Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/323830333a323363303a3a2f33322d3438203d3e203532343434.roa
File:                     323830333a323363303a3a2f33322d3438203d3e203532343434.roa (raw, json)
Hash identifier:          w9Lmsnod5bnFunXE9lNeHFCsKagtHZTl5EUAweXu1kY=
Subject key identifier:   89:52:89:5F:FD:27:66:08:74:4D:56:80:05:E6:54:13:14:37:11:8F
Certificate issuer:       /CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52
Certificate serial:       4DB88498D7D4AE27DE3701CE59D97AC43AF4788E
Authority key identifier: EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/323830333a323363303a3a2f33322d3438203d3e203532343434.roa
Signing time:             Tue 05 Mar 2024 18:09:07 +0000
ROA not before:           Tue 05 Mar 2024 18:04:07 +0000
ROA not after:            Tue 04 Mar 2025 18:09:07 +0000
asID:                     52444
IP address blocks:        2803:23c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b8:84:98:d7:d4:ae:27:de:37:01:ce:59:d9:7a:c4:3a:f4:78:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52
        Validity
            Not Before: Mar  5 18:04:07 2024 GMT
            Not After : Mar  4 18:09:07 2025 GMT
        Subject: CN=8952895FFD276608744D568005E654131437118F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:ab:4a:36:fc:d6:26:99:1d:73:d1:10:12:
                    0c:06:ce:36:b2:43:06:1b:c3:dc:1e:8c:83:cd:91:
                    ef:fb:53:3e:27:af:49:07:8a:2a:5d:66:9b:3b:98:
                    55:0b:1d:a2:48:ff:18:ff:8a:4f:af:5c:d8:c8:67:
                    7d:e0:b5:4e:3d:da:f4:6a:14:00:52:a3:bd:dc:5c:
                    9a:14:46:35:ee:dc:cd:54:7f:43:48:29:6b:fd:4a:
                    68:d5:f5:24:05:6a:da:a5:8b:3a:d3:d0:00:6e:f9:
                    38:e1:d4:cc:1a:fa:ca:f9:8b:bc:a5:8a:ef:e8:d3:
                    3a:91:a8:c4:78:21:ff:97:d5:d7:a0:6b:c4:69:d4:
                    61:dc:18:10:d5:7e:09:ea:60:dd:74:bd:c3:a9:62:
                    41:87:26:64:bb:5d:89:a7:8d:75:d2:db:47:f4:f8:
                    55:22:9b:38:eb:82:a2:cb:e7:0a:e3:35:33:6d:2d:
                    6a:40:3a:f3:96:9a:c9:85:5e:7c:30:9e:43:60:0a:
                    d3:2d:2c:6f:80:7d:74:c0:1d:f9:09:08:79:dc:bd:
                    f3:96:85:cd:d1:a0:6c:8a:76:d3:e2:1d:53:b2:6f:
                    6d:8c:bb:bc:9c:64:77:17:8a:2c:92:fe:e8:50:43:
                    25:8e:9d:8f:7a:17:c0:5b:13:34:42:ce:54:81:65:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:52:89:5F:FD:27:66:08:74:4D:56:80:05:E6:54:13:14:37:11:8F
            X509v3 Authority Key Identifier:
                keyid:EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/323830333a323363303a3a2f33322d3438203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:23c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:44:1b:eb:b3:c0:f1:35:a2:73:0b:57:03:11:f9:57:ba:e7:
