Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35313a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a35313a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          AwlBD+mCQdSE9DLHU2PIaQOgeUY4XamvIFSF5OBCLFM=
Subject key identifier:   86:59:7B:53:64:66:0E:1B:FE:A7:FD:06:0D:19:FC:87:00:14:D5:28
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       3A6617EF147610381E49DC50B7F3890F8E1A5CB3
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35313a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:50 +0000
ROA not before:           Tue 05 Mar 2024 18:10:50 +0000
ROA not after:            Tue 04 Mar 2025 18:15:50 +0000
asID:                     271891
IP address blocks:        2801:151:51::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:66:17:ef:14:76:10:38:1e:49:dc:50:b7:f3:89:0f:8e:1a:5c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:50 2024 GMT
            Not After : Mar  4 18:15:50 2025 GMT
        Subject: CN=86597B5364660E1BFEA7FD060D19FC870014D528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:aa:78:33:85:e7:a7:bd:63:fd:c4:af:2a:3e:
                    11:a5:8e:c8:7c:22:ed:38:81:02:c9:e4:b6:50:4b:
                    eb:a1:a6:13:8e:fb:d6:2a:d6:28:01:b4:b9:e1:ec:
                    c9:25:ca:ab:97:e1:4c:1a:6d:2f:e7:c9:56:16:03:
                    6d:0c:0d:55:67:da:2f:c1:ae:c3:e2:06:3b:88:c2:
                    32:3d:59:0b:d0:63:00:84:17:f4:fa:e8:13:6a:be:
                    f2:c8:87:47:f9:ca:4d:87:0b:94:a4:79:4a:cc:14:
                    e7:ad:81:a0:07:55:38:ae:38:84:73:c2:bc:61:34:
                    c4:24:41:96:66:df:94:a7:96:1e:c1:dc:91:e5:73:
                    39:84:92:88:65:66:10:cf:58:e6:ed:43:f3:c1:c3:
                    f5:d4:6f:3e:ad:36:d3:4b:f7:c7:36:c5:67:54:e4:
                    9f:bc:15:79:49:87:a3:c8:48:29:d5:29:31:97:29:
                    df:f8:50:8b:b2:2b:43:67:20:aa:f8:26:93:2b:cc:
                    f5:33:ee:6a:66:6f:b6:60:ff:30:69:ef:34:36:ff:
                    1f:8c:21:e4:9d:79:ae:8b:ef:8b:e9:07:3c:2c:5e:
                    c6:15:74:70:45:42:76:c7:71:00:5b:48:8b:73:d4:
                    9d:e7:96:4c:9a:a0:bc:78:7f:5c:af:fe:49:2e:1b:
                    34:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:59:7B:53:64:66:0E:1B:FE:A7:FD:06:0D:19:FC:87:00:14:D5:28
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35313a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:51::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:54:97:ae:1d:6e:a6:32:cc:35:db:31:0e:7f:82:61:2b:16:
         c5:2d:33:30:24:ab:f2:1e:42:52:94:61:91:a5:e4:1b:41:ce:
         4f:f5:7e:31:70:41:84:fb:39:9f:39:92:a7:7f:b5:95:a6:ea:
         f0:f0:68:a0:df:2e:ca:5f:fe:eb:c8:26:aa:65:ea:c6:27:5b:
         ae:04:55:c7:c4:1e:04:96:01:84:10:bb:04:7e:41:00:b2:c2:
         dd:3d:82:65:cd:ee:ab:bb:3b:87:14:b7:94:38:6e:49:71:0c:
         98:ba:c7:14:36:ec:f9:67:ad:b8:ea:95:3e:58:a5:63:2b:47:
         b4:e7:35:a4:f2:81:fc:15:ea:68:dc:5b:a9:9a:dc:9b:5c:14:
         06:10:03:fa:c0:05:50:1e:98:99:78:38:ac:44:e0:3b:a2:bb:
         c5:6f:b4:23:e9:40:ad:1f:2a:9e:d7:64:7c:ee:78:6c:7d:1f:
         0e:a0:60:8e:4d:7a:46:fa:c0:86:78:f1:66:c0:08:32:37:21:
         d8:53:d4:db:e5:2f:bb:bb:ad:7c:5d:49:42:77:74:a7:1f:b1:
         11:6d:ec:25:89:c1:6d:cb:7e:46:62:e2:14:0c:02:90:4a:ce:
         fb:da:74:c8:2a:08:7a:35:a3:a5:6a:3e:89:94:81:4c:a3:a7:
         da:3e:b7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:32:00 2024 by rpki-client on console-ams.rpki-client.org