Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3534333a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3534333a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          0wV3LvYZCeU2+ijGSBp4lyWkVRm7cTC3EeefzQ2ein4=
Subject key identifier:   A6:58:1A:B1:2F:B0:6C:9B:85:3A:F4:7F:8E:DE:93:D0:E3:5E:39:47
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       1CA28F82FDA636C53A4FFA76244E014C26297E07
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3534333a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:58:59 +0000
ROA not before:           Tue 05 Mar 2024 17:53:59 +0000
ROA not after:            Tue 04 Mar 2025 17:58:59 +0000
asID:                     52423
IP address blocks:        2803:6900:543::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a2:8f:82:fd:a6:36:c5:3a:4f:fa:76:24:4e:01:4c:26:29:7e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  5 17:53:59 2024 GMT
            Not After : Mar  4 17:58:59 2025 GMT
        Subject: CN=A6581AB12FB06C9B853AF47F8EDE93D0E35E3947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e3:06:17:0b:9c:53:26:1b:43:e7:a9:76:33:
                    c7:86:85:b5:69:78:77:d3:cd:15:f4:c2:5c:31:7f:
                    23:95:ce:6f:3a:01:21:49:3a:7c:cd:c0:c9:20:d9:
                    b2:b7:18:36:8f:9a:fe:d9:5f:9c:50:14:7a:67:5d:
                    b0:4a:5b:07:40:b0:eb:e4:f7:10:1e:e0:fb:97:0b:
                    ea:a5:b5:aa:f4:87:a4:64:6c:79:cb:d8:37:76:76:
                    da:ec:1c:ef:5d:8b:82:27:a7:b8:1a:8f:33:1a:9d:
                    9c:0c:8b:63:f4:5a:43:0c:79:81:c3:4c:2d:03:cc:
                    ac:b3:12:66:66:7d:8f:cb:6d:6f:59:2a:5c:7b:88:
                    03:2b:00:35:9a:3d:f8:39:41:ec:28:cd:86:fb:3d:
                    60:a9:08:e8:8f:79:4e:94:a3:60:ac:02:d7:c5:78:
                    eb:a6:3f:27:d6:a2:dd:e5:60:05:25:22:c6:bd:a1:
                    0b:07:f7:6e:c6:f9:a5:22:f2:29:c9:b6:19:4e:a1:
                    8a:66:f5:a0:f5:a0:78:b5:f3:36:c5:26:38:46:d1:
                    9e:31:ef:a8:58:75:fd:01:9c:79:7a:8e:45:d5:7e:
                    48:1e:f2:55:64:b1:97:bd:12:0d:c5:6d:3d:05:2b:
                    77:89:e5:92:64:12:75:f6:3f:df:94:2e:fb:50:e6:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:58:1A:B1:2F:B0:6C:9B:85:3A:F4:7F:8E:DE:93:D0:E3:5E:39:47
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3534333a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:543::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:86:ff:a4:81:77:09:e5:7d:d1:1c:fc:91:52:c9:a4:e5:29:
         02:52:83:53:c1:45:8f:58:2b:62:8d:61:6f:99:fd:c1:10:9b:
         4c:69:01:cb:5d:4b:5e:e8:e9:dd:c2:7f:77:de:b0:a9:a9:6d:
