Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3532303a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3532303a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          O+EHt6RWAf9SCo+ESqVEsGs2kxi9JC+405Y7TJAu7xI=
Subject key identifier:   9F:A3:94:0F:44:83:E6:FB:A8:7F:68:CB:AE:31:F2:A8:59:C3:59:CE
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       67443FFDB99213D9F312B0C78AE921CE2F32F1EF
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3532303a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:20:44 +0000
ROA not before:           Tue 04 Feb 2025 18:15:44 +0000
ROA not after:            Tue 03 Feb 2026 18:20:44 +0000
asID:                     52423
IP address blocks:        2803:6900:520::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:44:3f:fd:b9:92:13:d9:f3:12:b0:c7:8a:e9:21:ce:2f:32:f1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Feb  4 18:15:44 2025 GMT
            Not After : Feb  3 18:20:44 2026 GMT
        Subject: CN=9FA3940F4483E6FBA87F68CBAE31F2A859C359CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:68:fd:2f:e5:b9:4d:48:64:93:83:99:36:8a:
                    c3:95:49:79:9c:f9:bb:e5:62:87:c8:1d:11:01:7e:
                    bd:30:ff:f5:95:c8:83:b1:cb:b6:08:90:80:3c:d1:
                    92:4a:a4:b4:e8:fa:c7:93:dd:de:50:df:a9:98:c8:
                    5a:2b:8a:d8:4a:ba:c6:6d:3a:92:63:75:52:1c:45:
                    85:ad:4c:06:ed:75:22:21:ea:4c:1c:47:1b:19:04:
                    dd:69:9d:6c:8a:f3:aa:b4:fd:c3:48:10:3a:be:42:
                    a0:3d:41:1d:f6:c8:39:3c:d2:29:0c:f4:ca:21:49:
                    77:db:ac:a2:f3:a8:b8:fb:df:a6:1a:d8:0c:7a:d2:
                    3e:ee:26:08:f5:89:77:ef:cd:fc:b8:50:4a:cb:d6:
                    cc:d4:14:c0:52:53:33:1f:4a:30:e6:ad:bf:b1:0f:
                    2f:9b:1b:ba:ec:15:32:87:66:f4:24:96:98:e2:38:
                    20:f8:61:0a:2d:6d:a1:1e:b3:70:c5:76:1a:d8:e8:
                    36:9e:e9:5b:5f:a8:e2:6e:0f:b3:06:a0:2c:e9:50:
                    a1:77:36:56:a1:87:e2:3d:f7:ac:68:14:01:d5:be:
                    70:70:d0:bb:a2:17:68:26:89:fc:5d:e6:ba:cf:71:
                    b8:a9:eb:ef:ea:0b:bb:f1:8d:7f:7a:ec:39:da:f9:
                    e2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A3:94:0F:44:83:E6:FB:A8:7F:68:CB:AE:31:F2:A8:59:C3:59:CE
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3532303a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:520::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:cf:6c:14:2c:ee:12:ad:d4:c3:a9:ed:39:38:e0:c5:ec:84:
         eb:f4:fd:49:73:82:01:0a:f3:c3:92:6b:81:76:d3:e3:92:02:
         92:a5:fd:67:5d:3c:f2:ea:84:52:d9:72:7f:eb:b4:7c:68:d5:
         89:0d:00:f0:83:d3:e9:d1:33:cc:3e:7b:a3:dd:25:d6:17:53:
         5d:66:1b:2b:48:ed:53:29:a8:52:1b:44:d5:8b:4e:96:7d:02:
         20:29:e6:24:86:45:e5:e0:1a:4b:a0:b8:6b:a6:8e:21:97:60:
         cd:60:b2:38:8b:c1:30:23:15:36:ef:4c:ea:29:4e:4f:fe:06:
         8b:70:39:be:74:b9:66:22:cc:94:9a:2f:a6:7a:f6:43:e2:4e:
         ed:1e:c2:2b:3a:5d:dc:05:82:9b:9a:11:f5:2c:4e:46:26:c4:
         d2:dc:01:8b:43:f9:98:cc:04:7c:0d:aa:57:d9:8c:a7:64:5a:
         77:70:59:5e:63:ee:9b:7d:db:2f:2b:f5:b9:72:7f:51:6f:32:
         c5:15:93:0e:4e:c4:16:43:91:40:8b:67:96:83:d5:04:29:fb:
         57:61:f6:8f:d1:5f:46:c9:d8:a1:c3:15:84:74:1f:4e:97:48:
         aa:c4:55:41:22:40:5c:ee:45:77:2a:ca:10:df:09:57:bd:8b:
         9b:8c:72:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:09:32 2025 by rpki-client