Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3533333a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3533333a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          2gFzLqJK1pWxVzIVLKJoGet+u9umnc5fmWe/raLRJB0=
Subject key identifier:   12:BF:2E:9D:38:BC:00:72:83:6D:75:9A:F4:97:19:53:3E:27:58:9D
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       2676F2955398A74A04AE46AE987F055B13472797
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3533333a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:58:54 +0000
ROA not before:           Tue 05 Mar 2024 17:53:54 +0000
ROA not after:            Tue 04 Mar 2025 17:58:54 +0000
asID:                     52423
IP address blocks:        2803:6900:533::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:76:f2:95:53:98:a7:4a:04:ae:46:ae:98:7f:05:5b:13:47:27:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  5 17:53:54 2024 GMT
            Not After : Mar  4 17:58:54 2025 GMT
        Subject: CN=12BF2E9D38BC0072836D759AF49719533E27589D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:49:5d:97:2f:ed:a1:81:cc:45:ee:c5:35:
                    81:b1:ea:02:65:8a:bc:8d:93:2f:52:07:f2:ee:13:
                    d4:14:ac:86:99:b5:14:ee:02:c7:00:5b:8b:84:7d:
                    28:f5:35:e8:db:6a:64:87:15:61:76:ca:81:34:8e:
                    3b:52:dc:9c:b4:15:18:45:3b:e4:40:eb:69:1f:34:
                    46:3b:98:b7:06:d2:15:34:27:92:a7:37:c2:0a:2f:
                    cb:0b:d0:cf:9f:21:97:3f:55:58:e2:f5:14:54:d2:
                    2d:30:ba:d2:5f:cc:66:02:34:9b:5d:c6:7d:c5:3a:
                    a1:d7:90:d9:f1:d2:07:7b:6c:a1:6c:2d:3b:6f:af:
                    1e:87:c0:56:dc:ae:a2:23:57:a4:3e:b9:14:72:07:
                    ac:ba:9e:2d:48:ae:83:63:d7:5d:42:57:de:0f:08:
                    2b:06:9a:e9:42:d4:81:5e:8e:4e:1e:a5:82:75:78:
                    f6:0f:f2:7d:04:a0:ad:e2:d3:74:72:a9:ed:79:c2:
                    ae:2f:ff:70:ce:f5:8f:e2:cb:a0:c4:22:97:4b:19:
                    43:5e:bb:f1:7d:b6:ce:2d:ea:74:34:31:11:03:cf:
                    33:7e:8c:be:4c:be:32:b2:4f:c7:2c:58:1c:1d:5a:
                    5b:31:e9:f7:c5:f7:0d:1a:c2:2e:54:fd:1f:1d:e3:
                    06:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BF:2E:9D:38:BC:00:72:83:6D:75:9A:F4:97:19:53:3E:27:58:9D
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3533333a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:533::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:45:95:d3:94:7f:d2:d6:14:ef:3f:a6:7c:99:cd:8e:a9:1c:
         c6:ee:ab:07:eb:8c:0f:68:0b:83:e3:d8:07:cf:0b:95:9d:82:
         96:a6:b5:a0:d6:3a:db:d4:a0:27:c6:a4:7d:76:77:85:92:4a:
         aa:b0:7b:05:39:2e:c8:94:3f:6c:b4:82:3a:88:a8:cd:4c:fc:
         b2:6f:59:d5:0b:87:85:00:4a:20:5f:b0:12:50:63:03:04:20:
         6f:c4:52:22:a3:4b:dc:f9:a4:ed:de:dd:d0:1a:8a:ef:87:4c:
         d3:9f:49:8e:e1:3a:1e:89:78:b5:a9:ea:e8:ff:94:89:b6:dc:
         f8:fa:e9:5e:7c:36:49:eb:4a:4f:08:3a:62:05:db:04:d7:91:
         2d:9c:4f:f3:31:38:d1:e8:77:e5:05:e2:93:da:d7:28:e4:3f:
         c2:d0:77:c1:d2:c8:bc:20:00:a6:49:49:df:01:3c:83:ec:19:
         63:24:63:bb:25:80:84:bc:d3:11:a2:63:db:3f:84:29:1a:8d:
         31:1b:36:f9:82:73:ae:f0:12:a0:83:88:76:8e:43:1e:7c:c4:
         a4:b4:55:73:8a:bc:06:77:2d:01:fc:8d:48:ea:51:b5:f5:6d:
         19:2e:5d:31:77:1d:78:12:76:02:d0:b7:1a:ee:e4:32:ab:d1:
         05:0c:99:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:16 2024 by rpki-client on console-fra.rpki-client.org