Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34653a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a34653a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          bk79roTIlH9xET1/Fb9Vzky88IsRekVRwuxsDi8qaz0=
Subject key identifier:   B9:64:75:35:9E:19:38:AF:36:48:3D:B6:D1:A7:ED:26:92:87:3F:19
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       3ACCD7D6014F810DB6A6388432EABF6C9E92492E
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34653a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:40 +0000
ROA not before:           Tue 05 Mar 2024 18:10:40 +0000
ROA not after:            Tue 04 Mar 2025 18:15:40 +0000
asID:                     271891
IP address blocks:        2801:151:4e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:cc:d7:d6:01:4f:81:0d:b6:a6:38:84:32:ea:bf:6c:9e:92:49:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:40 2024 GMT
            Not After : Mar  4 18:15:40 2025 GMT
        Subject: CN=B96475359E1938AF36483DB6D1A7ED2692873F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:cb:c3:19:f9:dc:95:ea:7c:54:17:e5:7b:
                    4d:30:03:8a:b2:39:67:4e:c3:52:01:4b:7a:96:9b:
                    cc:d5:5c:18:dd:de:f0:47:86:a3:05:9d:15:17:72:
                    54:1e:14:2f:65:ab:35:c7:d4:7f:c1:ab:21:fb:2c:
                    09:2e:dd:f9:f1:45:35:b0:b0:c0:21:88:fd:5e:bb:
                    f8:2c:f3:f7:ac:49:62:4c:4b:fd:48:46:36:c5:8e:
                    e1:51:eb:98:a9:14:20:0b:8c:a5:ff:68:23:b8:45:
                    4b:0c:32:13:be:9c:f9:7d:31:64:d9:c7:19:76:21:
                    0c:bb:89:81:4c:21:f6:0e:db:5f:d9:3a:7d:73:91:
                    4a:5f:44:7e:d1:a2:a6:0b:d4:a5:5d:91:98:7d:50:
                    ad:34:ba:6e:18:ff:01:d5:f8:6d:b6:8b:9b:7d:ce:
                    16:5d:4f:b2:0b:10:9e:c4:4f:ae:94:5f:7c:4b:9c:
                    6b:95:50:62:96:40:31:3f:ce:9f:40:3c:d1:10:6d:
                    41:8d:e7:b6:f7:d4:f9:49:95:e7:00:a9:98:7a:86:
                    a5:e7:c2:d0:ea:d1:b1:ac:72:d1:b2:d9:2c:9c:b5:
                    91:33:c9:85:f6:d1:e7:34:7e:a7:9b:25:83:26:00:
                    b4:83:ab:23:45:50:2e:10:62:10:b8:cd:52:b6:4f:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:64:75:35:9E:19:38:AF:36:48:3D:B6:D1:A7:ED:26:92:87:3F:19
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34653a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:4e::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:5a:b7:42:02:b7:7f:ed:d3:40:37:7b:69:dd:e3:43:6d:6f:
         03:8c:59:fb:c1:f9:46:9d:f1:30:19:4b:f3:23:10:13:ca:d9:
         4a:9d:cc:f9:b9:37:97:79:19:37:b2:d1:6c:f3:ed:10:34:a8:
         88:86:0d:5e:82:c4:57:97:e9:49:4d:20:9c:40:62:ef:fc:2a:
         c9:aa:20:4d:77:bb:50:61:80:66:92:5a:c4:b1:aa:70:8b:0c:
         19:7f:41:c7:37:b3:8a:be:98:ba:39:a1:ac:5a:d2:42:38:47:
         ad:34:6e:4f:90:83:59:d2:93:03:96:da:fc:71:94:9d:da:54:
         39:de:fe:94:77:cd:f0:60:fe:7c:05:41:72:15:fd:00:ce:f7:
         e5:7e:12:5f:a6:a7:8b:8d:2b:cc:fa:d5:e9:c0:9f:32:23:da:
         e1:4c:7a:08:43:00:dd:ad:36:d4:c9:db:d4:6c:2f:37:bc:89:
         22:57:c0:e1:cb:fa:35:bc:1c:71:5e:83:9b:81:d9:59:52:f4:
         45:b6:19:58:7c:14:43:b4:d1:2e:d1:aa:c9:e4:4d:57:ec:ba:
         47:3a:2b:7d:63:3a:9c:96:22:d1:d4:6c:58:04:62:3c:7f:22:
         ba:1a:49:bf:d3:ec:28:8f:d7:27:25:20:f4:d8:30:be:35:34:
         d4:a6:e2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org