Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66383a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a66383a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          qfygnGGWGI/+f76O3XLn0JQ/HLGZ2C6yiRgZVbyLrWk=
Subject key identifier:   93:2F:AB:68:B7:86:2D:FE:19:7E:48:05:8C:BB:DE:1E:AB:CD:6A:C1
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       68E282F8FE31DAFAE48F27768291B937B80CBDB2
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66383a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Mon 14 Apr 2025 21:00:00 +0000
ROA not before:           Mon 14 Apr 2025 20:55:00 +0000
ROA not after:            Mon 13 Apr 2026 21:00:00 +0000
asID:                     271891
IP address blocks:        2801:151:f8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 23:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e2:82:f8:fe:31:da:fa:e4:8f:27:76:82:91:b9:37:b8:0c:bd:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Apr 14 20:55:00 2025 GMT
            Not After : Apr 13 21:00:00 2026 GMT
        Subject: CN=932FAB68B7862DFE197E48058CBBDE1EABCD6AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:2b:fb:02:69:95:ba:1d:5c:d2:34:87:4e:
                    37:4f:0b:24:4e:f2:34:52:3e:d8:d9:f0:9b:e5:33:
                    e3:71:d4:51:f4:5b:b2:82:f1:fe:4a:af:5e:f8:c4:
                    09:22:58:b5:76:b2:c4:20:9d:15:0f:c4:a4:01:48:
                    6c:e4:48:4f:e1:af:88:41:8a:8b:f7:43:c8:cf:17:
                    91:de:1a:d5:7b:a9:79:34:19:97:74:4e:a2:40:28:
                    38:66:4e:94:8a:80:3b:24:9f:7f:e9:39:c4:9b:4d:
                    3b:12:76:eb:cc:51:60:7e:7f:d7:a1:ac:46:f6:dd:
                    95:46:f2:75:33:40:a0:ec:51:e0:ed:7f:b5:e6:4f:
                    c8:1d:68:38:c1:53:6e:9e:8c:77:ab:97:5b:a3:87:
                    48:ff:0c:c3:90:d0:ae:1f:25:c0:dc:99:d6:57:6f:
                    bf:43:ca:95:f3:38:56:f9:cd:2d:5c:8d:16:a0:86:
                    58:52:a0:86:8f:af:bb:bd:f3:3b:c8:11:6b:1e:42:
                    49:ea:8d:54:e5:16:18:f6:8e:ed:4a:14:8b:f3:08:
                    15:0e:26:6e:a5:57:87:1a:49:16:1f:4e:06:6d:b0:
                    b5:37:cf:e5:62:be:f7:a0:ad:81:d9:b4:91:08:01:
                    38:72:72:c1:fd:56:85:f7:39:3b:f5:d8:d8:aa:b9:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2F:AB:68:B7:86:2D:FE:19:7E:48:05:8C:BB:DE:1E:AB:CD:6A:C1
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66383a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:2b:da:98:f0:58:48:34:84:71:1f:bb:46:a4:be:27:3c:cb:
         09:c8:91:d1:2a:8b:89:2c:54:10:18:7a:cd:cb:c3:8a:a6:fd:
         08:03:f2:8a:ed:15:66:e0:0e:a1:85:d4:8e:f6:74:d3:be:6f:
