:
                    8d:f5:53:65:7e:17:bd:de:6e:dd:22:42:57:c3:2f:
                    73:1e:93:2d:f4:44:b8:cf:6e:2c:87:60:fd:8c:ef:
                    38:36:4d:6a:0b:11:1e:92:89:4f:12:51:af:dd:35:
                    e4:44:f8:dd:5d:52:a4:89:91:3a:d9:b9:c9:91:89:
                    73:b2:c1:d8:85:5a:ae:d0:31:ab:79:a3:ab:26:c4:
                    aa:8b:69:97:bd:9a:98:c4:c6:5e:d1:3d:8c:18:89:
                    04:8a:c8:a8:b5:96:f8:6e:5b:4b:ec:a9:ec:bd:70:
                    d4:15:f1:e6:49:aa:6c:4f:bb:84:95:33:d3:51:24:
                    ed:a5:00:3e:de:28:c5:22:1c:ac:d5:87:d3:bd:71:
                    8f:e6:e0:86:30:64:b8:72:2c:b6:22:79:71:1b:e2:
                    e5:11:1b:f6:5d:be:91:57:82:79:dd:12:89:9c:82:
                    5a:fd:4e:43:69:23:fb:ab:87:ba:a2:2d:e1:16:a5:
                    30:76:67:a0:58:b0:0e:fc:3c:76:89:94:d0:67:95:
                    ec:67:d2:db:39:07:1b:1a:e9:0c:0e:7b:03:9f:a4:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4D:D6:E1:EF:6D:E1:F8:9F:93:AE:0B:54:75:B0:4C:09:95:87:34
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34623a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:4b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:b1:38:2a:13:63:6b:ad:e1:f7:b4:83:16:91:49:94:07:7d:
         88:d7:9e:7c:43:8d:01:96:6f:d3:7e:09:58:51:1f:13:77:09:
         e6:47:72:09:df:04:1a:e9:21:32:99:9e:26:ee:f4:af:e0:46:
         0c:15:e7:b7:9e:cc:92:f2:47:61:48:7f:6f:3d:60:21:ac:47:
         0c:aa:b7:19:b0:19:2b:fa:48:00:47:e5:0a:da:cb:ba:ed:ef:
         20:db:28:3e:83:53:ef:65:61:50:fb:57:a1:a0:54:b0:e5:61:
         fe:75:1e:9f:3e:24:56:04:e8:57:1e:7d:c8:1b:79:cd:7a:f5:
         b9:14:98:a9:f6:93:c6:32:e2:bd:86:a6:ed:b7:3e:90:24:b8:
         1d:8d:e2:ff:53:44:8d:23:63:68:6f:c6:92:aa:2a:fd:13:a8:
         96:a4:68:cd:28:fc:bd:27:af:e9:a1:5a:54:ad:1f:a2:6b:c1:
         5b:ae:54:43:d6:a6:61:05:76:1d:3e:7c:2e:1b:db:22:a0:5f:
         0e:df:24:8b:5d:10:80:b4:5b:b8:73:32:e6:a0:43:55:f2:2d:
         e7:47:87:f2:89:f7:ca:89:f0:24:4c:b7:d5:23:6b:50:30:7d:
         78:1d:bd:0a:61:4f:44:47:31:93:42:e1:f8:49:38:cf:ef:a8:
         73:f6:54:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:35 2024 by rpki-client on console-fra.rpki-client.org