Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35383a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a35383a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          EljiXAoVUKzCL+wMEsxBzv9VYmY8hpQ7CGSaGXwoNbg=
Subject key identifier:   EA:1B:BC:3D:1B:D9:BA:A9:37:5E:03:6B:F1:F9:12:46:E8:FE:FE:98
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       69B8FF594528E2BBA1314A0671322E61D237E8A9
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35383a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:36 +0000
ROA not before:           Tue 05 Mar 2024 18:10:36 +0000
ROA not after:            Tue 04 Mar 2025 18:15:36 +0000
asID:                     271891
IP address blocks:        2801:151:58::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b8:ff:59:45:28:e2:bb:a1:31:4a:06:71:32:2e:61:d2:37:e8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:36 2024 GMT
            Not After : Mar  4 18:15:36 2025 GMT
        Subject: CN=EA1BBC3D1BD9BAA9375E036BF1F91246E8FEFE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:74:a4:57:f6:41:ed:15:74:c1:b8:59:f2:
                    31:48:1a:dd:e7:ff:b6:15:be:a5:d6:9a:98:7d:a3:
                    a4:92:47:63:f2:0c:bb:55:c1:dc:f2:44:f2:a2:d8:
                    de:63:2a:12:84:e1:db:78:5b:ec:cd:6a:92:85:71:
                    30:82:60:b1:e8:3f:77:aa:7e:4a:91:69:a5:33:9b:
                    f7:ec:11:a3:83:1d:2d:80:d2:4f:64:b3:49:5e:49:
                    78:1f:65:85:e1:76:8f:02:9f:0c:ae:23:f9:65:8c:
                    14:71:78:16:0a:51:1e:4b:16:ac:ec:77:97:69:e6:
                    08:45:8a:23:93:5e:7d:c3:38:7a:59:03:67:eb:c6:
                    20:61:bf:f5:c2:16:80:1e:17:cd:02:c2:63:27:7b:
                    81:6d:e8:0d:95:15:81:fe:07:82:a1:e5:d5:66:bc:
                    a1:0b:e0:1c:06:76:46:18:9c:87:f6:29:1a:1a:b0:
                    78:63:97:73:fa:ca:b0:9a:98:f0:41:d9:d4:f3:78:
                    b6:3e:4b:78:6e:a5:e4:c0:80:fa:bc:e3:7d:6c:a9:
                    62:cf:60:f9:83:d2:f8:35:35:72:7a:77:59:06:9b:
                    a0:53:24:bb:6d:ec:03:87:ba:3c:d8:34:7a:cf:3c:
                    dd:54:b6:aa:ee:a3:13:32:22:8c:0c:54:11:09:c7:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1B:BC:3D:1B:D9:BA:A9:37:5E:03:6B:F1:F9:12:46:E8:FE:FE:98
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35383a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:58::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:8c:8a:fc:82:60:68:33:57:04:65:f5:3a:a6:9f:7c:c7:13:
         f5:29:ff:38:67:82:17:f4:20:98:96:9a:5d:fb:54:ef:22:58:
         67:72:5d:98:e2:cb:8f:e4:61:bf:1e:2d:ac:b7:84:a7:f1:a1:
         f0:e0:56:1a:35:f8:69:1d:e7:8f:b5:86:af:2f:ab:79:9b:5e:
         f7:d9:3d:a6:7b:aa:e3:d6:19:5a:cc:60:8e:bc:3e:7f:d4:67:
         34:13:8a:80:e4:85:e3:91:83:0f:9d:9a:ae:1f:60:17:22:0e:
         bd:3a:14:32:c1:db:4c:e9:8a:20:0d:04:d8:61:6c:9b:75:70:
         67:b5:13:30:b1:93:7d:52:a4:1e:3e:f0:fa:e7:92:7d:73:6a:
         f6:fd:d3:00:ce:aa:ff:6a:bd:64:5c:e6:fb:28:50:23:58:1a:
         82:50:c2:69:3b:72:a2:f1:bf:55:1f:07:f4:f1:ab:ff:c9:55:
         c7:4a:67:9c:b0:d0:1c:74:51:b3:9c:20:db:a6:37:32:b0:11:
         26:52:91:a1:79:c3:6d:d6:2a:30:01:11:8c:64:fa:01:73:d1:
         e5:2a:5f:e0:22:6c:d1:eb:80:52:6f:a0:fc:4d:1e:12:b6:98:
         3f:74:e6:b5:b7:85:a7:1e:1e:d3:40:77:0a:3e:56:ef:21:d3:
         42:39:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org