Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66623a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a66623a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          Td6Y54J3w/dAznnwuw+olvCXEkym4XC8x/gY0c52IzI=
Subject key identifier:   7A:94:6A:8E:B8:12:70:3D:17:69:3E:FA:4F:F5:B9:D1:EC:F1:EC:09
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       7807C3C4B3153EF9F1D683AFA84256D197E0EF55
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66623a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:30 +0000
ROA not before:           Tue 05 Mar 2024 18:10:30 +0000
ROA not after:            Tue 04 Mar 2025 18:15:30 +0000
asID:                     271891
IP address blocks:        2801:151:fb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:07:c3:c4:b3:15:3e:f9:f1:d6:83:af:a8:42:56:d1:97:e0:ef:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:30 2024 GMT
            Not After : Mar  4 18:15:30 2025 GMT
        Subject: CN=7A946A8EB812703D17693EFA4FF5B9D1ECF1EC09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:8c:ef:04:c8:ba:86:e8:2c:68:e8:e2:ec:
                    27:25:be:4f:4a:f3:6e:84:56:7e:2d:ed:fc:52:bb:
                    ec:f6:dc:46:20:79:1b:7b:c6:11:08:28:e8:65:b3:
                    f8:35:70:8d:41:d4:51:8d:ce:93:0b:1f:a1:c5:6f:
                    82:0c:6f:94:5f:77:1a:28:04:bb:bc:e1:51:89:f1:
                    36:35:fa:2c:3a:3f:f5:a1:6f:4e:70:75:6e:86:b9:
                    00:e3:a9:4e:15:21:84:0a:ad:36:cb:6f:c1:34:9a:
                    98:e7:5f:fb:72:da:69:ea:76:6f:03:77:de:d0:a6:
                    a3:c0:b9:57:18:16:a5:67:a3:f1:4c:cd:3c:a3:aa:
                    24:ff:f9:b6:8e:6b:20:88:aa:0b:c0:d9:d1:e7:6c:
                    c6:3c:9d:f0:51:7c:93:75:e0:10:5e:1f:70:9f:dc:
                    7c:e3:47:57:84:d9:2e:f0:89:ca:3f:60:2c:eb:30:
                    d2:2c:fa:c5:35:f8:8e:99:3a:e2:55:fd:dd:57:0f:
                    f3:34:bf:26:70:c1:60:89:48:69:b8:c8:96:59:99:
                    36:ee:c0:d3:63:7b:17:b6:39:65:d0:9e:6a:ba:5d:
                    c1:52:bb:08:0a:a3:07:26:3e:96:2b:e4:69:73:3a:
                    1d:44:2a:5f:b3:42:6d:ba:3d:40:18:66:51:97:5c:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:94:6A:8E:B8:12:70:3D:17:69:3E:FA:4F:F5:B9:D1:EC:F1:EC:09
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66623a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:fb::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:34:6d:34:40:61:62:1e:ad:b1:f0:fb:19:54:6d:c4:97:01:
         1d:56:1b:3c:07:75:5f:0e:17:e8:69:1e:7a:fb:34:76:ee:bb:
         bd:0e:10:90:43:fc:5e:61:7f:ed:bd:5b:92:a3:a8:22:92:33:
         68:07:69:3b:f0:15:fe:df:9a:d0:8f:6d:18:c8:63:23:8f:26:
         79:0b:1b:33:e8:1b:6a:0e:9e:5f:1f:95:ed:d1:39:fe:51:b1:
         59:40:e7:6e:3d:0e:fa:3e:32:60:40:f2:b4:ed:b0:b7:1a:8c:
         c6:44:38:b8:f7:78:c1:af:ef:32:db:6b:9c:28:4b:23:10:39:
         71:18:29:70:65:f5:de:65:02:34:7d:98:b6:19:cd:8e:2e:f8:
         c2:c5:f3:4c:1c:cb:06:15:17:b3:b8:c3:ce:16:2d:c1:51:2f:
         d9:60:99:bd:89:38:a1:45:1f:a7:f0:c7:a1:9a:d6:98:bf:c3:
         f2:0b:54:84:61:1b:bc:b9:1c:75:4f:d0:84:78:cc:f7:c0:8f:
         a2:f2:19:fa:e6:7e:94:24:a7:39:04:5d:40:d4:e6:ae:a7:e6:
         1c:24:a7:c9:b8:7d:89:f1:37:bf:de:e5:63:b9:6b:cb:95:72:
         1a:d8:1c:e6:35:42:26:7a:6e:6c:8e:90:09:f9:24:a1:a0:1c:
         b7:d1:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org