Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313530303a3a2f34372d3438203d3e203532343233.roa
File:                     323830333a363930303a313530303a3a2f34372d3438203d3e203532343233.roa (raw, json)
Hash identifier:          nRH5JwIBvvMiSrBRakvrRvNJ4DMkIQgZlKlyXkeHBe4=
Subject key identifier:   EA:B2:BB:EA:55:F2:21:A5:A0:97:DB:5E:C5:11:62:A5:7E:0D:6B:54
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       097DDC1552BE7E9D824E9BFEEB326E68B29A5A55
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313530303a3a2f34372d3438203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:59:00 +0000
ROA not before:           Tue 05 Mar 2024 17:54:00 +0000
ROA not after:            Tue 04 Mar 2025 17:59:00 +0000
asID:                     52423
IP address blocks:        2803:6900:1500::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7d:dc:15:52:be:7e:9d:82:4e:9b:fe:eb:32:6e:68:b2:9a:5a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  5 17:54:00 2024 GMT
            Not After : Mar  4 17:59:00 2025 GMT
        Subject: CN=EAB2BBEA55F221A5A097DB5EC51162A57E0D6B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:c6:c7:69:88:a4:84:54:92:82:21:82:6c:
                    73:64:7c:04:16:ee:79:ad:4b:86:e6:28:2b:5e:66:
                    a7:94:bd:30:43:d2:21:0d:fc:6f:c6:2f:f0:57:2a:
                    15:bc:7e:a7:08:a1:6b:73:31:9c:8f:a7:ee:7c:c4:
                    be:52:3a:8c:9a:52:88:ce:4b:fe:75:2e:0d:5a:6c:
                    4f:f1:cd:50:65:0f:34:36:46:e5:a4:b9:3a:c2:d4:
                    55:72:c1:e7:f4:62:ca:fc:f7:16:1e:09:46:5e:74:
                    ce:32:3f:9e:32:79:c0:2e:58:9f:1b:d4:5f:8c:5d:
                    46:17:2d:26:96:1e:3e:cb:66:6d:2b:ef:26:f1:e8:
                    0a:31:97:e6:29:b1:d8:d3:ca:a8:65:2b:39:7d:d7:
                    b2:fb:c5:2c:e3:d3:48:2f:cc:c3:2b:d8:bb:84:57:
                    7e:bf:c4:2f:f0:ea:d0:5e:86:c5:97:00:05:a9:4d:
                    41:03:32:2e:10:71:72:29:af:44:df:70:bd:3c:cf:
                    d5:92:95:26:ab:c8:72:33:23:4e:24:57:b7:7a:02:
                    ea:a8:4d:4d:86:d3:b7:fb:d8:db:b0:d4:6b:d6:2e:
                    f8:b7:96:40:85:a4:38:47:b9:70:30:b5:bf:89:d6:
                    f6:f5:76:ac:f3:3c:45:45:00:6b:43:56:cd:e9:9c:
                    d6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B2:BB:EA:55:F2:21:A5:A0:97:DB:5E:C5:11:62:A5:7E:0D:6B:54
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313530303a3a2f34372d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1500::/47

    Signature Algorithm: sha256WithRSAEncryption
         8e:7a:d4:b9:03:56:de:9e:c0:75:32:06:e2:4a:8c:f3:26:39:
         ae:5f:23:63:9e:3e:38:ca:a2:71:3f:ef:b6:cb:c7:77:31:ae:
         3a:f1:d3:2a:c8:54:89:fa:d4:1d:8c:69:b7:6c:37:31:e9:30:
         3f:c4:1e:3c:33:70:c4:bd:13:6a:3c:58:37:6f:18:fc:84:b2:
         9c:3c:aa:17:0a:0f:77:e8:a3:f9:a1:f5:75:e5:3d:68:74:81:
         2a:bd:84:b4:ac:60:c8:54:69:1b:e7:ac:22:5b:11:f5:08:b6:
         ee:de:c4:b5:bf:00:c8:15:c5:33:1a:2a:43:23:df:d9:d2:85:
         fa:f5:f8:52:74:16:7b:68:1c:e4:b3:e1:c8:c5:75:9f:5f:40:
         b1:ff:75:46:9c:01:60:57:d8:22:9c:96:e0:da:3e:e7:0d:be:
         bf:42:ca:3d:e7:02:c3:cf:ae:01:f5:a2:9c:dd:8d:a1:4e:9d:
         1d:53:51:6a:bd:a5:1a:31:4d:97:0d:62:2d:a8:83:eb:68:06:
         3a:cb:ea:35:02:87:e2:c8:1a:92:68:1e:f5:52:17:c6:74:ee:
         94:a0:9c:58:b5:55:16:16:9d:e8:ae:b0:bb:3c:72:89:f9:4f:
         07:bf:4e:67:3e:b0:d4:ff:b2:d4:25:96:66:ce:15:34:11:91:
         69:a5:7e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:16 2024 by rpki-client on console-fra.rpki-client.org