Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531373a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a313531373a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          DvwbwTiyNBgbQmDXgLlidqt5bJVaYwKOc3byRHr0FEk=
Subject key identifier:   D7:02:B4:5F:AE:1E:96:36:F3:D9:1D:9C:8F:26:75:87:00:A0:A1:7F
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       797CB1D180BA8427CDA730056872BADE4A76100C
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531373a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:58:58 +0000
ROA not before:           Tue 05 Mar 2024 17:53:58 +0000
ROA not after:            Tue 04 Mar 2025 17:58:58 +0000
asID:                     52423
IP address blocks:        2803:6900:1517::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7c:b1:d1:80:ba:84:27:cd:a7:30:05:68:72:ba:de:4a:76:10:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  5 17:53:58 2024 GMT
            Not After : Mar  4 17:58:58 2025 GMT
        Subject: CN=D702B45FAE1E9636F3D91D9C8F26758700A0A17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f2:f8:45:e6:38:e9:7f:1b:17:1c:11:f7:9c:
                    d4:a9:89:e0:3c:8c:73:c1:20:3b:64:0e:ce:6f:3a:
                    b7:d9:b7:d4:c7:20:ac:5f:16:1f:cf:76:5a:b5:1f:
                    dc:8e:22:42:b2:b6:50:f7:b0:ff:d9:eb:bf:42:c0:
                    47:1d:02:3c:8a:78:da:5f:b7:1f:bc:5d:0b:7f:27:
                    e0:68:59:80:a6:af:ca:91:a9:33:d8:9e:a4:31:1f:
                    ee:34:56:7e:2e:6b:12:75:19:cb:70:3c:d5:a2:2b:
                    9a:95:e9:44:2d:4e:5f:92:15:2c:58:8b:0f:bd:f4:
                    7f:db:fd:ec:e4:d3:58:89:0b:fa:de:26:1e:6e:2e:
                    aa:1a:1a:d2:36:7c:f8:ec:d9:e1:c6:3d:22:3d:82:
                    44:6c:a8:6b:f9:2a:75:e0:7c:a1:fa:71:a3:9b:1f:
                    98:59:6a:6d:bb:c2:d7:b4:61:ce:30:6d:18:db:f2:
                    ff:dd:79:8b:3d:e1:78:9b:78:73:8f:28:33:11:7f:
                    f5:aa:be:f3:2a:05:00:3d:21:ae:87:d4:4e:d9:fe:
                    05:8b:49:cf:8c:93:94:c2:1f:85:f9:2e:f3:04:06:
                    c7:75:53:50:d0:ff:b9:16:78:72:a6:53:56:f6:51:
                    eb:51:65:5b:f3:34:df:ec:10:66:5c:c5:d3:73:6b:
                    63:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:02:B4:5F:AE:1E:96:36:F3:D9:1D:9C:8F:26:75:87:00:A0:A1:7F
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531373a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1517::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:82:4b:cb:69:79:cd:1e:37:b1:b7:40:ca:da:3d:b1:ee:dc:
         69:4b:4a:3e:fc:a8:58:27:82:d1:e0:65:5c:79:84:7b:9d:6a:
         d9:df:01:3f:02:69:4b:77:92:3f:d2:dd:6b:85:fe:dc:e1:01:
         61:fb:3e:f1:21:04:c4:f9:1e:07:aa:66:dd:b7:eb:95:18:38:
         1c:86:f2:20:86:bb:49:55:d5:50:0a:56:1e:70:ad:32:48:e4:
         bc:72:aa:e9:d3:e4:d2:9b:85:77:6d:a6:b6:fd:ad:5a:d8:46:
         0a:94:d0:6b:ce:38:e1:0c:93:a5:6e:22:a1:19:92:9b:a2:21:
         4a:26:ee:5e:35:46:ae:f2:1b:44:f7:f0:3c:32:ec:fa:7e:00:
         0a:d7:45:c9:d4:ad:b8:b1:32:c4:0b:96:1a:44:27:9a:ef:23:
         33:65:2c:fa:64:64:25:0b:9e:de:12:75:f4:45:d0:53:02:aa:
         5e:94:c1:df:65:cb:dc:ed:e5:81:b6:b6:95:5d:b2:b6:74:1e:
         ab:d6:39:1c:f4:69:0b:2d:25:19:80:f8:6c:0a:22:0a:6b:93:
         7b:ce:aa:64:22:a6:2f:8f:20:2d:04:45:a2:5a:ec:be:d8:5c:
         19:6b:fc:ff:71:63:b1:cd:14:56:7f:ed:a9:98:4e:f5:e8:6c:
         17:bc:43:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org