Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531303a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a313531303a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          DRKm0z8lObMxBF0NnZH4ZMzuivfpQs52DBLIK4phRNs=
Subject key identifier:   9D:FB:78:A8:97:36:B3:0A:5B:4D:A2:F8:13:19:E6:7D:1F:96:D4:74
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       6188354E3940B5E4ECED4367AFA7D558F17EE101
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531303a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:58:54 +0000
ROA not before:           Tue 05 Mar 2024 17:53:54 +0000
ROA not after:            Tue 04 Mar 2025 17:58:54 +0000
asID:                     52423
IP address blocks:        2803:6900:1510::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:88:35:4e:39:40:b5:e4:ec:ed:43:67:af:a7:d5:58:f1:7e:e1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  5 17:53:54 2024 GMT
            Not After : Mar  4 17:58:54 2025 GMT
        Subject: CN=9DFB78A89736B30A5B4DA2F81319E67D1F96D474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:f8:0e:f5:60:ca:9c:af:81:34:e6:8c:f6:
                    04:39:f0:2b:8e:f6:ff:9f:89:5a:9e:06:ad:9f:21:
                    cd:8b:d1:ac:87:78:0c:a5:e4:27:07:01:9a:18:d4:
                    61:18:d8:1f:de:64:7b:d3:21:08:37:1a:cd:63:dd:
                    86:52:0e:b0:92:fe:e9:71:1f:50:e8:34:e0:a9:d3:
                    5e:24:e5:70:ea:2b:73:50:c0:4c:b6:88:d3:c7:44:
                    dc:c0:48:eb:47:9c:19:28:c3:8d:fd:5e:ca:34:40:
                    e8:78:a5:08:75:9e:ed:85:11:ae:22:b3:6a:22:ac:
                    1e:1d:9e:50:34:13:ca:64:25:7e:58:a4:0f:ff:ad:
                    c7:54:77:0a:70:24:97:4b:b9:ad:80:59:e4:dc:48:
                    01:4f:74:c7:5c:06:a5:08:65:6a:c9:b6:62:8b:8d:
                    5f:78:9e:70:7c:e0:e3:5c:77:5b:d0:21:15:b1:55:
                    4b:84:7a:09:bb:30:6a:aa:5d:e2:25:24:77:d6:8a:
                    78:e9:9b:1e:0b:78:3e:59:01:cc:e9:c2:64:35:33:
                    dc:0b:19:dd:77:bc:d3:e8:65:77:f0:a3:cc:78:3c:
                    c3:f4:11:d6:db:8d:18:72:f0:14:68:b1:5c:9d:17:
                    6b:3b:ef:d3:2f:a1:8d:ce:ec:05:01:a3:1d:ff:02:
                    c1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FB:78:A8:97:36:B3:0A:5B:4D:A2:F8:13:19:E6:7D:1F:96:D4:74
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531303a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1510::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:4a:8a:59:52:02:1f:9a:5c:07:fb:e4:cf:9d:d4:be:38:d6:
         19:a9:23:ca:ef:ca:6f:81:38:f0:75:2a:d3:14:46:ad:ec:f0:
         60:d0:8e:80:a8:08:29:b8:dc:3c:8f:b7:78:46:bd:10:2b:7f:
         a5:55:a9:ff:0d:68:39:02:78:2e:d4:fb:f0:f4:ea:16:45:27:
         4a:27:16:a0:ca:4e:f9:42:43:a9:a2:a1:29:df:b0:cf:38:94:
         97:c2:cb:98:af:16:4e:82:f7:c3:31:f6:ab:05:ac:da:f2:80:
         b1:52:50:79:e7:73:b9:e5:cb:ab:03:6c:c0:d7:32:54:6c:15:
         d9:4f:85:49:59:ea:e3:9c:15:a3:d2:5e:67:01:ec:a8:58:b8:
         4a:5a:0c:aa:c8:3b:17:d4:30:9e:5d:d6:dd:36:0a:0b:8a:86:
         34:dd:9d:b7:27:4e:ea:87:c8:92:7c:af:e3:e9:8f:a8:c6:42:
         75:d5:e0:85:d9:3e:cf:55:7f:02:2c:18:a0:ee:69:d3:d7:5b:
         47:c6:00:bf:fd:81:47:97:db:12:27:ad:b4:7b:a1:ed:56:8d:
         27:48:9f:2b:3d:ef:74:b2:0e:a3:bc:39:28:87:3a:07:01:dc:
         2b:ff:60:bc:6f:06:a0:ad:8e:70:d4:75:5c:07:71:b4:09:0e:
         77:fe:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org