         fc:ba:0c:9d:69:b8:41:f3:49:8b:9f:61:45:42:20:1b:c9:1f:
         b6:aa:6c:be:51:f0:2c:b3:70:47:c5:2e:1e:72:ae:6f:e2:69:
         0f:d4:e2:ef:c4:da:f0:7a:d4:15:1f:60:52:7d:e2:ba:58:73:
         8c:00:72:ce:f9:a8:ac:63:d8:9c:84:e1:57:d3:50:ec:51:2a:
         7b:38:6d:b2:d8:37:40:aa:7c:da:63:51:cb:29:fe:af:41:d9:
         c6:56:c6:14:6d:46:50:68:42:56:a4:5a:8d:7e:8e:d5:30:3a:
         0d:b0:27:f5:fd:65:1c:1b:08:30:03:f9:8a:76:91:b0:4a:91:
         c7:43:d8:9d:24:cc:f5:e6:ed:58:03:16:46:d1:f4:9f:f2:74:
         b0:9d:08:d7:86:07:2d:a6:68:eb:81:1d:1b:e6:51:41:4b:ae:
         3b:20:9a:48:83:ea:84:1a:92:c7:79:a1:da:5b:06:48:55:bb:
         67:54:b2:24:a7:b5:88:ef:15:ef:17:cf:31:2c:60:16:8b:ec:
         51:09:ba:6b
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUaOKC+P4x2vrkjyd2gpG5N7gMvbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMxMkFDQjIyMjZGOEI4OEU1RTg5RUYyRjE0NDJCOEVF
RkIzQjI3OTAeFw0yNTA0MTQyMDU1MDBaFw0yNjA0MTMyMTAwMDBaMDMxMTAvBgNV
BAMTKDkzMkZBQjY4Qjc4NjJERkUxOTdFNDgwNThDQkJERTFFQUJDRDZBQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/Cv7AmmVuh1c0jSHTjdPCyRO
8jRSPtjZ8JvlM+Nx1FH0W7KC8f5Kr174xAkiWLV2ssQgnRUPxKQBSGzkSE/hr4hB
iov3Q8jPF5HeGtV7qXk0GZd0TqJAKDhmTpSKgDskn3/pOcSbTTsSduvMUWB+f9eh
rEb23ZVG8nUzQKDsUeDtf7XmT8gdaDjBU26ejHerl1ujh0j/DMOQ0K4fJcDcmdZX
b79DypXzOFb5zS1cjRaghlhSoIaPr7u98zvIEWseQknqjVTlFhj2ju1KFIvzCBUO
Jm6lV4caSRYfTgZtsLU3z+VivvegrYHZtJEIAThycsH9VoX3OTv12NiquSArAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUky+raLeGLf4ZfkgFjLveHqvNasEwHwYDVR0j
BBgwFoAUQxKssiJvi4jl6J7y8UQrju+zsnkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjgxNUM3OERERDQwQjQ5MjdEOTgwRkE5NEU4RDA3QUQz
NEMzNDNBQTFGMjNDRDVEREU5NUZFRjlGQkNGMUE0LzAvNDMxMkFDQjIyMjZGOEI4
OEU1RTg5RUYyRjE0NDJCOEVFRkIzQjI3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzEyQUNCMjIyNkY4Qjg4RTVF
ODlFRjJGMTQ0MkI4RUVGQjNCMjc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI4MTVDNzhEREQ0MEI0OTI3RDk4MEZBOTRFOEQwN0FEMzRDMzQzQUEx
RjIzQ0Q1RERFOTVGRUY5RkJDRjFBNC8wLzMyMzgzMDMxM2EzMTM1MzEzYTY2Mzgz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzODM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQFRAPgwDQYJKoZIhvcNAQELBQADggEBAK8r2pjwWEg0hHEfu0akvic8ywnIkdEq
i4ksVBAYes3Lw4qm/QgD8ortFWbgDqGF1I72dNO+b/y6DJ1puEHzSYufYUVCIBvJ
H7aqbL5R8CyzcEfFLh5yrm/iaQ/U4u/E2vB61BUfYFJ94rpYc4wAcs75qKxj2JyE
4VfTUOxRKns4bbLYN0CqfNpjUcsp/q9B2cZWxhRtRlBoQlakWo1+jtUwOg2wJ/X9
ZRwbCDAD+Yp2kbBKkcdD2J0kzPXm7VgDFkbR9J/ydLCdCNeGBy2maOuBHRvmUUFL
rjsgmkiD6oQaksd5odpbBkhVu2dUsiSntYjvFe8XzzEsYBaL7FEJums=
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:22 2025 by rpki-client on console.sobornost.net