Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66393a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a66393a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          c/5qlL+RDiIG4/BeuD5CPC0PJpWowxBAOPf7T6jj8eE=
Subject key identifier:   A6:B7:AF:CA:AA:8F:7E:AA:43:86:1A:B4:09:16:01:59:B3:BA:AC:2F
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       6CC29D594FF8762E0F0312FC465CB4B613163C68
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66393a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:49 +0000
ROA not before:           Tue 05 Mar 2024 18:10:49 +0000
ROA not after:            Tue 04 Mar 2025 18:15:49 +0000
asID:                     271891
IP address blocks:        2801:151:f9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c2:9d:59:4f:f8:76:2e:0f:03:12:fc:46:5c:b4:b6:13:16:3c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:49 2024 GMT
            Not After : Mar  4 18:15:49 2025 GMT
        Subject: CN=A6B7AFCAAA8F7EAA43861AB409160159B3BAAC2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:11:ab:f4:93:cd:8d:71:ef:b8:b9:14:cd:
                    2f:24:bd:1d:4d:a6:86:53:33:da:60:34:8f:ff:ea:
                    64:f0:0d:f1:e1:e8:6c:df:33:4f:5d:93:73:43:32:
                    08:56:c1:18:bb:a5:d8:db:2e:e8:72:a8:f3:9b:b0:
                    70:db:83:bc:c0:7e:e1:7d:86:c0:2d:b1:5a:83:22:
                    7e:37:a2:2d:bb:df:4b:81:ed:2f:bd:f6:4f:d7:d7:
                    df:fd:c5:27:fd:d6:62:5f:95:8f:90:70:40:cf:ef:
                    a2:cd:db:7c:cb:c2:29:a2:cf:a8:a3:75:92:c4:e3:
                    cf:17:e1:bf:f8:a4:18:0e:05:96:44:a4:b7:7e:c2:
                    61:ca:39:00:a0:71:c9:df:3c:4c:1d:a6:fe:88:dc:
                    63:ca:3a:4c:8f:14:7f:80:a6:f3:ae:ad:ba:ec:a3:
                    1e:20:0c:a9:a0:68:51:56:cb:3f:96:da:e3:22:3e:
                    a6:57:22:89:77:80:6c:35:42:38:4a:ee:ca:97:76:
                    e2:a3:5b:6a:43:da:83:5e:f9:52:67:07:33:fb:0e:
                    50:2c:d9:ae:88:20:d8:fc:35:91:4e:6e:4a:41:83:
                    57:02:ce:99:7d:c3:fc:f4:83:2d:05:95:6b:3d:e9:
                    05:fd:2f:66:57:ec:c9:16:c8:95:f4:2d:d2:42:ae:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B7:AF:CA:AA:8F:7E:AA:43:86:1A:B4:09:16:01:59:B3:BA:AC:2F
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66393a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:f9::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:35:37:9a:ac:1d:3a:71:87:ad:cb:e2:a8:a5:25:67:55:5b:
         18:4f:47:01:bf:c7:33:8a:b2:a1:14:b0:63:91:46:9b:5b:ec:
         f9:d5:38:94:07:30:18:0d:7e:ce:da:51:51:0e:4d:9a:41:e5:
