Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61323a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a61323a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          +mWISO1CgO6QgP9TZhkhkMXiTORA+qL4jvBAVCuEVHQ=
Subject key identifier:   35:05:35:80:03:E4:A9:10:07:BE:05:31:C0:A2:0B:27:AD:51:A7:EF
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       0D08DD13AA5152B098B97105A20FA1DE256545BB
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61323a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:39 +0000
ROA not before:           Tue 05 Mar 2024 18:10:39 +0000
ROA not after:            Tue 04 Mar 2025 18:15:39 +0000
asID:                     271891
IP address blocks:        2801:151:a2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:08:dd:13:aa:51:52:b0:98:b9:71:05:a2:0f:a1:de:25:65:45:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:39 2024 GMT
            Not After : Mar  4 18:15:39 2025 GMT
        Subject: CN=3505358003E4A91007BE0531C0A20B27AD51A7EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:0f:76:7a:cd:47:ca:e9:b9:90:67:e1:c6:
                    6e:0f:90:13:ad:a1:7e:5e:3d:2a:a5:8a:38:91:75:
                    66:c0:1b:0a:c3:aa:84:fa:50:65:15:07:e2:9c:7b:
                    71:b1:dd:78:8e:bd:17:e4:f6:f3:63:fd:59:3f:dd:
                    ea:4b:d3:bd:82:f6:af:59:1f:ff:07:fe:b7:6b:f1:
                    91:b7:42:22:01:38:fb:ef:6e:ac:bd:ff:73:36:13:
                    f9:64:7f:4b:75:4e:6a:02:51:4c:57:c1:35:bc:b7:
                    6d:5c:69:e4:74:7f:34:77:a3:93:f7:88:89:02:b9:
                    b2:db:85:b6:68:06:7e:d9:1f:97:ef:65:59:d0:6d:
                    d2:72:2e:56:59:8d:50:c6:92:05:7a:fa:24:44:ee:
                    2d:16:d3:4c:b2:26:41:d1:12:2e:c1:09:a2:0f:e1:
                    2e:d0:ba:e0:13:75:32:8e:79:ef:29:ae:1c:c3:68:
                    c5:da:1f:63:1f:42:7e:a3:f2:1d:7e:23:c4:88:aa:
                    c5:0a:2d:cb:40:c4:8e:7d:56:33:a8:3e:58:ab:8e:
                    11:f6:f1:67:18:94:9c:3d:fd:9b:65:f0:0f:c2:65:
                    31:e1:38:02:63:fd:41:2b:90:7f:e1:9f:b8:51:09:
                    1b:e6:f8:cd:bb:9b:40:85:d6:32:62:93:ae:32:26:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:05:35:80:03:E4:A9:10:07:BE:05:31:C0:A2:0B:27:AD:51:A7:EF
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61323a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:a2::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:c2:eb:2c:78:82:12:e1:b9:a8:2f:6a:7a:79:9d:96:47:dd:
         a1:37:4c:f5:26:2d:e4:ba:76:2d:7a:23:9f:ff:40:e2:2e:82:
         54:81:5a:a1:56:bd:5c:fc:36:83:db:21:84:fc:a3:9d:3b:16:
         7e:36:9c:7e:fd:19:aa:a1:6a:34:98:36:0c:3b:a6:17:68:23:
         7f:1e:74:9f:c7:3e:d1:f9:b5:de:56:2d:23:9a:17:4a:49:c3:
         4b:c4:2c:2a:19:34:af:54:b7:1c:d5:9c:ff:63:56:0d:1a:91:
         c1:25:b6:f4:a9:63:dc:08:87:e5:51:77:07:08:65:f3:4e:da:
         95:97:55:e2:3e:80:c2:29:35:cb:2b:50:26:d3:22:ac:ee:16:
         77:c0:54:ee:82:56:b8:92:2f:9a:57:6e:34:60:2d:30:c5:46:
         97:c6:88:31:c9:fd:65:f8:dc:5c:50:c8:77:a1:ab:e1:b4:29:
         83:35:4a:94:a8:71:32:ad:e4:7f:fa:00:de:e9:02:11:75:51:
         a6:80:2a:b9:93:f1:8c:03:df:9e:df:c2:4f:d1:53:97:0b:8a:
         7f:6b:b3:2b:32:d7:fa:77:80:f8:b4:9d:45:37:4e:55:0d:fe:
         cb:77:b5:32:1a:ea:c7:db:3a:0d:3b:f4:fb:27:3e:74:73:9c:
         a9:12:4a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org