Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313533313a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a313533313a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          EeogH9wrkV2fNGn1+cFXrpRSUV2AJZkWumwAOSyFbw0=
Subject key identifier:   48:FA:BA:A5:DA:FB:8C:11:A1:85:4A:B9:2E:DA:84:0B:F5:03:0F:1F
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       6A37986F4BD8B5CF7DEB895D63C3BC819CE7502E
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313533313a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:58:56 +0000
ROA not before:           Tue 05 Mar 2024 17:53:56 +0000
ROA not after:            Tue 04 Mar 2025 17:58:56 +0000
asID:                     52423
IP address blocks:        2803:6900:1531::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:37:98:6f:4b:d8:b5:cf:7d:eb:89:5d:63:c3:bc:81:9c:e7:50:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  5 17:53:56 2024 GMT
            Not After : Mar  4 17:58:56 2025 GMT
        Subject: CN=48FABAA5DAFB8C11A1854AB92EDA840BF5030F1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:10:3a:08:04:70:de:60:a0:e3:8f:6e:28:db:
                    e1:01:64:02:d2:66:c4:1b:90:fa:fb:1e:12:46:9d:
                    c0:96:12:49:55:a2:ff:05:3e:9d:cd:12:0d:cb:97:
                    fb:1c:d6:f2:2d:54:e6:33:29:83:5e:6e:a7:81:38:
                    c6:52:b0:8f:73:c9:2a:b7:34:70:3e:6d:79:92:af:
                    9c:8a:e5:d4:e5:88:47:2c:b2:2f:4d:ec:d2:d1:dd:
                    dd:c6:a5:a6:fe:f4:04:15:10:0b:a3:ae:3f:1c:a3:
                    c9:eb:79:ab:28:d6:69:0e:63:a3:ea:4c:49:58:70:
                    46:7e:a6:0f:32:87:54:2c:73:ec:1f:6a:25:8c:c9:
                    32:5b:45:de:26:75:64:96:cb:d5:21:a4:8f:9e:6b:
                    91:06:62:45:54:85:21:ee:f1:ab:15:d8:0d:64:53:
                    e6:f9:f7:6a:16:0e:84:3e:f7:0a:d4:8f:df:c1:42:
                    09:8d:29:e1:cb:2b:20:6e:00:29:21:74:fe:de:30:
                    a9:03:52:aa:e1:9a:ca:bc:be:9d:bc:93:68:45:db:
                    53:a9:e1:48:a3:17:d5:bd:15:67:13:19:5a:eb:97:
                    ba:08:4e:92:a3:f1:32:e4:b4:97:a5:be:92:40:1b:
                    50:22:0b:b6:1d:a9:75:33:fa:f2:1a:b3:86:5d:16:
                    d5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FA:BA:A5:DA:FB:8C:11:A1:85:4A:B9:2E:DA:84:0B:F5:03:0F:1F
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313533313a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1531::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:0e:62:ad:50:ac:a1:ae:64:87:2a:65:d0:51:46:af:75:b6:
         a4:76:3e:d7:ae:2a:0c:78:0e:90:e1:ce:7f:25:b9:f3:23:cc:
         6d:d3:81:7d:07:a5:aa:38:b9:5c:a1:6d:32:23:43:24:80:94:
         17:84:97:93:98:16:24:a2:c5:d7:33:2d:2f:cc:d4:cf:00:74:
         dc:c7:97:db:ef:43:9b:c0:2f:6b:17:31:de:8e:87:bb:32:67:
         75:9d:f7:cc:f8:fa:79:a8:56:12:5e:e1:79:06:3e:29:1c:60:
         a7:88:b2:dd:18:cf:5b:42:ea:da:08:1b:5c:ea:ad:f8:99:e2:
         26:53:b5:f5:f9:96:b0:23:8e:b3:7e:97:b7:60:e2:98:1b:c3:
         8a:88:99:54:e5:29:a4:a2:da:8a:ff:a7:2b:89:ea:b3:9f:72:
         2a:8c:15:04:ad:6d:4e:7d:d7:e9:82:ea:b5:0d:74:20:a3:da:
         5d:ce:d3:91:c4:46:a3:64:2f:8c:29:17:b8:5e:48:76:90:45:
         4e:38:25:e9:ad:64:55:0a:80:bc:bc:e6:26:42:70:5f:c9:60:
         a6:af:3f:76:13:96:cb:6e:60:98:1b:48:77:ba:38:98:ea:b0:
         ca:6e:2c:fe:88:66:04:f1:0c:f3:8b:c0:66:44:e4:00:ae:9a:
         46:e9:82:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org