Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35373a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a35373a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          RSALJ6rOSD16qU841vDiJEjcBfo25tX3sM/26UbzFYo=
Subject key identifier:   22:FE:A9:BE:2F:25:BF:5A:30:8C:67:29:61:A8:81:0C:5F:83:FD:A7
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       38B477FC8345923C6B8E1941F095978A15889888
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35373a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:02 +0000
ROA not before:           Tue 04 Feb 2025 18:40:02 +0000
ROA not after:            Tue 03 Feb 2026 18:45:02 +0000
asID:                     271891
IP address blocks:        2801:151:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b4:77:fc:83:45:92:3c:6b:8e:19:41:f0:95:97:8a:15:88:98:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:02 2025 GMT
            Not After : Feb  3 18:45:02 2026 GMT
        Subject: CN=22FEA9BE2F25BF5A308C672961A8810C5F83FDA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:5f:71:f8:f5:b9:6f:04:ee:cc:4e:c9:ca:
                    ae:ea:1b:be:bf:cd:86:60:db:dd:52:a1:67:bd:3f:
                    a3:03:ae:81:76:2b:4d:3f:c1:c0:6b:9f:5d:58:17:
                    e8:53:95:15:59:06:7b:ba:4b:8f:59:a6:fe:c0:b4:
                    a1:15:e8:12:3e:3a:3e:7c:24:a3:96:7d:7d:d2:a7:
                    6c:d8:c3:d2:7f:a7:71:56:d0:5e:c7:c3:d9:2d:29:
                    e9:4b:22:b1:78:84:56:aa:dc:dc:e9:68:0e:d7:37:
                    b1:61:09:73:7d:3a:1d:9e:b2:e8:88:93:1b:f0:0f:
                    9d:42:7c:a7:06:e8:24:86:63:1e:ca:41:ff:27:7b:
                    99:17:b0:f3:e3:0c:0f:5d:0f:df:5f:bb:31:c9:40:
                    b8:c9:ed:cf:e9:43:e0:dd:8b:4d:90:5d:29:65:15:
                    d0:2c:4d:3a:66:a4:57:a4:a5:31:23:40:c9:c6:d0:
                    43:3c:19:a5:ec:4d:a7:06:e4:82:08:64:74:a5:e0:
                    f7:b1:7d:82:91:be:c7:c5:2a:50:e7:b9:df:4c:0b:
                    44:43:1e:7f:31:c7:4e:78:44:e6:49:c5:c6:f9:ee:
                    3e:62:17:98:55:65:71:b5:d2:b8:d8:b5:28:c1:ad:
                    17:4a:06:c9:1f:b1:71:54:ed:e9:4c:fc:14:65:1e:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FE:A9:BE:2F:25:BF:5A:30:8C:67:29:61:A8:81:0C:5F:83:FD:A7
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35373a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:ce:88:8d:08:cb:5d:62:76:74:71:ec:25:3f:fa:c6:4c:85:
         96:46:d4:82:47:f6:15:b9:20:b1:1a:67:56:50:a9:da:8e:d7:
         01:38:38:fb:d3:6e:3c:16:aa:af:94:df:a8:02:6a:dd:cc:de:
         c9:17:db:1b:2b:50:47:35:0e:c9:d1:47:9c:56:79:3b:f2:97:
         8d:be:ff:02:70:3e:31:e4:cf:41:5e:27:12:33:46:db:7d:17:
         c2:6c:f7:42:f8:9c:91:8c:1e:6b:45:27:ef:1a:a3:c4:61:46:
         3c:4f:9b:05:3b:35:af:a9:66:33:12:bc:9e:f4:c7:56:7d:90:
         d5:7a:4d:29:71:4b:76:89:39:6c:d6:78:43:e8:f8:bb:12:e9:
         77:83:88:6c:b3:67:c6:2f:4c:1f:7f:56:47:06:9f:2b:22:c8:
         94:10:1d:4b:b7:fd:b5:00:df:5b:6e:c2:07:91:5e:25:e0:1a:
         fd:34:2c:c3:e9:dc:a0:4e:6e:37:0e:1b:f4:af:13:c8:ce:0c:
         f3:45:07:0b:a8:0a:a5:b6:f1:91:61:9e:b8:e7:a3:cf:dd:be:
         6f:70:66:79:80:24:f4:33:7d:b3:62:25:7d:ba:e0:2b:6c:01:
         30:2f:61:3c:b4:7e:2f:de:6b:81:32:60:86:fa:72:61:55:6a:
         7b:e7:57:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:02:33 2025 by rpki-client