Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61333a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a61333a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          4G64bZ5hLuPSlPWhWIFk3EjxSqYZzpwCyz0OdduPVlk=
Subject key identifier:   22:57:07:4F:EC:C4:1A:37:93:13:71:C9:06:BB:57:5C:09:0E:FA:95
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       0E467AD9C4ABA1B840A98C5DF93017498ADB3996
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61333a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:28 +0000
ROA not before:           Tue 05 Mar 2024 18:10:28 +0000
ROA not after:            Tue 04 Mar 2025 18:15:28 +0000
asID:                     271891
IP address blocks:        2801:151:a3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:46:7a:d9:c4:ab:a1:b8:40:a9:8c:5d:f9:30:17:49:8a:db:39:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:28 2024 GMT
            Not After : Mar  4 18:15:28 2025 GMT
        Subject: CN=2257074FECC41A37931371C906BB575C090EFA95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9d:ca:32:a9:2c:6d:08:cd:ef:40:4e:82:77:
                    5d:a8:f4:ed:a0:a0:50:e6:b2:e9:71:2f:ed:78:fd:
                    e8:89:db:b8:a9:cc:d2:a0:9f:f2:89:5f:fe:51:75:
                    01:a5:7e:c2:18:37:bd:64:4e:93:7d:9e:97:15:d0:
                    10:39:f6:72:c0:b3:e8:83:97:39:f1:e9:8e:d4:fb:
                    ed:b5:d3:a1:4a:c7:fd:56:c1:0e:ba:dc:e7:f9:0c:
                    7a:3a:c0:53:0e:46:c5:60:97:fe:f4:b4:21:7b:1b:
                    cb:00:f9:30:6e:0d:1e:74:8f:20:5a:c5:cb:33:ea:
                    80:c5:ab:6f:6a:fa:08:5e:33:80:6f:0b:fe:73:6f:
                    f3:9b:14:f0:46:a4:57:39:32:b4:5a:5b:f1:ed:23:
                    50:3e:5a:3b:a7:b8:d3:bc:a8:f0:5c:be:b1:ad:cf:
                    32:0b:6e:2d:0e:08:59:5f:b4:79:80:8d:2b:4d:80:
                    6f:de:b1:e4:cf:dd:f9:f3:2f:05:e9:c7:b5:06:6f:
                    99:d0:ce:dd:fa:73:1e:83:74:46:59:b1:e4:50:0e:
                    6f:5a:26:ea:98:87:48:89:11:30:8e:33:be:7b:b4:
                    01:80:fd:0b:50:c6:81:16:eb:6c:69:b8:88:a5:b0:
                    bd:6f:c7:25:28:2c:0d:f2:62:a2:8d:c2:f7:08:d9:
                    20:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:57:07:4F:EC:C4:1A:37:93:13:71:C9:06:BB:57:5C:09:0E:FA:95
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61333a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:a3::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:42:19:bb:d3:ce:87:3f:b5:34:59:fd:78:3c:b4:01:6b:da:
         12:0d:a0:45:37:d1:dd:1d:98:04:75:dc:ff:fe:64:e1:81:d9:
         b7:99:5e:37:ee:a0:34:18:4c:4e:38:d7:d7:c8:8b:b6:6a:b0:
         33:ea:d6:b5:44:aa:d1:28:8b:aa:87:34:c7:71:9b:a6:43:b3:
         5f:c9:bb:b4:70:1d:8d:7e:3c:97:cb:74:d8:17:6d:e9:c3:5d:
         ee:69:9f:d4:db:c1:20:57:7b:43:ea:71:15:bb:ef:78:d2:9a:
         ac:49:7c:57:47:4d:fa:5e:80:ac:45:46:f5:13:e2:2d:b1:f8:
         d8:49:26:19:7d:af:ad:f3:23:6c:0b:4b:46:fe:91:da:36:fe:
         d6:c3:65:8f:61:3c:9f:b6:0d:1e:85:87:d0:50:92:d5:27:98:
         d9:a4:1c:5b:bb:2d:08:a4:e8:b5:3b:b6:ca:5e:9a:9d:ea:87:
         da:c3:09:cd:ee:d7:c1:14:f5:da:f0:6d:6b:6b:e0:b2:53:d7:
         aa:19:67:bc:ec:b4:a9:0e:2b:e8:4c:9d:0e:66:22:23:d3:7e:
         c2:4e:73:53:6c:d1:9f:5d:79:ea:c1:31:33:63:ec:8f:0c:9b:
         f2:63:7f:7a:f5:42:2d:8b:de:26:a2:c4:11:ff:5a:92:3d:31:
         41:44:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org