Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a36363a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a36363a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          LM2r0MK08YqvNENxmINNkSHgLZ5zM37wis2OxRYAlPE=
Subject key identifier:   B4:2B:02:95:C2:BC:86:70:E3:68:D6:92:C3:CF:44:09:A2:20:D7:F1
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       664D4BFCF902DCB4B59F6AFFFBF7FA0CD6A19587
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a36363a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:07 +0000
ROA not before:           Tue 04 Feb 2025 18:40:07 +0000
ROA not after:            Tue 03 Feb 2026 18:45:07 +0000
asID:                     271891
IP address blocks:        2801:151:66::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4d:4b:fc:f9:02:dc:b4:b5:9f:6a:ff:fb:f7:fa:0c:d6:a1:95:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:07 2025 GMT
            Not After : Feb  3 18:45:07 2026 GMT
        Subject: CN=B42B0295C2BC8670E368D692C3CF4409A220D7F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f2:9e:aa:64:98:48:33:97:d3:a1:14:04:54:
                    2a:27:ad:65:ca:1e:b6:ad:05:b5:4f:94:b7:26:0a:
                    aa:e6:a4:c7:e7:3d:c4:a5:9b:1a:58:af:8d:17:b2:
                    5e:40:ce:03:b6:ac:5e:bd:1d:9c:e0:73:da:c3:91:
                    11:4c:4a:dd:8e:80:3c:57:e2:49:93:89:6b:87:55:
                    ce:9a:74:26:1a:c2:93:34:1c:de:b0:70:7e:b9:53:
                    4b:57:88:cb:73:31:74:d9:8d:1f:ac:37:14:79:56:
                    a0:87:3a:94:e6:6c:b9:bd:2b:33:1e:75:58:8e:dc:
                    2a:a0:96:04:dd:a1:cf:5a:e5:a3:a9:3a:86:66:f8:
                    a7:05:5a:e9:f2:d8:67:87:b1:80:46:56:9c:c2:fa:
                    d2:16:5c:ef:94:b3:9c:e4:f2:d5:88:5a:24:10:a1:
                    48:47:df:ad:f7:df:cb:82:39:3c:20:f7:c7:68:71:
                    77:14:14:0b:88:da:cf:41:ba:95:79:d7:73:5b:1e:
                    c3:44:da:f5:c7:01:8a:65:21:f5:fc:60:dc:73:de:
                    03:f4:90:2d:9c:a5:83:76:02:70:a8:7c:77:fe:d6:
                    a3:c3:66:57:d7:55:1c:49:b5:d2:e3:9c:27:5e:ca:
                    05:25:c3:ad:96:c1:e4:dd:ce:45:f9:11:47:0d:88:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2B:02:95:C2:BC:86:70:E3:68:D6:92:C3:CF:44:09:A2:20:D7:F1
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a36363a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:66::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:a9:84:cc:ca:a3:17:67:ae:17:64:50:3b:99:fc:e5:ad:09:
         11:77:eb:b1:f0:60:90:57:15:8e:13:75:a6:a2:cd:43:2d:fa:
         7c:00:db:e1:b4:e6:76:11:96:41:e9:8b:65:59:20:42:e2:54:
         8f:e2:cc:bd:74:c0:ce:97:41:49:8b:9e:48:43:27:e7:45:d3:
         25:0d:11:94:a3:1a:73:02:31:72:21:da:44:88:bc:fd:d9:6e:
         0a:6f:eb:ce:38:4e:c2:5e:3e:d4:ad:99:da:22:81:42:4f:2f:
         59:d0:d0:c0:37:b2:ef:ee:ba:c1:7d:93:44:6b:b9:5c:d9:ff:
         0d:81:77:bb:9b:0a:dd:29:88:31:0a:e4:d8:51:44:00:0f:d4:
         a2:04:91:48:39:3c:e0:e3:6f:fe:81:77:10:07:4d:72:7c:7a:
         23:69:c5:8c:73:94:62:9a:b3:d4:17:5d:e5:15:07:f2:62:01:
         24:a5:58:b8:d0:02:f7:a0:02:06:ee:e6:a4:ad:a0:10:cd:5c:
         5a:d4:31:21:27:95:4d:9d:2a:40:30:08:bc:03:ed:f0:52:e9:
         f0:67:f8:f4:7d:71:b6:76:c8:5d:a5:7c:ba:8f:5b:98:d3:39:
         8a:bc:e4:d7:26:25:2b:92:28:74:b3:c9:fd:77:23:d4:4d:5a:
         c1:46:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:03:47 2025 by rpki-client