Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531343a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a313531343a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          7QnVcqPETmB2q49CdmDPiQ/ELBR8JRmYR8Jln6VCKEU=
Subject key identifier:   97:D4:7C:39:4D:87:21:89:E8:F0:80:5C:FC:54:7C:FE:1F:85:68:A0
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       6918C041036B57BB3BF9EA209A9E1FC58C253DA4
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531343a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:58:56 +0000
ROA not before:           Tue 05 Mar 2024 17:53:56 +0000
ROA not after:            Tue 04 Mar 2025 17:58:56 +0000
asID:                     52423
IP address blocks:        2803:6900:1514::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:18:c0:41:03:6b:57:bb:3b:f9:ea:20:9a:9e:1f:c5:8c:25:3d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  5 17:53:56 2024 GMT
            Not After : Mar  4 17:58:56 2025 GMT
        Subject: CN=97D47C394D872189E8F0805CFC547CFE1F8568A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:62:99:8d:73:26:27:cb:74:39:9d:cd:71:
                    68:d3:c6:9f:37:4a:8f:2f:db:ff:a7:b7:5b:5c:c8:
                    36:a7:42:47:c6:7a:2c:b5:fc:a8:2a:e6:c2:88:8a:
                    d1:32:39:95:c8:4a:5c:a1:be:4e:27:8b:76:ac:10:
                    6f:8e:68:f9:47:d1:ea:79:d3:af:ad:13:b0:a8:c3:
                    1f:c2:c9:ce:c7:8a:9a:ab:81:85:e9:b4:19:b7:20:
                    b1:bb:83:7b:dc:d1:ba:6a:41:06:57:9c:cb:62:72:
                    76:10:ca:00:53:92:63:7c:d9:e6:06:48:80:8c:83:
                    ad:1b:91:ee:2d:23:a6:36:a3:3d:cc:6e:bb:44:e3:
                    6c:35:a5:15:ac:0d:c2:8a:ce:03:97:bb:36:c9:6c:
                    62:ca:7f:1e:49:de:67:87:ad:19:c2:c2:24:12:3b:
                    08:e1:81:41:80:54:f3:04:1f:87:42:8b:9c:a9:74:
                    15:f8:ea:35:b7:f5:3b:86:1a:1e:e3:40:6a:8b:50:
                    ee:91:4e:94:fc:fb:c2:7b:5c:05:4d:4f:14:e6:cf:
                    f9:ac:35:67:9c:76:bd:7b:d1:6f:db:1b:fa:de:ef:
                    21:6a:ef:43:47:de:1b:09:33:fe:8c:07:35:eb:bf:
                    a5:6f:bb:4e:b7:94:2d:1a:0b:03:26:f1:28:e5:5e:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D4:7C:39:4D:87:21:89:E8:F0:80:5C:FC:54:7C:FE:1F:85:68:A0
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531343a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1514::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:df:92:50:d0:7b:00:87:97:3b:9b:7c:cc:28:a2:58:b7:5b:
         66:4b:62:8c:9a:b7:64:c5:60:41:ac:96:c7:38:37:40:6c:1c:
         07:cc:3c:e1:ad:5f:32:c7:a5:97:2b:6c:f3:29:fb:10:3a:0e:
