Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313430303a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a313430303a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          HbhoWoidEr5uJ6UcJJrYV810frH9pLxK1DgkAioGtlY=
Subject key identifier:   31:65:4E:E4:A2:6F:43:D0:43:A7:93:30:D2:CB:8C:CD:A0:44:27:3B
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       5B5F79C7E0746F21DBF66CF92FF48923D1BD7A4B
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313430303a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:20:43 +0000
ROA not before:           Tue 04 Feb 2025 18:15:43 +0000
ROA not after:            Tue 03 Feb 2026 18:20:43 +0000
asID:                     52423
IP address blocks:        2803:6900:1400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5f:79:c7:e0:74:6f:21:db:f6:6c:f9:2f:f4:89:23:d1:bd:7a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Feb  4 18:15:43 2025 GMT
            Not After : Feb  3 18:20:43 2026 GMT
        Subject: CN=31654EE4A26F43D043A79330D2CB8CCDA044273B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:37:37:fb:5c:c9:e6:af:08:5f:bf:7d:23:bc:
                    fd:f2:ca:d4:fb:00:80:22:86:a3:9e:73:9b:f5:9b:
                    c4:13:e4:01:76:8a:b6:4f:0f:77:bc:4a:30:22:2b:
                    5a:05:ea:73:f0:9d:69:32:26:ae:71:d5:2a:e3:a5:
                    52:a7:14:4a:70:4c:58:8c:1e:3b:c7:b3:cd:de:96:
                    4f:18:ca:04:25:e5:7f:2c:d0:e8:8a:6a:c2:40:5b:
                    e7:8b:64:aa:e4:ef:a6:3d:90:fb:66:c0:dc:0b:28:
                    f4:d9:0b:e6:f3:a5:ca:4f:b1:d5:08:f5:5b:f7:07:
                    74:2a:7f:0b:1b:67:cd:fa:2b:82:75:fd:01:be:b8:
                    2c:73:80:b7:6d:94:2d:4f:33:7a:4f:b5:e4:b8:7f:
                    6d:45:37:14:9d:78:e2:b6:90:f2:8b:20:24:48:3b:
                    ef:19:4c:43:a2:b6:99:27:3f:32:32:35:bc:55:53:
                    8e:e6:d2:55:9f:b4:3c:1b:dd:27:e3:c3:4f:e4:76:
                    33:d7:6d:19:2a:ba:1e:73:53:57:ef:21:12:a7:cc:
                    d2:b1:8c:22:ad:44:51:dd:cd:7d:48:17:57:eb:78:
                    92:9b:55:5a:e4:bf:7f:05:c3:6c:3b:a1:88:b5:64:
                    5a:13:54:2b:16:6d:04:89:ba:f7:a9:74:d7:fe:a4:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:65:4E:E4:A2:6F:43:D0:43:A7:93:30:D2:CB:8C:CD:A0:44:27:3B
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313430303a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1400::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:c3:37:97:a8:79:ab:b7:c7:b1:2a:f3:c1:0b:00:a2:35:0b:
         6a:e3:f1:4d:34:b8:f8:d7:ca:c3:59:1c:a1:57:40:09:f9:1c:
         e8:f2:c4:7b:aa:60:d9:20:73:81:85:e1:67:07:c1:64:ed:85:
