Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a64303a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a64303a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          yqIfGAZLxcBJbRduD8lS//Cl//iuSxeOyk6+znEH+tE=
Subject key identifier:   B9:18:AC:D7:C2:0A:31:25:0A:F7:D4:E3:F3:08:F2:40:E2:0C:EC:FD
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       39FABDF6257F7F1196FA9C50D77CD1BA0EF6609C
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a64303a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:31 +0000
ROA not before:           Tue 05 Mar 2024 18:10:31 +0000
ROA not after:            Tue 04 Mar 2025 18:15:31 +0000
asID:                     271891
IP address blocks:        2801:151:d0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fa:bd:f6:25:7f:7f:11:96:fa:9c:50:d7:7c:d1:ba:0e:f6:60:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:31 2024 GMT
            Not After : Mar  4 18:15:31 2025 GMT
        Subject: CN=B918ACD7C20A31250AF7D4E3F308F240E20CECFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:92:08:1e:0e:7e:28:aa:a9:d2:a5:ef:bd:
                    81:b5:4e:12:72:33:33:83:6e:60:a8:56:57:38:8d:
                    a2:0e:19:1f:e2:20:df:3b:26:33:15:78:6b:fa:3d:
                    80:f5:32:f4:68:8d:29:34:1b:9b:8d:4d:9f:db:2c:
                    24:f5:79:76:5e:9c:54:81:a9:18:53:29:70:4f:a4:
                    18:35:58:17:e8:87:59:78:f5:9d:89:4d:18:2c:2c:
                    bd:48:c3:4b:de:34:56:6f:b7:cc:64:08:f9:d4:27:
                    49:46:32:5a:7a:ed:18:08:ff:6a:46:17:a9:01:bc:
                    a3:56:8a:3c:de:72:22:88:0b:91:9b:01:e0:aa:34:
                    6a:74:d1:83:46:1b:55:30:5a:88:27:7c:92:15:ed:
                    02:09:5c:b4:e4:7a:db:df:f8:24:8b:e1:ec:1b:01:
                    1f:e6:71:4b:c8:20:3e:9c:2c:8d:2d:ec:aa:dd:fb:
                    9e:03:84:93:75:59:11:64:51:8e:e1:44:4f:be:39:
                    f0:e4:48:a1:60:68:b1:2e:f7:e2:e5:96:8f:7b:04:
                    a4:14:de:92:5c:bc:0a:ae:6b:e3:da:21:ae:76:b6:
                    48:d0:25:fa:92:af:e5:55:26:1c:d8:28:bf:b1:22:
                    c4:bb:49:11:72:32:a4:6c:31:94:d1:54:c6:54:00:
                    7c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:18:AC:D7:C2:0A:31:25:0A:F7:D4:E3:F3:08:F2:40:E2:0C:EC:FD
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a64303a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:38:d5:6a:96:00:04:8a:6f:a0:ba:17:18:de:1b:1a:23:04:
         46:a2:bd:51:a9:c6:1d:34:f7:29:1a:8c:76:23:6b:c3:37:a2:
         4e:38:0b:c3:47:72:41:72:b1:ab:84:a0:da:44:43:2f:a6:a9:
         b1:f1:71:c0:75:cb:75:64:05:be:9a:4a:d6:f5:d4:e7:aa:bb:
         af:1d:af:38:c4:7b:49:ca:dc:eb:5c:b3:4f:bc:80:7a:80:e3:
         c8:dc:0e:54:30:99:14:ac:af:48:db:de:2d:76:21:9a:e9:f7:
         91:5c:fc:47:e2:d2:9c:04:f3:ce:3f:64:3a:76:32:f1:c3:14:
         77:91:1e:a7:4d:a6:7e:7a:e7:45:56:f9:a9:93:76:9a:26:ad:
         cf:a9:6a:1a:50:0d:15:0a:6d:d9:57:e0:e9:38:59:69:5e:e0:
         fe:45:43:d1:16:32:7e:b5:d5:03:17:46:51:be:d1:91:47:74:
         4a:43:f5:47:74:70:9c:33:5a:ac:0a:5b:0b:1c:47:63:f0:6c:
         f8:7c:e2:41:cc:db:4d:91:e3:ac:55:01:c5:5a:b7:c5:f3:a9:
         cb:a7:1c:f4:07:07:b1:a7:d3:79:ba:65:b3:dc:97:57:7d:a4:
         93:e0:c6:0c:e4:85:48:b0:db:64:f3:1b:95:6d:48:0b:26:c8:
         0e:23:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org