Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a363a3a2f34382d3438203d3e203131383330.roa
File:                     323830313a3135313a363a3a2f34382d3438203d3e203131383330.roa (raw, json)
Hash identifier:          4V2IlNO16UXw+8BhrnBUsIvSNXie3++hDBHq68NGU7M=
Subject key identifier:   00:6A:8C:43:DB:54:07:AC:1E:D9:86:79:EB:FB:94:6B:90:17:26:DB
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       466642B7294E8FB793D8AD97E65D8B25AA4101E6
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a363a3a2f34382d3438203d3e203131383330.roa
Signing time:             Tue 04 Feb 2025 18:45:11 +0000
ROA not before:           Tue 04 Feb 2025 18:40:11 +0000
ROA not after:            Tue 03 Feb 2026 18:45:11 +0000
asID:                     11830
IP address blocks:        2801:151:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:66:42:b7:29:4e:8f:b7:93:d8:ad:97:e6:5d:8b:25:aa:41:01:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:11 2025 GMT
            Not After : Feb  3 18:45:11 2026 GMT
        Subject: CN=006A8C43DB5407AC1ED98679EBFB946B901726DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:eb:bd:d8:c4:cc:0a:32:4f:69:b0:3d:39:
                    a2:3a:57:6e:10:e1:d9:05:bc:cb:d2:2f:a0:02:61:
                    48:a4:9a:31:7b:5c:39:28:60:e4:ba:dc:c5:59:65:
                    4c:55:30:13:0c:4b:67:df:7c:b2:d0:b7:62:3a:ae:
                    59:3c:5f:97:13:ff:7a:d9:cf:35:c8:36:be:99:a2:
                    df:84:b5:ff:59:f6:16:3a:4f:d2:5b:09:79:66:1b:
                    e0:f7:1f:8f:fb:79:6d:3f:e0:d4:90:c9:a2:59:f4:
                    4b:87:6f:81:ab:2a:38:86:34:d1:5e:fa:c9:5c:29:
                    a7:99:a1:2e:72:7e:27:b2:72:23:b5:e4:c4:a6:cc:
                    05:03:b8:20:82:40:f9:0d:4d:a4:c5:31:1a:d8:d7:
                    0a:ab:d4:e6:36:69:70:9d:bb:d2:3f:8f:e4:94:2f:
                    a2:3e:0e:e1:bf:41:e2:c9:5a:3b:2d:b2:b0:bc:d8:
                    3b:a3:6a:30:74:5d:a0:84:68:d6:91:24:bd:9b:fb:
                    dc:db:bb:0f:37:61:dd:14:94:2d:6c:ff:76:15:af:
                    0d:7b:2b:97:a8:8c:ad:ec:30:99:55:0e:d0:70:e4:
                    a1:c4:48:a3:ea:1c:fe:40:8e:d4:b4:f5:6f:bd:b5:
                    d4:23:d3:e1:7d:4b:39:cf:bd:6e:66:59:b2:73:b3:
                    4e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6A:8C:43:DB:54:07:AC:1E:D9:86:79:EB:FB:94:6B:90:17:26:DB
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a363a3a2f34382d3438203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:1d:af:69:63:97:37:38:94:21:69:10:af:fa:2e:01:bc:be:
         4d:8c:71:2a:10:04:e1:c5:2d:65:f3:22:4a:7b:de:ac:b5:c3:
         d1:05:05:23:bc:60:b4:b5:28:c1:ce:b7:ef:90:8d:f0:3b:bd:
         80:76:ac:1a:ee:61:fe:ed:be:ba:5f:9f:b2:8e:1d:d3:cd:2b:
         ea:ec:49:12:2d:f9:b8:c0:1a:fa:3e:16:99:1d:47:0b:25:93:
         7e:b9:fc:60:58:d0:1a:cd:5e:e5:ba:ec:86:6f:82:b7:ad:85:
         33:19:9a:39:f4:5b:f8:7c:7e:8a:55:59:fa:02:51:e7:c0:e1:
         79:49:ff:e2:9f:11:3a:b6:0e:6c:6b:01:0a:2a:d7:0d:aa:88:
         e7:d7:e8:eb:5a:e6:6d:77:76:4d:27:b7:22:af:a5:da:d0:30:
         58:58:e6:6e:db:d6:5a:23:a8:1b:09:92:c4:55:47:ae:bf:9a:
         93:6a:75:07:7c:08:2f:27:af:fe:c7:df:93:e0:dc:59:61:71:
         0b:9d:62:df:60:56:50:3b:82:9f:80:09:7e:11:7e:b2:1d:36:
         04:68:dc:70:9a:7e:5d:98:a6:b8:c0:a2:09:9e:a2:a8:9c:86:
         0d:58:00:76:d9:5a:89:3f:f8:90:ff:01:1c:9a:1f:b7:be:c8:
         84:43:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:02:54 2025 by rpki-client