Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531393a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a313531393a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          bXpD/rRGjmgYrVmidfO6Ovoj8TBVWRjx9JxQE29P7jo=
Subject key identifier:   16:29:B3:87:1C:78:05:F1:EE:FF:13:49:4E:2E:D0:4B:01:4C:00:6B
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       744B6B5010FE67BCD5CF0180B4C27A37B78B2C58
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531393a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:59:00 +0000
ROA not before:           Tue 05 Mar 2024 17:54:00 +0000
ROA not after:            Tue 04 Mar 2025 17:59:00 +0000
asID:                     52423
IP address blocks:        2803:6900:1519::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4b:6b:50:10:fe:67:bc:d5:cf:01:80:b4:c2:7a:37:b7:8b:2c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  5 17:54:00 2024 GMT
            Not After : Mar  4 17:59:00 2025 GMT
        Subject: CN=1629B3871C7805F1EEFF13494E2ED04B014C006B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:4f:37:36:ad:80:54:55:d3:d4:8c:2d:16:
                    41:a0:dc:8e:65:60:dd:70:5d:08:8e:78:89:da:8c:
                    88:04:94:04:85:b8:03:84:b8:30:94:35:77:9b:b0:
                    de:ee:7b:ec:a3:79:90:96:bc:8a:30:ae:78:64:45:
                    d9:bd:6f:54:7b:41:dd:43:f6:99:b6:b5:01:5c:a2:
                    a6:f9:04:99:ef:11:2a:b5:d0:c7:02:62:3b:f1:b7:
                    60:3c:fc:78:41:29:22:21:54:30:88:fd:15:e1:68:
                    c0:82:7d:e4:bd:9c:29:a6:e3:a9:76:3c:18:5d:64:
                    b2:04:ed:1b:2d:93:dd:d2:71:0e:1e:99:92:8a:d7:
                    17:7b:7a:99:2a:d3:92:5b:23:73:fb:3b:5c:1f:a0:
                    20:13:ff:25:0c:dc:3e:16:0c:3e:18:45:2d:1b:a3:
                    86:04:0f:c9:eb:22:39:a6:7d:2c:80:fa:67:3c:03:
                    98:51:81:11:f4:38:12:fd:bc:75:52:28:80:97:91:
                    de:3e:d0:fb:39:95:67:13:2c:d8:1a:af:94:40:bb:
                    4b:39:b7:ad:55:9d:7c:4f:7b:03:8f:56:cb:7b:d3:
                    59:9e:da:50:7e:a3:4e:a2:e2:a3:1f:51:de:4c:b3:
                    64:4a:1e:56:c0:08:ae:34:9b:33:12:d3:e6:3e:f4:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:29:B3:87:1C:78:05:F1:EE:FF:13:49:4E:2E:D0:4B:01:4C:00:6B
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531393a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1519::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:72:5e:73:46:bb:38:8c:dc:d1:fb:70:58:9d:e2:7e:c9:b6:
         02:4b:48:29:44:67:56:b3:4b:d6:b0:96:62:11:d0:29:85:ac:
         56:ea:97:6e:e1:85:32:82:48:7e:ba:44:ce:fa:13:71:96:84:
         9e:cd:6b:ce:e0:f5:8b:29:fb:44:8b:f1:47:48:20:a3:81:35:
         1d:4a:07:39:fe:51:71:9e:7b:df:79:a0:42:ea:18:1a:55:fe:
         95:8f:60:30:9e:fc:e4:57:ab:f5:a2:ba:9d:70:65:99:b9:c6:
         62:24:b5:53:bf:01:50:e7:2f:bb:32:56:d8:34:e0:bd:ac:7e:
         d6:47:a4:63:1f:73:fc:f0:6f:56:4b:eb:fb:72:b8:93:bf:09:
         ca:ef:c2:1c:1a:60:14:6f:11:6f:fe:e0:3b:a9:86:bf:c5:b1:
         04:d2:1e:15:8f:59:cf:8a:f3:3f:00:ff:44:5b:f6:df:09:1c:
         c8:17:bf:50:63:cf:d0:ae:dc:9e:3d:c9:02:b9:75:38:70:97:
         97:82:d9:a2:29:f2:e6:e4:04:75:e1:e6:7d:86:15:46:d2:db:
         15:bd:c0:59:85:3e:1e:b7:19:49:a8:ba:44:02:4d:4d:8a:67:
         f8:4a:45:99:62:41:67:1d:06:14:63:34:7f:21:a7:1a:b4:cc:
         a7:2f:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:16 2024 by rpki-client on console-fra.rpki-client.org