Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a663a3a2f34382d3438203d3e203131383330.roa
File:                     323830313a3135313a663a3a2f34382d3438203d3e203131383330.roa (raw, json)
Hash identifier:          MhjY8DZE+HFTNDSv2BIfEhWJhsT/iGQWKdNCCmECg1I=
Subject key identifier:   33:6E:4F:40:D6:95:58:B3:58:16:62:EF:C4:92:6D:28:3C:9A:BE:5C
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       44B0A07C9F82F7CBEF4BEFF605005EBFF8849CE6
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a663a3a2f34382d3438203d3e203131383330.roa
Signing time:             Tue 05 Mar 2024 18:15:32 +0000
ROA not before:           Tue 05 Mar 2024 18:10:32 +0000
ROA not after:            Tue 04 Mar 2025 18:15:32 +0000
asID:                     11830
IP address blocks:        2801:151:f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b0:a0:7c:9f:82:f7:cb:ef:4b:ef:f6:05:00:5e:bf:f8:84:9c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:32 2024 GMT
            Not After : Mar  4 18:15:32 2025 GMT
        Subject: CN=336E4F40D69558B3581662EFC4926D283C9ABE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:7a:16:00:c8:5f:56:58:be:1d:34:77:67:
                    d2:b9:9f:05:21:51:0e:17:ae:04:6f:56:38:4b:4e:
                    60:21:57:c4:fd:7e:67:a1:e5:8d:70:52:60:00:30:
                    e3:b5:bb:a7:db:63:1f:70:61:5b:86:c1:25:5b:27:
                    93:23:1e:ae:48:9c:1e:25:e5:69:cd:4c:6f:ca:2c:
                    da:7e:93:39:b0:d6:53:81:8b:5a:ce:47:d4:b0:4b:
                    e9:6f:8d:48:96:5c:bf:c8:d1:c4:75:a3:a7:bd:f2:
                    36:a0:d9:56:a6:ae:64:44:e6:ac:51:45:1c:6a:5a:
                    32:75:b2:77:54:ac:d7:25:9c:4e:d3:cf:60:51:5b:
                    60:64:54:e2:dc:dc:1f:6e:2a:15:87:82:01:31:23:
                    13:0b:31:4f:bd:c1:76:f0:50:e0:be:82:6d:76:f3:
                    6f:98:95:ad:ee:c3:fa:a3:be:1e:d5:a2:6e:d4:d5:
                    0e:9c:4e:11:0b:3e:1c:fb:d3:b2:fd:f7:a8:54:2c:
                    d3:a9:15:c0:4c:e0:3a:97:fa:ee:24:ce:b4:2d:c2:
                    32:bf:43:98:51:63:56:7a:7e:96:d5:75:32:0f:dd:
                    79:80:41:f8:df:84:6a:36:2f:95:b7:44:a7:29:1a:
                    eb:f6:81:8c:f6:fc:3e:92:85:17:64:36:58:4e:2f:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:4F:40:D6:95:58:B3:58:16:62:EF:C4:92:6D:28:3C:9A:BE:5C
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a663a3a2f34382d3438203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:bf:a0:75:11:8a:a5:63:9f:bc:85:76:a4:83:8c:92:d6:c9:
         f8:7f:0b:26:90:85:d6:8c:27:43:35:2c:e2:73:78:f5:50:74:
         8d:94:17:19:0b:e4:e2:b0:82:02:da:1c:3a:f1:fa:6f:1a:de:
         67:da:5a:53:2f:2a:13:15:9e:54:d0:e7:9b:e1:31:30:2e:9b:
         9a:92:37:6e:65:ee:91:e9:c9:4a:e3:b2:76:07:2c:88:92:ff:
         d8:6c:a1:58:9f:76:1f:b0:17:29:3c:2c:54:84:03:f4:11:3c:
         08:6c:8a:44:3b:c7:94:04:c4:4c:d3:28:6b:c6:1a:e5:6e:71:
         b9:a8:76:18:08:1c:14:02:27:a3:d0:64:58:60:bd:4e:c5:53:
         b0:57:57:22:ff:96:95:13:97:03:9d:01:74:b5:17:ee:81:78:
         ee:b9:9e:76:fa:60:5f:ba:11:fd:cf:1e:f0:12:55:a3:15:32:
         35:60:31:81:bf:56:a3:ec:37:a8:f4:0d:00:d5:35:85:f9:42:
         7e:00:96:6c:87:25:9f:4a:11:90:eb:ae:3d:8c:c4:64:8e:f6:
         63:0f:97:5a:d9:50:c7:15:29:15:05:de:b8:ce:39:60:ca:0b:
         44:0b:60:e2:43:5b:ca:21:38:68:80:ac:5e:c3:66:8f:56:60:
         53:5a:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org