Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63353a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a63353a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          /eNSDXZHaNbrdQ0wliG4QX/H5QNEKa/HxnlqXd1q35g=
Subject key identifier:   19:14:25:9D:19:27:03:57:3B:3C:28:94:DC:A0:E2:93:1F:20:A2:94
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       05BE22C9C4B0C43229A6A1AE36E0FB7C562360FF
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63353a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:34 +0000
ROA not before:           Tue 05 Mar 2024 18:10:34 +0000
ROA not after:            Tue 04 Mar 2025 18:15:34 +0000
asID:                     271891
IP address blocks:        2801:151:c5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:be:22:c9:c4:b0:c4:32:29:a6:a1:ae:36:e0:fb:7c:56:23:60:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:34 2024 GMT
            Not After : Mar  4 18:15:34 2025 GMT
        Subject: CN=1914259D192703573B3C2894DCA0E2931F20A294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:31:a8:53:99:36:a2:26:39:3b:12:45:d8:fb:
                    d2:df:64:b0:88:fb:00:39:8d:7e:18:d1:23:6c:ec:
                    a9:a3:74:66:a8:73:1e:93:13:77:41:7c:0f:66:a9:
                    96:f5:af:49:60:e4:7e:16:7a:b7:7f:bb:5d:61:0c:
                    7f:4c:42:f9:52:48:91:0b:a5:82:14:a2:ad:6e:51:
                    3c:b8:17:67:fd:f7:2c:c5:8b:41:a9:67:93:c8:9b:
                    a9:f3:97:42:26:56:96:82:59:4c:58:34:8f:e1:35:
                    fc:c8:0b:48:4a:92:a1:22:a9:9d:62:f1:c3:ab:10:
                    19:8b:d5:ee:6f:69:cb:3d:82:0f:db:55:85:55:7f:
                    3d:60:a3:75:55:d2:30:73:bc:a5:16:19:24:7a:71:
                    8f:81:11:b7:c7:1a:54:5c:ef:53:26:40:5a:73:bd:
                    d3:e8:e1:a9:fc:21:62:48:9d:91:3c:43:5c:50:49:
                    75:b8:37:e4:8d:85:a5:7f:1a:ef:b2:ff:0b:a5:f2:
                    41:a6:3c:a8:36:8d:f7:50:57:d0:45:fc:0a:0f:a4:
                    83:73:6b:1f:a5:02:0a:ff:e7:fc:2c:d5:bf:0f:8a:
                    95:43:a1:77:e3:cb:54:ca:f9:5c:b4:1a:76:e1:51:
                    80:d6:a9:fa:9c:7a:be:ac:fe:0b:fa:d8:f0:df:0b:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:14:25:9D:19:27:03:57:3B:3C:28:94:DC:A0:E2:93:1F:20:A2:94
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a63353a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:c5::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:e3:58:25:f2:99:a2:91:c8:9d:79:90:4f:e4:64:83:62:4b:
         d2:ed:81:89:f1:df:e3:0e:04:c0:17:23:4d:6d:39:a2:d8:9f:
         69:7a:da:9a:b5:2d:67:b1:4d:47:41:e1:42:f8:b8:3a:1b:f2:
         29:fb:6f:73:ba:f0:bb:8d:21:8f:8c:04:6c:40:b6:e6:1a:2a:
         a1:3f:cd:6c:29:0a:83:ac:d1:2e:29:52:df:d8:80:59:93:1e:
         d2:e5:f2:3d:4f:f3:5a:dd:8e:3f:0d:69:25:ca:5c:cb:9c:a1:
         95:a7:1a:f7:06:9e:74:4d:95:41:2e:c4:27:a8:86:ad:d3:01:
         8a:63:6c:05:30:07:11:63:c6:d6:14:92:1b:0e:81:25:21:61:
         37:60:a0:89:f3:14:9b:96:2c:2b:6b:11:51:aa:da:07:b5:e7:
         f8:96:2c:24:0d:d5:f3:30:ad:d9:99:44:0c:1c:9f:5b:0f:37:
         14:bd:05:5a:d7:21:61:08:5e:41:99:9e:1c:ee:3c:9e:70:ef:
         ec:85:67:b9:72:4d:21:8b:da:20:a8:a2:0e:46:98:6f:be:dd:
         46:7a:03:0c:b9:d5:56:67:da:8f:b2:c5:e6:68:ce:70:58:5f:
         9f:97:ee:0f:df:a7:79:f1:f0:ea:e9:5f:7a:0f:7b:42:7d:ea:
         7d:50:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org