Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a32323a3a2f34382d3438203d3e203131383330.roa
File:                     323830313a3135313a32323a3a2f34382d3438203d3e203131383330.roa (raw, json)
Hash identifier:          rulAa/T/V3yqMcTcIm8Go78BFUng1T8qECu0m3AjCes=
Subject key identifier:   57:88:DB:F4:12:90:8B:B7:5A:17:61:1E:09:CF:6F:72:6A:18:37:95
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       7F795BAFBA73B01FDD423DC65B6830E7A358B2E6
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a32323a3a2f34382d3438203d3e203131383330.roa
Signing time:             Tue 19 Aug 2025 17:55:00 +0000
ROA not before:           Tue 19 Aug 2025 17:50:00 +0000
ROA not after:            Tue 18 Aug 2026 17:55:00 +0000
asID:                     11830
IP address blocks:        2801:151:22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Aug 2025 21:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:79:5b:af:ba:73:b0:1f:dd:42:3d:c6:5b:68:30:e7:a3:58:b2:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Aug 19 17:50:00 2025 GMT
            Not After : Aug 18 17:55:00 2026 GMT
        Subject: CN=5788DBF412908BB75A17611E09CF6F726A183795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:a6:40:77:51:15:33:b7:64:8d:8c:76:33:
                    d7:e5:4b:06:6a:cc:50:a7:9b:67:40:95:fd:db:40:
                    81:a4:56:61:7e:8d:ce:6c:af:90:2e:f0:ed:44:fe:
                    95:02:09:88:53:f4:18:87:ac:5b:7f:24:e4:91:8c:
                    ed:84:20:39:ad:55:92:b5:00:c6:3e:d3:41:e8:aa:
                    b8:97:15:85:de:1f:12:c6:8a:d0:f6:9e:68:c7:d3:
                    96:2d:92:ef:fd:54:3d:38:31:55:5f:ab:53:80:cc:
                    fe:f3:76:cf:ac:13:ac:ff:18:35:bc:b2:40:cb:7d:
                    42:f6:17:bf:e2:85:a2:36:ae:f0:ad:3d:4b:ec:da:
                    13:7e:97:2d:aa:d3:f6:50:2b:5d:79:bd:53:ee:07:
                    c3:63:0e:46:8e:65:35:27:69:02:b1:f3:e9:00:7d:
                    8a:fc:ec:57:58:f6:55:f0:d9:47:86:ee:9b:b7:2a:
                    4d:d9:17:38:2f:1f:3c:72:69:dc:23:ff:47:2c:71:
                    56:81:a8:8e:ac:8d:9a:e9:cc:97:3e:36:c0:98:3d:
                    df:bd:ea:aa:9f:86:ba:29:d6:21:4a:50:59:67:dd:
                    48:14:03:12:6b:5a:7d:44:0c:c5:e9:7b:8f:14:4a:
                    2d:9c:41:86:ca:46:57:e2:d5:25:0b:3c:de:6b:ee:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:88:DB:F4:12:90:8B:B7:5A:17:61:1E:09:CF:6F:72:6A:18:37:95
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a32323a3a2f34382d3438203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:50:45:6b:6d:52:ad:f4:eb:0b:9a:db:40:7d:ae:72:d8:2f:
         40:a5:ca:bb:72:9a:4a:52:21:b4:d0:50:c5:00:08:36:5a:5d:
         c3:bd:6e:0c:50:2f:62:29:16:5a:c5:35:47:f3:cd:1a:a1:7f:
         e2:f4:c5:58:e4:be:21:dc:9f:88:29:27:22:0f:da:3a:0b:5f:
         b1:92:47:7d:3d:d8:04:ed:99:e2:10:f7:48:9c:76:fe:85:b7:
         4d:dc:de:b8:73:df:1e:f4:f9:61:64:f7:3c:3f:79:aa:47:5f:
         e8:42:57:ba:1a:f7:19:ba:9a:01:70:6b:ca:23:80:6e:d2:26:
         bb:c6:1b:1d:8e:0f:21:ee:51:cf:ba:3c:96:f9:4d:e8:d4:8d:
         ed:1b:5a:bb:9b:48:9a:f9:68:be:99:e6:73:a0:82:85:ad:fa:
         7b:5b:20:c0:b2:37:9b:a9:a1:26:bd:83:b6:19:95:bb:dd:2f:
         3f:92:d8:a1:93:93:21:c0:49:2a:ba:d6:c6:93:6f:b2:64:62:
         2f:78:b1:f2:67:7d:b5:3b:6e:c2:e7:4d:5f:8c:e4:90:5a:b4:
         d5:ad:4c:fb:a6:0c:27:95:d7:d9:18:89:a5:60:be:09:44:65:
         c7:fd:33:ef:51:9f:63:7c:3d:5a:ef:b5:0e:16:13:9d:48:34:
         7a:9b:91:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:46 2025 by rpki-client