Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3536313a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3536313a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          S751kRrt4HqC6h8Jlq+k7o/RIIA4ZY+oemrvw26HKho=
Subject key identifier:   81:EF:4C:E4:2E:FC:3F:EF:6F:FD:C1:DE:94:9F:ED:7C:16:BB:97:3B
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       6FE5CEAE9F9ACC0D13B0DB07C99F59AE25DC6AF5
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3536313a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:58:51 +0000
ROA not before:           Tue 05 Mar 2024 17:53:51 +0000
ROA not after:            Tue 04 Mar 2025 17:58:51 +0000
asID:                     52423
IP address blocks:        2803:6900:561::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e5:ce:ae:9f:9a:cc:0d:13:b0:db:07:c9:9f:59:ae:25:dc:6a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  5 17:53:51 2024 GMT
            Not After : Mar  4 17:58:51 2025 GMT
        Subject: CN=81EF4CE42EFC3FEF6FFDC1DE949FED7C16BB973B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:39:aa:30:a8:18:08:84:e2:fe:ce:02:ad:
                    e2:3a:27:6a:06:fc:bf:9d:79:b3:94:d7:05:a1:d6:
                    86:49:76:05:43:77:18:1f:b7:10:1a:d3:9f:b4:ae:
                    d1:4b:fd:5a:c0:42:16:7b:58:3a:56:b7:54:3b:8e:
                    61:fa:e7:0b:41:11:dd:c2:1b:cb:16:ed:76:d7:6c:
                    cd:b8:aa:2e:a4:e4:9f:fd:c1:35:f6:7a:0d:bc:5a:
                    f2:cc:a0:db:06:bd:e2:83:a7:f2:b0:ba:5a:7a:31:
                    51:6f:ba:96:5d:11:a1:38:c2:a8:d8:f9:d4:a1:56:
                    df:8e:2f:79:05:d4:5f:b5:64:80:ed:c7:5f:37:e2:
                    e9:f9:c9:f9:1a:b2:b2:a1:3a:1f:d6:26:1f:51:d7:
                    da:ef:bb:73:bc:70:48:56:fe:27:62:f7:b1:f1:1b:
                    2d:0e:9c:36:d5:c9:7b:0e:f1:f7:8c:63:26:4b:dc:
                    0d:2f:bd:c9:35:4b:d6:2c:2d:54:a8:13:30:0a:24:
                    74:76:9c:24:27:ce:bb:98:28:9b:02:1c:f2:c7:f0:
                    e6:25:05:b4:ed:cf:5f:13:da:55:38:9a:04:37:45:
                    a8:c5:9b:5c:ac:39:82:0b:44:ad:31:16:82:f9:99:
                    85:41:11:17:55:1c:f9:da:95:70:f7:66:20:99:3a:
                    b5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EF:4C:E4:2E:FC:3F:EF:6F:FD:C1:DE:94:9F:ED:7C:16:BB:97:3B
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3536313a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:561::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:04:ab:92:9f:bb:3e:0c:ed:4b:35:ce:e3:43:33:52:8a:a8:
         81:82:56:3c:e2:29:02:bb:8d:4b:6f:ec:07:44:23:ca:fe:a0:
         79:ff:60:38:2f:1b:5c:ff:b0:50:65:d8:fe:f8:52:99:8f:94:
         06:fa:be:86:ad:35:e2:be:8d:d5:83:e3:54:8a:44:7c:35:e4:
         49:4e:68:70:91:99:c6:55:60:9a:f6:b1:80:70:ce:a8:29:b3:
         6f:64:88:d1:37:70:d0:7a:fe:01:0d:a0:b3:b1:bb:26:e8:db:
         43:32:e6:18:d5:3c:39:ee:06:55:12:f3:64:fd:ba:51:04:d6:
         87:f4:87:c4:e0:a6:ec:dd:0c:d0:0b:5b:d5:89:bf:bc:ca:e6:
         5c:f1:f6:c5:a1:d0:2f:06:e0:75:ff:44:fb:f7:c6:a1:82:e1:
         3e:d7:1a:28:86:5c:09:68:35:23:f6:9b:1e:28:90:11:a6:ff:
         d8:76:b3:42:4d:0b:b5:61:55:04:ca:d4:c4:f5:99:32:b3:98:
         64:e8:0d:5f:29:e0:cf:34:4e:11:ba:2c:5e:50:d4:86:73:1d:
         1c:4a:91:38:b3:21:e8:37:3d:90:46:a4:79:0a:b4:3e:ab:0b:
         fa:5c:34:04:7c:c8:c6:16:7e:67:1d:46:4b:7a:6f:fd:53:bc:
         18:14:24:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org