Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3538313a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3538313a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          wtV+QRUFnvsMfDtY89lnbUny5FecyreNVvCbjkzjU2Y=
Subject key identifier:   16:7D:B2:8C:C9:78:20:5F:B0:7B:7B:DF:29:3D:0A:9B:DB:EC:75:9B
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       156FF76B2E6BC4440B9F19792B6E8EDA2D40B086
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3538313a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:20:45 +0000
ROA not before:           Tue 04 Feb 2025 18:15:45 +0000
ROA not after:            Tue 03 Feb 2026 18:20:45 +0000
asID:                     52423
IP address blocks:        2803:6900:581::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6f:f7:6b:2e:6b:c4:44:0b:9f:19:79:2b:6e:8e:da:2d:40:b0:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Feb  4 18:15:45 2025 GMT
            Not After : Feb  3 18:20:45 2026 GMT
        Subject: CN=167DB28CC978205FB07B7BDF293D0A9BDBEC759B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f8:56:d4:19:70:da:26:53:5e:7b:8c:3f:2d:
                    ea:93:df:0c:c9:d9:f9:a6:e7:4b:6b:24:31:4a:cb:
                    4c:af:65:8e:dd:64:86:27:39:24:b5:dc:e6:6e:2a:
                    a3:c3:c3:60:41:d8:c9:91:62:5c:0a:e1:ec:dc:6e:
                    18:eb:3f:f4:db:4d:bd:cf:7c:7d:e9:ab:4c:80:e2:
                    d7:9d:03:e6:47:63:22:e9:2f:b7:c4:59:6a:2e:b1:
                    0f:0d:eb:fb:b5:60:9a:3c:fb:0c:b0:52:20:29:2a:
                    12:8f:50:ed:66:5e:fc:88:63:90:d9:ed:aa:39:09:
                    9b:bf:bf:6b:36:b1:d3:44:59:d0:06:b2:29:2c:f7:
                    47:77:a0:2d:75:46:6e:89:94:74:8b:fa:c3:30:5e:
                    22:b9:71:ae:32:65:91:2c:a9:f0:4b:02:24:82:2c:
                    c4:4d:9d:01:13:ac:f7:cb:a7:3c:c9:9b:49:4f:f6:
                    51:b3:a3:c0:08:e2:90:4c:78:19:2b:60:74:73:4c:
                    be:b4:84:e5:a6:d6:28:98:dc:e0:84:d6:f9:0b:dc:
                    75:8e:fa:34:a2:e5:15:c7:04:2e:53:cd:73:95:76:
                    51:28:4d:ce:53:81:ea:17:f7:86:94:24:58:bd:8e:
                    99:a3:75:56:03:1d:7c:58:ca:07:c5:0c:1a:55:8b:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7D:B2:8C:C9:78:20:5F:B0:7B:7B:DF:29:3D:0A:9B:DB:EC:75:9B
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3538313a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:581::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:f1:50:8a:89:17:75:74:09:d9:d8:d2:17:37:36:7c:db:75:
         96:c7:0a:a1:41:81:80:17:af:0c:36:d6:5b:e0:b6:70:2c:cc:
         49:8e:28:bd:81:fe:07:8e:42:a8:e6:75:cb:29:d4:1a:a7:fa:
         67:86:4f:85:ff:b3:7a:ef:84:f3:a5:9c:2c:f3:6b:ff:c5:52:
         ec:3d:bf:47:20:d1:0d:5b:ab:4a:8a:0f:4c:68:a2:2f:8d:c0:
         3b:cd:9a:1b:fb:c0:9c:f0:aa:53:e9:57:0d:ee:ac:75:c8:68:
         1d:df:48:62:4b:da:ca:0d:bc:9a:4a:ee:2a:d7:0a:a1:f8:34:
         13:3c:f5:d8:3e:eb:ca:52:d9:c2:28:ea:01:e9:2a:6d:0f:dd:
         1a:1e:c5:f4:ca:6a:66:59:a0:f7:df:71:26:15:36:6c:4d:ef:
         4b:28:2e:a2:2f:4c:34:51:88:ee:5e:92:ce:73:12:92:9c:44:
         38:d7:f7:31:09:50:45:65:a5:bd:5c:86:df:94:f5:0d:b2:64:
         d3:1e:06:3d:c9:a6:05:92:e3:ce:f2:db:c1:c2:39:a2:34:a8:
         5b:b8:b1:6b:8b:dd:18:94:02:bd:d7:29:02:34:1f:33:df:d9:
         1d:02:25:0d:db:7f:bb:8e:c9:6b:4b:42:33:92:2a:72:c8:57:
         a3:fe:b5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:44 2025 by rpki-client