         4b:2a:3d:c5:29:54:6f:8e:c5:a9:e2:5f:e5:70:d0:02:31:a4:
         99:51:38:32:62:8c:8a:74:63:e4:d6:d6:cb:18:bd:a9:40:8e:
         d2:29:0e:7d:e8:ac:90:5c:cf:5a:33:ed:c0:dc:a0:fb:24:55:
         fe:79:da:49:01:fd:ec:56:79:5d:ff:53:28:f3:16:d5:05:5a:
         59:66:aa:38:e1:3b:4f:e9:42:63:fe:bc:9b:b8:89:54:18:7d:
         7a:9b:e7:15:9f:aa:94:20:ff:ee:c6:2a:50:ac:90:e4:34:a7:
         93:34:3f:2a:e3:aa:95:b1:c1:a2:31:72:a0:9d:12:a7:b8:05:
         3a:ae:d6:3a:4f:d4:ba:b8:ac:ab:f4:1f:e6:3d:e2:b2:a6:9c:
         2f:6b:73:c2:77:7f:c4:73:12:c6:05:70:ba:3c:04:15:ac:aa:
         ba:b6:82:68:78:20:46:4a:dc:60:2d:ac:bb:44:c7:9f:ee:9c:
         84:28:0d:1b:c3:80:16:ed:00:bb:0f:21:68:35:c4:19:c4:94:
         f3:f1:fc:4c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUW195x+B0byHb9mz5L/SJI9G9ekswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIyQTE5MDQxRjdBRDhEMEI0Rjk3RDZEREFGQzk5QzI1
OTAyNzZBQjAeFw0yNTAyMDQxODE1NDNaFw0yNjAyMDMxODIwNDNaMDMxMTAvBgNV
BAMTKDMxNjU0RUU0QTI2RjQzRDA0M0E3OTMzMEQyQ0I4Q0NEQTA0NDI3M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNzf7XMnmrwhfv30jvP3yytT7
AIAihqOec5v1m8QT5AF2irZPD3e8SjAiK1oF6nPwnWkyJq5x1SrjpVKnFEpwTFiM
HjvHs83elk8YygQl5X8s0OiKasJAW+eLZKrk76Y9kPtmwNwLKPTZC+bzpcpPsdUI
9Vv3B3QqfwsbZ836K4J1/QG+uCxzgLdtlC1PM3pPteS4f21FNxSdeOK2kPKLICRI
O+8ZTEOitpknPzIyNbxVU47m0lWftDwb3Sfjw0/kdjPXbRkquh5zU1fvIRKnzNKx
jCKtRFHdzX1IF1freJKbVVrkv38Fw2w7oYi1ZFoTVCsWbQSJuvepdNf+pOi5AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUMWVO5KJvQ9BDp5Mw0suMzaBEJzswHwYDVR0j
BBgwFoAUUioZBB962NC0+X1t2vyZwlkCdqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MDcyQ0M3QUM5OTM1QTk2QUVDREMzQjE1NkYwQkUyODVB
QzBEMkYzRTJCMjY0NjZGODdEN0MzOTYzOUZFN0M5LzAvNTIyQTE5MDQxRjdBRDhE
MEI0Rjk3RDZEREFGQzk5QzI1OTAyNzZBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjJBMTkwNDFGN0FEOEQwQjRG
OTdENkREQUZDOTlDMjU5MDI3NkFCLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTA3MkNDN0FDOTkzNUE5NkFFQ0RDM0IxNTZGMEJFMjg1QUMwRDJGM0Uy
QjI2NDY2Rjg3RDdDMzk2MzlGRTdDOS8wLzMyMzgzMDMzM2EzNjM5MzAzMDNhMzEz
NDMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzQzMjMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKANpABQAMA0GCSqGSIb3DQEBCwUAA4IBAQCCwzeXqHmrt8exKvPBCwCiNQtq
4/FNNLj418rDWRyhV0AJ+Rzo8sR7qmDZIHOBheFnB8Fk7YVLKj3FKVRvjsWp4l/l
cNACMaSZUTgyYoyKdGPk1tbLGL2pQI7SKQ596KyQXM9aM+3A3KD7JFX+edpJAf3s
Vnld/1Mo8xbVBVpZZqo44TtP6UJj/rybuIlUGH16m+cVn6qUIP/uxipQrJDkNKeT
ND8q46qVscGiMXKgnRKnuAU6rtY6T9S6uKyr9B/mPeKyppwva3PCd3/EcxLGBXC6
PAQVrKq6toJoeCBGStxgLay7RMef7pyEKA0bw4AW7QC7DyFoNcQZxJTz8fxM
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:57:53 2025 by rpki-client