Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61323a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a61323a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          6ufdXiG3rfxCqefswX+EQw0OdF8W+qfqq7oWTHNUegY=
Subject key identifier:   BD:D6:A7:1B:64:C6:B3:74:7E:E4:66:18:C9:FC:28:88:AA:89:74:AA
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       4B651B1F6D170018D14C193880A6C3C48199FA0D
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61323a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:00 +0000
ROA not before:           Tue 04 Feb 2025 18:40:00 +0000
ROA not after:            Tue 03 Feb 2026 18:45:00 +0000
asID:                     271891
IP address blocks:        2801:151:a2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:65:1b:1f:6d:17:00:18:d1:4c:19:38:80:a6:c3:c4:81:99:fa:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:00 2025 GMT
            Not After : Feb  3 18:45:00 2026 GMT
        Subject: CN=BDD6A71B64C6B3747EE46618C9FC2888AA8974AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:b7:1b:be:f9:4e:ca:11:74:60:8b:36:b1:
                    a3:35:34:d6:6d:7c:72:3b:a5:3d:ea:7e:34:88:0c:
                    09:4d:12:7a:1b:39:b6:35:cb:12:40:38:09:2e:b8:
                    36:4f:6c:f2:1a:0b:58:39:5b:a4:02:89:ea:ac:6b:
                    5b:9e:40:32:e5:63:ee:73:84:1e:98:45:ef:6d:86:
                    fa:75:f3:3a:a4:e2:81:d2:70:70:5c:25:ab:9c:e2:
                    f5:98:0b:b2:56:dc:02:c8:e9:a5:69:18:f0:40:eb:
                    a4:63:c2:cc:16:a9:ed:e6:20:60:9e:17:36:38:50:
                    34:59:b2:f9:c3:4b:7f:a3:d3:5d:8e:cf:4d:9f:b3:
                    d3:51:b6:2c:11:e5:91:48:c6:10:69:22:36:7a:f0:
                    51:8a:6d:5b:8d:d9:3a:b2:1b:f9:da:33:cd:e7:f0:
                    b9:75:f3:69:90:47:0c:35:c7:29:71:86:af:b4:a3:
                    6e:51:88:55:e7:12:e2:80:fa:57:f2:a0:a8:7b:21:
                    f6:e8:52:3e:4a:9c:8c:30:da:62:1a:d7:0f:39:d9:
                    64:7a:7b:b8:01:e8:2a:77:27:32:61:2c:1b:4f:9e:
                    ec:b5:32:fc:03:47:83:89:8f:3e:3d:05:71:8c:f7:
                    20:21:3b:0e:f1:21:2c:c5:83:13:a6:c1:38:69:8f:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D6:A7:1B:64:C6:B3:74:7E:E4:66:18:C9:FC:28:88:AA:89:74:AA
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61323a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:a2::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:2b:95:de:d7:80:8b:12:1a:4c:e9:cc:2b:b8:85:5d:08:da:
         ce:6d:81:e3:a3:7e:74:92:a5:d1:f4:09:73:54:c6:f7:10:b1:
         73:4d:a0:b8:6f:6e:61:a0:cd:3f:62:85:a9:94:bf:73:ad:7f:
         af:27:ef:fa:dd:6b:08:ea:7e:ac:02:7d:52:b5:68:21:ca:8f:
         e4:c7:b4:a9:01:b5:59:84:47:35:0c:2c:36:e9:5c:79:a6:4a:
         49:8e:4c:9a:a2:8e:58:fb:1a:5f:c4:bd:b1:2b:07:78:79:0b:
         00:26:db:a6:7d:c4:6b:be:6f:07:ab:1a:84:f8:ab:65:8f:d5:
         f9:63:d4:56:5d:38:de:f9:7d:d1:7b:69:69:c8:96:b8:bb:88:
         38:93:cc:47:3f:9d:24:20:a2:fc:3c:4e:81:b6:b0:56:5a:8d:
         a2:90:e4:f2:87:44:98:97:96:4e:5c:2b:5a:cb:68:30:09:aa:
         a2:aa:de:5d:5a:47:cf:b0:ff:e9:91:8b:1c:cb:fc:d3:c0:aa:
         9d:60:cd:f1:aa:d1:ab:e4:24:5a:07:fe:cb:be:47:8c:c7:d1:
         6e:d3:45:51:43:b5:b5:6b:71:dd:b4:5a:fc:7a:72:0a:3c:6c:
         3e:b2:92:68:b6:8c:39:4b:27:f4:56:b9:38:95:b5:fb:86:61:
         7f:08:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:21:05 2025 by rpki-client