Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a39303a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a39303a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          6OdQrCm8Z1xVpviNuuCktv7pvvyES1vk8RGQ4mb2P/4=
Subject key identifier:   6D:7D:4D:FE:6E:51:91:86:2B:33:87:4A:2A:53:D7:FC:67:13:38:AF
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       39F4DE0A24BC7D45018B929CCCB14AD4339AC9A6
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a39303a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:37 +0000
ROA not before:           Tue 05 Mar 2024 18:10:37 +0000
ROA not after:            Tue 04 Mar 2025 18:15:37 +0000
asID:                     271891
IP address blocks:        2801:151:90::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f4:de:0a:24:bc:7d:45:01:8b:92:9c:cc:b1:4a:d4:33:9a:c9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:37 2024 GMT
            Not After : Mar  4 18:15:37 2025 GMT
        Subject: CN=6D7D4DFE6E5191862B33874A2A53D7FC671338AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:83:3c:22:44:3c:73:39:ac:ba:6a:d0:d9:
                    95:fd:2b:da:76:53:96:23:da:8d:e8:5b:e9:4a:8b:
                    65:67:d7:aa:57:5d:b0:11:fd:71:47:26:94:13:fc:
                    8a:46:7e:ff:68:28:fc:a9:d9:55:33:d5:93:37:ef:
                    2f:ab:d6:7a:82:19:68:a6:c0:f0:fc:19:5f:43:ce:
                    24:17:0f:9e:98:e4:f7:15:63:76:7e:10:03:bc:e3:
                    c9:5d:5d:c4:3a:b2:56:10:5a:6a:f0:ba:d1:24:4a:
                    05:3f:99:cb:c6:07:d3:cd:85:e2:83:2d:5a:27:ef:
                    d6:60:0b:da:78:77:12:c4:aa:03:a4:2e:e1:e6:40:
                    e0:54:b7:00:14:4b:6a:b5:4b:aa:82:91:bd:70:80:
                    ae:2c:32:f0:16:f7:77:a7:30:21:a0:96:de:dc:c6:
                    ea:66:b2:a8:82:d8:9c:28:63:27:28:69:33:83:2c:
                    fc:97:97:ad:7c:6b:3f:9f:61:1c:95:ad:cb:7a:22:
                    ab:c3:0f:7c:07:79:05:6a:f1:c4:4c:46:f0:f1:cc:
                    3b:6a:80:09:f4:dd:14:2e:a8:e3:6c:97:d7:b9:59:
                    57:67:fe:78:46:d1:ff:4f:76:13:6b:70:73:3c:c9:
                    90:1b:cf:ef:be:80:7b:60:cf:37:5a:6e:df:38:61:
                    1a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7D:4D:FE:6E:51:91:86:2B:33:87:4A:2A:53:D7:FC:67:13:38:AF
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a39303a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:fc:73:cf:04:9c:e4:87:58:31:6a:7d:ff:37:2a:1b:e8:25:
         9d:7c:29:43:53:c9:5f:f6:ca:83:db:d7:5f:56:99:bf:81:ea:
         d2:3c:d7:25:3b:91:f6:28:7b:53:e1:5e:0d:3a:24:6f:23:ee:
         3c:cf:bb:46:23:b3:21:6a:64:87:be:21:79:9d:d2:dc:bf:2a:
         b3:c7:a3:53:2f:37:2b:c7:8c:e8:5e:b1:c9:db:5a:e6:e7:5c:
         83:14:f7:78:6d:cf:26:b9:d5:46:58:25:a8:91:08:9a:58:89:
         8e:e2:7a:b2:75:fb:80:fd:34:a4:8a:f1:f7:06:3b:2e:32:4a:
         7f:d8:9c:74:85:0b:b9:cb:7b:8f:03:cd:dd:3a:80:3e:99:ac:
         54:94:29:61:b2:c1:9c:4f:d5:6c:50:e5:a4:45:97:9a:60:df:
         85:25:4b:14:db:7b:f6:29:cc:52:98:04:d4:12:b6:1d:7c:03:
         d1:6c:b5:04:75:c7:b3:30:fe:5a:36:ae:9e:85:6d:2f:0a:4c:
         0e:9b:44:3f:0d:22:e8:91:49:e7:18:ff:64:34:c3:71:d4:7a:
         23:1e:6c:f8:2a:01:57:04:53:d8:15:28:8a:2a:87:21:8e:99:
         fa:2a:73:76:4f:50:bf:5a:98:b9:0d:0c:4c:74:9e:13:b9:b5:
         86:b7:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org