Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a36393a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a36393a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          n0hDAcG3SUT6JY3krvt4Phnq7BeljjW44F3FN3uHcqs=
Subject key identifier:   5D:43:3E:5B:22:D1:A2:AD:EC:ED:7E:EE:9F:2C:2C:35:84:59:EC:8B
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       6CC5B6788E8F97C4303A296086E9D756D8AD9B82
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a36393a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:05 +0000
ROA not before:           Tue 04 Feb 2025 18:40:05 +0000
ROA not after:            Tue 03 Feb 2026 18:45:05 +0000
asID:                     271891
IP address blocks:        2801:151:69::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c5:b6:78:8e:8f:97:c4:30:3a:29:60:86:e9:d7:56:d8:ad:9b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:05 2025 GMT
            Not After : Feb  3 18:45:05 2026 GMT
        Subject: CN=5D433E5B22D1A2ADECED7EEE9F2C2C358459EC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:9f:53:9b:68:20:3a:a2:eb:1e:03:16:1f:
                    4d:57:32:90:91:4c:eb:6f:ea:13:ef:59:5d:9c:6b:
                    35:22:48:79:cb:e0:11:9f:9c:28:24:68:b0:59:57:
                    fa:14:de:fc:24:b1:7a:7d:ea:7a:b6:00:4f:16:db:
                    84:61:2b:b6:ba:0a:d5:cc:9e:93:23:83:09:f3:40:
                    e7:59:67:cf:be:cb:df:fc:1d:3b:71:87:74:0e:77:
                    94:31:6a:88:d9:37:1d:40:fa:04:e7:a4:00:0d:e0:
                    f0:92:d2:39:01:9c:22:f5:36:c4:9e:73:13:28:f7:
                    1d:ff:10:d5:6a:39:3e:8a:3d:10:36:d1:e6:da:4e:
                    5d:c1:5f:95:bc:2a:83:62:6e:98:34:45:3a:75:1a:
                    f1:40:9c:f9:ca:95:4f:b4:3f:a2:2a:ca:cf:e5:6f:
                    1d:1c:d9:7e:fa:b7:87:bb:32:2d:92:75:f8:d4:06:
                    81:19:a5:55:6f:53:db:0c:8b:f7:f6:0b:7e:83:29:
                    d1:af:47:19:b9:d0:4a:d0:68:2c:5c:8c:e7:bf:82:
                    49:b9:de:2f:5c:29:8b:29:73:dc:35:51:bb:1f:b6:
                    1c:75:11:a6:2e:3f:27:90:7e:de:dd:2a:74:f2:7c:
                    da:bf:e9:ab:6c:d9:ee:9a:db:be:8d:f1:87:b4:48:
                    3b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:43:3E:5B:22:D1:A2:AD:EC:ED:7E:EE:9F:2C:2C:35:84:59:EC:8B
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a36393a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:69::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:96:62:8d:d9:b9:0b:b7:90:a8:6d:df:f9:2b:74:af:85:55:
         35:a1:7c:13:a5:e1:fc:38:a7:1e:59:7d:79:26:d5:d5:3b:ff:
         cf:a7:d9:33:78:dd:5e:34:8f:a5:a0:b5:39:f6:93:2b:1a:1f:
         d5:61:13:7d:7e:45:52:44:1d:41:fa:ac:b0:3d:ab:38:6f:69:
         86:5c:c5:8c:f2:39:cd:65:d6:d4:62:e9:33:17:68:8c:c0:70:
         d5:63:0b:45:bd:23:31:48:d8:00:9b:3f:1f:77:12:a2:80:d8:
         d6:b7:3b:38:71:ee:54:16:d6:9f:47:e4:16:2d:b4:a1:be:10:
         29:96:b2:1b:bf:1f:21:51:61:4a:69:fa:03:93:02:69:90:a6:
         18:27:8d:79:56:70:68:08:c8:94:dd:5b:c7:f1:a1:05:e7:47:
         5a:31:9e:e2:5a:27:d1:e4:a5:c4:c5:97:e5:e1:3b:21:13:2d:
         c1:9b:b3:c7:da:a8:c8:20:17:cf:12:5f:12:cf:e6:a1:b8:8b:
         9c:82:2a:11:31:ba:ce:42:88:9c:a2:b5:a2:5a:34:f1:82:04:
         27:3a:6a:3f:70:40:4e:44:4e:e8:41:1c:94:3a:ed:8d:3c:7d:
         97:74:cc:b2:9b:62:64:c9:6e:1c:e4:89:78:49:b8:32:8f:38:
         4b:7a:d4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:19:57 2025 by rpki-client