Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313430303a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a313430303a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          +V3xnt2rkyMop/+gvPO6zzauH0SaP4mwegjcgMR1Jgk=
Subject key identifier:   BF:E1:62:76:48:E6:59:FA:A7:85:1C:E3:D4:65:A8:B9:7F:67:92:E3
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       7F0A7E877E9E3B1A642FE08E552D9A420FB48472
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313430303a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:58:52 +0000
ROA not before:           Tue 05 Mar 2024 17:53:52 +0000
ROA not after:            Tue 04 Mar 2025 17:58:52 +0000
asID:                     52423
IP address blocks:        2803:6900:1400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0a:7e:87:7e:9e:3b:1a:64:2f:e0:8e:55:2d:9a:42:0f:b4:84:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  5 17:53:52 2024 GMT
            Not After : Mar  4 17:58:52 2025 GMT
        Subject: CN=BFE1627648E659FAA7851CE3D465A8B97F6792E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4c:5e:d7:3b:2e:29:13:57:bc:84:42:85:9f:
                    fc:3c:fd:6c:87:0c:b1:d3:40:32:4b:f9:17:b7:f1:
                    68:d1:2b:e0:b5:f3:36:7d:ce:6c:ac:a3:0e:94:cf:
                    97:03:c3:fa:7f:19:81:78:1b:12:52:0f:00:8f:9b:
                    2b:07:e3:43:fe:6e:4e:c8:93:79:0f:8f:91:e4:3d:
                    37:29:ca:78:2b:44:db:98:83:6c:6f:e4:8a:f1:89:
                    cd:76:51:b6:af:4f:5e:30:03:17:09:7a:0d:5b:6b:
                    b6:81:10:a8:3a:2f:e6:81:31:2f:99:f6:e5:51:c8:
                    59:58:bc:be:be:9b:65:5e:4b:44:b2:c9:65:d9:f9:
                    62:11:55:02:7a:e0:2a:5c:5a:31:d7:93:e5:2c:fc:
                    40:26:7e:37:af:6a:a1:d8:7e:25:7b:b7:15:3d:22:
                    75:ec:c5:a3:26:19:13:b9:e3:88:24:75:df:57:97:
                    c3:13:45:23:85:6b:87:6e:5d:5f:87:5f:7b:b7:bb:
                    68:42:5a:45:74:67:17:5e:d0:3d:da:cf:2e:ea:b8:
                    06:81:d3:63:ea:4a:24:55:1b:61:fd:f7:d3:71:d9:
                    24:79:f1:94:ef:a8:39:64:d1:ef:70:7f:ee:90:c9:
                    d3:b6:9a:3c:3d:d3:4b:c4:be:7c:4f:09:2e:78:44:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E1:62:76:48:E6:59:FA:A7:85:1C:E3:D4:65:A8:B9:7F:67:92:E3
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313430303a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1400::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:95:b5:9b:13:42:f7:76:d9:01:bb:44:01:4d:53:a9:43:7e:
         54:8f:02:c9:e9:f3:ba:8e:19:cb:42:c6:de:b2:e5:98:1b:f8:
         14:db:fb:fd:b5:62:63:2a:f5:78:b0:7e:a7:a7:19:20:a2:f9:
         39:26:29:e5:e7:6a:13:08:81:5c:00:90:92:13:85:2b:25:ac:
         93:d0:16:9c:f9:28:ea:98:5d:0b:99:d0:2f:73:e5:a3:00:40:
         05:62:f9:3b:ee:a8:0c:f8:7c:f1:56:cf:fc:cb:10:13:80:49:
         89:2a:8e:ad:42:b1:b0:cb:09:11:a5:4f:0b:26:62:eb:5d:1a:
         d8:b7:6d:43:37:32:5b:e9:e1:a6:9e:39:8f:a1:eb:11:67:ba:
         15:16:bf:d6:d4:e4:ad:96:a4:a3:72:f8:88:04:d5:55:69:b2:
         4f:15:57:39:12:ae:49:51:ea:b1:24:c6:09:ea:15:3f:81:96:
         5e:e4:72:80:dc:35:39:16:0c:b4:79:75:93:c3:b3:c2:16:ad:
         b0:03:96:57:84:87:0d:66:48:1b:38:c3:ee:3e:12:9f:93:08:
         e1:8e:a2:8c:88:25:0c:6a:7f:63:b7:b3:69:a8:09:9a:a5:c0:
         e1:85:e4:b7:e1:02:66:13:96:89:9e:14:3a:88:c4:47:ec:74:
         6a:39:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:16 2024 by rpki-client on console-fra.rpki-client.org