         c0:d8:3e:cb:13:06:77:77:75:14:5d:03:3f:a4:b9:ac:17:78:
         07:21:2e:e5:96:8b:0b:19:bf:36:be:51:2e:04:98:ef:90:45:
         22:aa:58:f8:18:38:6b:09:a2:05:77:2c:85:46:36:70:2f:df:
         fd:49:50:51:8d:8a:92:9c:5f:07:84:4e:27:7e:6f:68:7c:b8:
         f9:aa:a2:0b:2c:b9:1f:83:df:f0:da:e8:6b:cd:98:1c:a8:32:
         14:34:bb:fa:c8:39:f6:18:fe:24:c9:bb:5d:3f:de:4b:86:2b:
         30:49:01:f4:0b:dc:30:ee:6b:73:08:f0:b4:37:56:bb:9e:45:
         f3:b4:06:78:b8:5f:ad:4b:80:6c:43:5a:a0:ce:c9:45:86:2e:
         b2:5a:24:27:3c:9f:ec:c9:c4:0b:11:7f:6e:1a:1a:39:6d:7f:
         fc:2f:a3:a7:e9:2f:74:1f:72:28:e8:af:0c:49:ee:4b:58:c6:
         74:89:48:55:ce:fe:10:68:4e:72:62:e0:6e:ed:b5:d4:9c:df:
         86:58:03:bb
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUHKKPgv2mNsU6T/p2JE4BTCYpfgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIyQTE5MDQxRjdBRDhEMEI0Rjk3RDZEREFGQzk5QzI1
OTAyNzZBQjAeFw0yNDAzMDUxNzUzNTlaFw0yNTAzMDQxNzU4NTlaMDMxMTAvBgNV
BAMTKEE2NTgxQUIxMkZCMDZDOUI4NTNBRjQ3RjhFREU5M0QwRTM1RTM5NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk4wYXC5xTJhtD56l2M8eGhbVp
eHfTzRX0wlwxfyOVzm86ASFJOnzNwMkg2bK3GDaPmv7ZX5xQFHpnXbBKWwdAsOvk
9xAe4PuXC+qltar0h6RkbHnL2Dd2dtrsHO9di4Inp7gajzManZwMi2P0WkMMeYHD
TC0DzKyzEmZmfY/LbW9ZKlx7iAMrADWaPfg5QewozYb7PWCpCOiPeU6Uo2CsAtfF
eOumPyfWot3lYAUlIsa9oQsH927G+aUi8inJthlOoYpm9aD1oHi18zbFJjhG0Z4x
76hYdf0BnHl6jkXVfkge8lVksZe9Eg3FbT0FK3eJ5ZJkEnX2P9+ULvtQ5gzLAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUplgasS+wbJuFOvR/jt6T0ONeOUcwHwYDVR0j
BBgwFoAUUioZBB962NC0+X1t2vyZwlkCdqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MDcyQ0M3QUM5OTM1QTk2QUVDREMzQjE1NkYwQkUyODVB
QzBEMkYzRTJCMjY0NjZGODdEN0MzOTYzOUZFN0M5LzAvNTIyQTE5MDQxRjdBRDhE
MEI0Rjk3RDZEREFGQzk5QzI1OTAyNzZBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjJBMTkwNDFGN0FEOEQwQjRG
OTdENkREQUZDOTlDMjU5MDI3NkFCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTA3MkNDN0FDOTkzNUE5NkFFQ0RDM0IxNTZGMEJFMjg1QUMwRDJGM0Uy
QjI2NDY2Rjg3RDdDMzk2MzlGRTdDOS8wLzMyMzgzMDMzM2EzNjM5MzAzMDNhMzUz
NDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMjM0MzIzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgDaQAFQzANBgkqhkiG9w0BAQsFAAOCAQEAQYb/pIF3CeV90Rz8kVLJpOUpAlKD
U8FFj1grYo1hb5n9wRCbTGkBy11LXujp3cJ/d96wqaltwNg+yxMGd3d1FF0DP6S5
rBd4ByEu5ZaLCxm/Nr5RLgSY75BFIqpY+Bg4awmiBXcshUY2cC/f/UlQUY2Kkpxf
B4ROJ35vaHy4+aqiCyy5H4Pf8Nroa82YHKgyFDS7+sg59hj+JMm7XT/eS4YrMEkB
9AvcMO5rcwjwtDdWu55F87QGeLhfrUuAbENaoM7JRYYuslokJzyf7MnECxF/bhoa
OW1//C+jp+kvdB9yKOivDEnuS1jGdIlIVc7+EGhOcmLgbu211JzfhlgDuw==
-----END CERTIFICATE-----
Generated at Thu May 2 17:40:16 2024 by rpki-client on console-fra.rpki-client.org