         d4:f5:c3:c9:90:1a:a7:69:24:d7:44:0a:ee:93:c5:0c:06:01:
         78:2c:60:73:d3:4b:66:ad:e7:0d:67:78:95:26:38:60:77:7f:
         d3:2b:6d:f6:fe:8e:7f:2a:70:6b:a8:fd:d5:f4:b5:87:cb:4d:
         ee:64:0b:78:85:7f:cc:73:36:09:3a:01:61:a1:c0:6f:73:0a:
         61:ee:2a:9f:74:c1:f2:d3:ac:64:00:f2:03:b1:c1:ee:53:10:
         71:86:5f:44:87:eb:85:e8:a3:79:d2:54:a9:13:81:a3:29:7a:
         a7:1a:0c:b3:9c:98:a8:a9:3e:2b:0b:2b:04:71:c6:02:d5:de:
         7f:e5:02:1f:2d:70:e0:79:2f:80:41:c9:a5:1f:84:af:40:3f:
         40:34:cf:cc:6e:3a:a0:b9:54:e6:ac:a1:e7:5a:35:12:59:ff:
         c9:6d:ef:8c:4b:12:06:d8:85:ec:0d:a4:79:97:9c:dc:66:22:
         07:58:84:4f:1e:de:4f:d1:97:ba:f8:d7:8b:3c:ca:09:e7:a7:
         61:cb:63:45
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUaRjAQQNrV7s7+eogmp4fxYwlPaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIyQTE5MDQxRjdBRDhEMEI0Rjk3RDZEREFGQzk5QzI1
OTAyNzZBQjAeFw0yNDAzMDUxNzUzNTZaFw0yNTAzMDQxNzU4NTZaMDMxMTAvBgNV
BAMTKDk3RDQ3QzM5NEQ4NzIxODlFOEYwODA1Q0ZDNTQ3Q0ZFMUY4NTY4QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6l2KZjXMmJ8t0OZ3NcWjTxp83
So8v2/+nt1tcyDanQkfGeiy1/Kgq5sKIitEyOZXISlyhvk4ni3asEG+OaPlH0ep5
06+tE7Cowx/Cyc7HipqrgYXptBm3ILG7g3vc0bpqQQZXnMticnYQygBTkmN82eYG
SICMg60bke4tI6Y2oz3MbrtE42w1pRWsDcKKzgOXuzbJbGLKfx5J3meHrRnCwiQS
OwjhgUGAVPMEH4dCi5ypdBX46jW39TuGGh7jQGqLUO6RTpT8+8J7XAVNTxTmz/ms
NWecdr170W/bG/re7yFq70NH3hsJM/6MBzXrv6Vvu063lC0aCwMm8SjlXrn3AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUl9R8OU2HIYno8IBc/FR8/h+FaKAwHwYDVR0j
BBgwFoAUUioZBB962NC0+X1t2vyZwlkCdqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MDcyQ0M3QUM5OTM1QTk2QUVDREMzQjE1NkYwQkUyODVB
QzBEMkYzRTJCMjY0NjZGODdEN0MzOTYzOUZFN0M5LzAvNTIyQTE5MDQxRjdBRDhE
MEI0Rjk3RDZEREFGQzk5QzI1OTAyNzZBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjJBMTkwNDFGN0FEOEQwQjRG
OTdENkREQUZDOTlDMjU5MDI3NkFCLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTA3MkNDN0FDOTkzNUE5NkFFQ0RDM0IxNTZGMEJFMjg1QUMwRDJGM0Uy
QjI2NDY2Rjg3RDdDMzk2MzlGRTdDOS8wLzMyMzgzMDMzM2EzNjM5MzAzMDNhMzEz
NTMxMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzQzMjMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKANpABUUMA0GCSqGSIb3DQEBCwUAA4IBAQAL35JQ0HsAh5c7m3zMKKJYt1tm
S2KMmrdkxWBBrJbHODdAbBwHzDzhrV8yx6WXK2zzKfsQOg7U9cPJkBqnaSTXRAru
k8UMBgF4LGBz00tmrecNZ3iVJjhgd3/TK232/o5/KnBrqP3V9LWHy03uZAt4hX/M
czYJOgFhocBvcwph7iqfdMHy06xkAPIDscHuUxBxhl9Eh+uF6KN50lSpE4GjKXqn
GgyznJioqT4rCysEccYC1d5/5QIfLXDgeS+AQcmlH4SvQD9ANM/MbjqguVTmrKHn
WjUSWf/Jbe+MSxIG2IXsDaR5l5zcZiIHWIRPHt5P0Ze6+NeLPMoJ56dhy2NF
-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org