Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63353a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a63353a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          /8dRVIbH1FAY/+qXcfUqit++WGjQ64aRemgPNHhzjqw=
Subject key identifier:   D5:FE:A4:1C:97:9A:5B:7E:C2:A2:1F:B5:76:E6:68:03:51:67:46:F9
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       14A3B88BC4C5122545D0D00A1B12FAF595138518
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63353a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:01 +0000
ROA not before:           Tue 04 Feb 2025 18:40:01 +0000
ROA not after:            Tue 03 Feb 2026 18:45:01 +0000
asID:                     271891
IP address blocks:        2801:151:c5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a3:b8:8b:c4:c5:12:25:45:d0:d0:0a:1b:12:fa:f5:95:13:85:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:01 2025 GMT
            Not After : Feb  3 18:45:01 2026 GMT
        Subject: CN=D5FEA41C979A5B7EC2A21FB576E66803516746F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6e:36:5f:ab:f2:8c:6b:c6:e5:47:ed:a4:f4:
                    74:0a:b7:c3:3f:3a:12:4a:aa:63:37:2e:9c:65:e8:
                    95:b4:26:3f:9d:91:bc:c0:d2:4a:d1:2f:f5:17:36:
                    4e:d6:e4:f1:22:cd:e1:fc:8b:e9:f0:ca:df:04:d7:
                    70:dc:f9:09:30:47:80:02:1c:0e:ec:f1:be:85:36:
                    bf:7b:67:44:e6:a5:e3:2a:fa:06:10:a3:94:f1:18:
                    9d:81:f9:32:6c:75:27:b1:24:da:11:54:ee:fd:44:
                    78:41:53:1c:c5:90:8a:83:f0:29:ce:d5:1a:78:4a:
                    6c:11:84:9c:0b:b4:bf:15:8d:d4:3f:cb:13:71:59:
                    96:6f:aa:78:bf:7d:4a:f9:c8:0b:f7:df:c6:9e:31:
                    0f:b5:93:1f:f6:3b:71:15:34:48:b7:98:11:70:f7:
                    68:99:53:55:ed:c1:fe:8f:73:07:be:f7:a0:b4:a0:
                    63:17:68:77:e2:2e:79:e6:fc:a4:c9:0e:95:a0:b3:
                    cf:05:d2:2d:49:37:66:e9:be:f8:8d:c2:b9:a2:e9:
                    ee:70:8e:5b:91:fb:0a:6a:a7:d1:9a:48:bc:23:c5:
                    7c:9e:9c:29:bc:7d:a6:cf:cf:ac:0a:6c:c8:63:6f:
                    b9:48:41:70:21:28:16:67:15:a2:3f:61:f5:71:54:
                    29:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FE:A4:1C:97:9A:5B:7E:C2:A2:1F:B5:76:E6:68:03:51:67:46:F9
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63353a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:c5::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:dc:2e:08:21:ea:ae:0c:78:01:f1:48:4b:ad:6d:81:9b:a8:
         6e:df:bf:1d:dd:a3:b8:e3:f9:ae:75:55:79:a9:49:91:fc:6b:
         0c:bc:85:b0:23:35:95:55:a1:11:eb:42:95:07:dd:34:9f:97:
         7a:6c:b4:b1:15:c1:9a:04:f5:ec:a0:34:47:ea:a9:6e:66:c9:
         57:33:a5:83:ee:6a:63:51:ef:65:73:33:95:1c:a2:98:cf:84:
         c5:ec:4d:df:c6:e4:d5:40:f3:3b:79:05:ff:f5:f0:fd:1a:ff:
         6e:e2:e3:53:da:0c:8a:19:ca:b6:cf:98:34:68:f8:32:c5:34:
         28:75:7e:6f:53:7f:68:b8:e9:2f:33:38:bd:17:1e:2e:2c:44:
         b0:78:56:a4:52:f6:6d:6a:8b:96:36:62:15:0a:eb:bb:e9:d4:
         bf:39:b2:08:c9:2e:37:07:02:10:c5:66:31:50:a2:7f:d8:0e:
         3d:b2:bc:a4:f3:49:31:6d:09:28:fc:2a:20:63:0c:99:3f:4d:
         23:fc:0a:16:07:0d:db:a4:83:c3:62:c4:1c:68:83:9c:a8:7c:
         73:3e:9c:be:8e:81:08:93:d7:72:17:1e:b5:cc:e6:bb:e7:e5:
         73:b3:75:d2:4a:28:37:70:7e:24:c9:6e:01:e0:66:88:c4:60:
         88:99:da:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:01:09 2025 by rpki-client