         44:eb:94:90:eb:69:f6:6e:7e:4d:16:80:93:10:a7:4a:d0:84:
         7d:66:2d:75:8b:e7:4b:fb:cf:8b:87:28:d5:b0:86:34:da:a9:
         88:32:ac:c2:db:f2:50:13:85:16:08:1f:30:36:8f:2d:a8:0a:
         4d:c0:0e:21:9d:57:a7:37:49:4c:7f:7f:8b:60:7c:89:8b:f9:
         43:6b:13:6a:7d:33:83:74:0e:fa:1e:a4:3c:f6:d7:36:5f:62:
         18:61:7e:2e:c2:81:5e:d3:f7:ec:72:85:46:fa:c2:04:b5:61:
         38:76:0e:b8:a8:0f:d4:82:df:56:c5:a2:e7:0d:8e:10:68:fc:
         47:be:f2:55:87:0e:98:c3:d5:aa:ab:ae:82:87:85:e0:9b:1c:
         86:b1:2d:2b:70:97:b0:44:2d:03:6d:c2:7e:87:5a:a9:b1:f1:
         8c:e7:7d:1e:63:7a:d4:90:07:f6:8d:5e:69:c8:34:a2:a9:30:
         25:eb:22:8e:bc:61:d2:f7:21:36:d1:96:e2:fa:30:bb:52:26:
         e1:25:8f:da:42:59:60:66:fa:7c:67:16:ae:a9:9a:b5:1e:9e:
         e4:d9:03:a9:92:26:64:da:6a:1c:50:eb:64:92:21:19:6c:b4:
         87:0b:c8:b8
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUTbiEmNfUrifeNwHOWdl6xDr0eI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM1MkE3QjA2QzAwQTc5QTYxQ0JGMkM3MTIzMkFGNjFE
M0REQUY1MjAeFw0yNDAzMDUxODA0MDdaFw0yNTAzMDQxODA5MDdaMDMxMTAvBgNV
BAMTKDg5NTI4OTVGRkQyNzY2MDg3NDRENTY4MDA1RTY1NDEzMTQzNzExOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1bqtKNvzWJpkdc9EQEgwGzjay
QwYbw9wejIPNke/7Uz4nr0kHiipdZps7mFULHaJI/xj/ik+vXNjIZ33gtU492vRq
FABSo73cXJoURjXu3M1Uf0NIKWv9SmjV9SQFatqlizrT0ABu+Tjh1Mwa+sr5i7yl
iu/o0zqRqMR4If+X1dega8Rp1GHcGBDVfgnqYN10vcOpYkGHJmS7XYmnjXXS20f0
+FUimzjrgqLL5wrjNTNtLWpAOvOWmsmFXnwwnkNgCtMtLG+AfXTAHfkJCHncvfOW
hc3RoGyKdtPiHVOyb22Mu7ycZHcXiiyS/uhQQyWOnY96F8BbEzRCzlSBZbUXAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUiVKJX/0nZgh0TVaABeZUExQ3EY8wHwYDVR0j
BBgwFoAU7FKnsGwAp5phy/LHEjKvYdPdr1IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTUzQjVGODAxN0U2RTQ3Mjk0MzU1RDkwQ0NCQTBDMjI0
QTE1NjQ2REQ5NzAxN0Y4RkUwQkJBQkQ3NkUxQUI5LzAvRUM1MkE3QjA2QzAwQTc5
QTYxQ0JGMkM3MTIzMkFGNjFEM0REQUY1Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzUyQTdCMDZDMDBBNzlBNjFD
QkYyQzcxMjMyQUY2MUQzRERBRjUyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU1M0I1RjgwMTdFNkU0NzI5NDM1NUQ5MENDQkEwQzIyNEExNTY0NkRE
OTcwMTdGOEZFMEJCQUJENzZFMUFCOS8wLzMyMzgzMDMzM2EzMjMzNjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAyPAMA0G
CSqGSIb3DQEBCwUAA4IBAQA6RBvrs8DxNaJzC1cDEflXuudE65SQ62n2bn5NFoCT
EKdK0IR9Zi11i+dL+8+LhyjVsIY02qmIMqzC2/JQE4UWCB8wNo8tqApNwA4hnVen
N0lMf3+LYHyJi/lDaxNqfTODdA76HqQ89tc2X2IYYX4uwoFe0/fscoVG+sIEtWE4
dg64qA/Ugt9WxaLnDY4QaPxHvvJVhw6Yw9Wqq66Ch4XgmxyGsS0rcJewRC0DbcJ+
h1qpsfGM530eY3rUkAf2jV5pyDSiqTAl6yKOvGHS9yE20Zbi+jC7UibhJY/aQllg
Zvp8ZxauqZq1Hp7k2QOpkiZk2mocUOtkkiEZbLSHC8i4
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org