         6f:38:45:9b:9d:fd:a8:fe:65:03:31:16:d1:d2:a7:26:c8:03:
         26:9c:55:1b:04:4f:10:99:8e:d2:4a:28:b0:2a:fe:f2:4f:3b:
         06:5d:dc:8f:82:14:73:c3:37:36:f6:4e:4b:af:bf:e4:d4:c9:
         76:92:fc:8f:fd:55:17:f9:57:53:ba:a6:69:cd:a7:35:f7:db:
         98:66:2e:47:01:1a:0f:d5:63:b6:48:1c:71:23:97:af:99:b6:
         90:d6:60:86:e9:85:d9:ba:de:92:34:a7:67:1d:3b:d6:48:d4:
         9a:b1:f4:5b:64:8b:03:84:f9:84:a0:22:e0:bc:60:8d:2d:fc:
         e1:a0:b1:d8:f4:2f:ca:cd:8b:3e:34:4f:1b:18:76:59:67:fd:
         a2:16:ed:95:f0:33:65:86:3d:dd:60:6f:38:a3:cb:1c:fc:46:
         24:77:6b:a1:3a:b8:aa:eb:17:f1:04:10:75:11:7f:fc:ab:be:
         a5:ac:2f:13:24:ba:22:f5:bb:1a:f3:17:1b:7a:a8:2b:d4:aa:
         7b:ac:1f:e5
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUbMKdWU/4di4PAxL8Rly0thMWPGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMxMkFDQjIyMjZGOEI4OEU1RTg5RUYyRjE0NDJCOEVF
RkIzQjI3OTAeFw0yNDAzMDUxODEwNDlaFw0yNTAzMDQxODE1NDlaMDMxMTAvBgNV
BAMTKEE2QjdBRkNBQUE4RjdFQUE0Mzg2MUFCNDA5MTYwMTU5QjNCQUFDMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74hGr9JPNjXHvuLkUzS8kvR1N
poZTM9pgNI//6mTwDfHh6GzfM09dk3NDMghWwRi7pdjbLuhyqPObsHDbg7zAfuF9
hsAtsVqDIn43oi2730uB7S+99k/X19/9xSf91mJflY+QcEDP76LN23zLwimiz6ij
dZLE488X4b/4pBgOBZZEpLd+wmHKOQCgccnfPEwdpv6I3GPKOkyPFH+ApvOurbrs
ox4gDKmgaFFWyz+W2uMiPqZXIol3gGw1QjhK7sqXduKjW2pD2oNe+VJnBzP7DlAs
2a6IINj8NZFObkpBg1cCzpl9w/z0gy0FlWs96QX9L2ZX7MkWyJX0LdJCrv9tAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUprevyqqPfqpDhhq0CRYBWbO6rC8wHwYDVR0j
BBgwFoAUQxKssiJvi4jl6J7y8UQrju+zsnkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjgxNUM3OERERDQwQjQ5MjdEOTgwRkE5NEU4RDA3QUQz
NEMzNDNBQTFGMjNDRDVEREU5NUZFRjlGQkNGMUE0LzAvNDMxMkFDQjIyMjZGOEI4
OEU1RTg5RUYyRjE0NDJCOEVFRkIzQjI3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzEyQUNCMjIyNkY4Qjg4RTVF
ODlFRjJGMTQ0MkI4RUVGQjNCMjc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI4MTVDNzhEREQ0MEI0OTI3RDk4MEZBOTRFOEQwN0FEMzRDMzQzQUEx
RjIzQ0Q1RERFOTVGRUY5RkJDRjFBNC8wLzMyMzgzMDMxM2EzMTM1MzEzYTY2Mzkz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzODM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQFRAPkwDQYJKoZIhvcNAQELBQADggEBAGE1N5qsHTpxh63L4qilJWdVWxhPRwG/
xzOKsqEUsGORRptb7PnVOJQHMBgNfs7aUVEOTZpB5W84RZud/aj+ZQMxFtHSpybI
AyacVRsETxCZjtJKKLAq/vJPOwZd3I+CFHPDNzb2Tkuvv+TUyXaS/I/9VRf5V1O6
pmnNpzX325hmLkcBGg/VY7ZIHHEjl6+ZtpDWYIbphdm63pI0p2cdO9ZI1Jqx9Ftk
iwOE+YSgIuC8YI0t/OGgsdj0L8rNiz40TxsYdlln/aIW7ZXwM2WGPd1gbzijyxz8
RiR3a6E6uKrrF/EEEHURf/yrvqWsLxMkuiL1uxrzFxt6qCvUqnusH+U=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org