Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130643a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a3130643a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          Twm35Gz4URfhvFE3244B74t8TjNdttN2ZaHPM81Zi8A=
Subject key identifier:   32:C6:0E:8E:0B:5B:C1:B4:B1:E2:9E:BC:78:B6:BF:77:7E:4B:38:42
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       59488D8383F8873AC01B437BB552BFA3EA6B882C
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130643a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Mon 14 Apr 2025 21:00:00 +0000
ROA not before:           Mon 14 Apr 2025 20:55:00 +0000
ROA not after:            Mon 13 Apr 2026 21:00:00 +0000
asID:                     271891
IP address blocks:        2801:151:10d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 23:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:48:8d:83:83:f8:87:3a:c0:1b:43:7b:b5:52:bf:a3:ea:6b:88:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Apr 14 20:55:00 2025 GMT
            Not After : Apr 13 21:00:00 2026 GMT
        Subject: CN=32C60E8E0B5BC1B4B1E29EBC78B6BF777E4B3842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:6f:14:09:6b:61:f6:6a:8c:5e:f3:a0:76:
                    23:4e:46:84:e9:be:07:26:00:41:41:6c:03:b3:79:
                    a6:7d:c4:f4:6d:24:84:e7:77:de:dd:1f:27:1e:56:
                    2a:b3:af:71:5a:48:46:a1:f0:d8:51:7f:a9:14:6c:
                    50:b4:48:68:d3:7a:49:36:60:45:c1:ee:00:97:aa:
                    6b:6c:e4:fa:b0:fa:a8:64:d5:53:55:cb:78:6a:4a:
                    70:9e:9d:a7:c2:e3:84:26:a6:e9:4f:89:9a:d0:45:
                    d3:61:b0:86:bc:31:ac:43:9d:b5:ad:21:88:05:bb:
                    54:93:4f:7d:f8:c0:b4:91:42:ed:fc:8c:17:6d:b7:
                    00:bf:31:a6:0d:46:a1:90:54:46:82:dc:d3:1d:82:
                    fb:94:52:03:d2:79:15:86:07:8b:49:0b:ac:41:0a:
                    9b:ae:28:9a:49:33:d1:fc:a9:20:7a:71:93:89:f3:
                    18:f9:d0:69:fa:cb:47:fd:b0:1a:0c:2d:23:d4:10:
                    1e:71:e7:87:6f:2b:a9:12:44:9f:24:1e:3c:7c:b7:
                    70:9f:01:33:ba:ff:2d:03:22:05:22:72:80:f9:bb:
                    7b:07:58:e9:b0:60:86:26:aa:7e:78:ac:6f:b5:8b:
                    00:44:6f:20:4c:1d:57:5b:d3:9b:cd:9e:b3:a1:60:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C6:0E:8E:0B:5B:C1:B4:B1:E2:9E:BC:78:B6:BF:77:7E:4B:38:42
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a3130643a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:10d::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:6c:f0:9f:89:77:88:96:30:f2:11:e4:d6:c4:85:5e:7c:d0:
         ea:5e:c7:00:f3:9e:0a:5e:76:b3:f0:fc:3a:b5:2f:f4:95:c7:
         6c:6b:01:67:80:35:ea:9e:fe:17:0f:9d:52:fe:d5:e2:b7:3c:
         88:cd:39:cf:94:05:c6:5a:82:2b:47:38:e6:d9:b2:86:4e:26:
         96:5d:fb:7d:85:5c:b0:c0:0e:6b:26:6f:f1:3f:84:21:04:4c:
         05:b5:2d:e4:88:d8:4e:f3:e9:a5:7f:34:72:ee:35:5a:41:d7:
         9a:7c:51:17:58:28:98:bb:41:5c:05:65:2a:23:de:99:41:74:
         b3:96:d3:df:15:13:b8:01:dc:5c:27:ae:26:05:97:3e:68:bd:
         79:86:b9:ac:6d:b5:1e:24:9e:8f:6c:e9:6e:38:95:07:83:b4:
         69:10:77:db:45:45:da:b7:c4:10:11:94:c2:34:fe:5b:a7:52:
         b6:35:36:a4:e0:68:af:ee:11:47:30:a3:8c:a8:b5:cf:e2:29:
         06:a0:7a:ce:46:97:c1:07:37:35:cc:a5:87:aa:b8:07:48:82:
         45:f9:b1:d9:ef:6a:8b:32:5b:cc:77:0b:27:a9:97:2b:4a:0f:
         3a:27:ab:78:ea:88:85:34:61:9a:be:5f:74:0e:6b:b2:60:d3:
         17:a1:d5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:22 2025 by rpki-client on console.sobornost.net