Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3534333a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3534333a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          Fq9j+XYq5W7Bh4TgxEV3WdQC5bXL657I4aXxzg4SsiY=
Subject key identifier:   32:B1:46:98:89:D0:B6:A2:04:64:E0:34:AE:AE:AE:72:B8:A4:B9:4E
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       7913B1ADB93BB7C39D951985B2F6196F896C1421
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3534333a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:20:51 +0000
ROA not before:           Tue 04 Feb 2025 18:15:51 +0000
ROA not after:            Tue 03 Feb 2026 18:20:51 +0000
asID:                     52423
IP address blocks:        2803:6900:543::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:13:b1:ad:b9:3b:b7:c3:9d:95:19:85:b2:f6:19:6f:89:6c:14:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Feb  4 18:15:51 2025 GMT
            Not After : Feb  3 18:20:51 2026 GMT
        Subject: CN=32B1469889D0B6A20464E034AEAEAE72B8A4B94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:20:53:62:69:32:af:1f:c0:a6:d9:06:ce:
                    61:31:66:37:4e:25:ff:e6:cc:13:36:a7:22:d1:c2:
                    6b:d9:1f:e9:09:db:ee:5c:cc:7d:d4:dd:b0:05:8b:
                    18:ca:18:fb:c9:5a:45:bb:44:a6:c8:1e:fb:c0:85:
                    ae:6c:4a:e2:74:9b:2c:a5:24:9a:d3:56:5d:34:71:
                    50:dc:b9:25:4a:6e:2c:e9:67:22:aa:41:92:53:01:
                    fa:a9:7d:d0:97:73:f2:4b:81:4e:47:84:ee:2b:9a:
                    eb:9e:18:41:77:43:64:18:87:f4:b5:de:dc:76:1c:
                    96:52:dd:40:c7:e7:96:dd:aa:24:db:de:2e:7e:ff:
                    1e:ad:18:99:c1:41:96:f9:ad:39:34:db:d1:e8:e8:
                    bf:0c:c8:97:15:f7:31:b7:7a:fe:df:f7:ac:70:44:
                    2d:64:5a:0b:81:ea:e9:54:25:9f:cd:c6:24:55:09:
                    b4:0e:96:5e:50:68:a3:98:9f:10:5e:e0:d9:cc:23:
                    9c:b2:81:ce:e2:5a:9e:c7:ea:2a:ee:42:0f:6c:cf:
                    7e:3f:17:7b:96:f4:43:79:9f:70:65:8c:c3:38:91:
                    b2:0c:36:63:90:7b:66:4c:6e:26:bc:04:5b:0a:75:
                    3b:a1:6d:b6:3e:c2:44:3f:a8:08:d0:66:98:b9:a1:
                    ca:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B1:46:98:89:D0:B6:A2:04:64:E0:34:AE:AE:AE:72:B8:A4:B9:4E
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3534333a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:543::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:66:95:2f:5b:15:b3:f6:17:d6:8f:4d:8a:1c:32:94:09:d5:
         ff:c9:b0:19:dc:bd:64:4f:4a:44:fe:0f:10:85:24:40:b5:7c:
         a8:37:97:74:8b:e0:e7:b8:10:e0:37:dd:7f:ec:e0:a6:01:63:
         4f:5f:84:2d:5c:e7:9f:02:2d:da:17:72:7d:ae:ed:e8:2c:ef:
         7e:14:ad:8f:93:2d:f4:f3:bb:d0:1c:02:1b:54:86:ab:f2:2f:
         59:3b:2f:90:e6:fa:bd:ae:e1:2d:5a:06:20:85:0a:91:70:c3:
         d0:c1:63:99:35:ba:37:a5:60:2a:10:02:f4:1f:91:62:bd:d0:
         3b:be:15:64:44:b4:2d:e4:a1:e5:d7:bd:72:da:f5:15:76:f5:
         d3:3a:72:17:eb:e9:98:e6:a8:be:22:f5:34:3f:db:ef:41:b2:
         21:ac:55:bb:1b:38:59:e3:aa:8e:91:c1:fb:50:ef:a3:82:2a:
         76:0a:71:bd:55:ca:42:26:cd:cb:4a:15:14:2b:c4:a1:d5:dd:
         21:20:34:94:58:eb:19:0f:c4:bf:72:08:bb:f6:29:10:ff:30:
         ed:ae:5d:c0:5b:b6:16:3d:2c:ba:ee:97:a2:39:0a:8a:6e:c2:
         37:46:6d:db:d6:8d:22:7c:4c:e0:28:6f:bc:7e:98:44:3a:e8:
         c6:46:12:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:13 2025 by rpki-client