Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3538313a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3538313a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          IiPUHjnz9bsAMpKD7ouXihXYmCmOk9PKxnwuZQECA5w=
Subject key identifier:   60:B9:41:0B:EA:AF:E7:6D:87:26:DA:D2:FE:B4:34:B2:52:7F:25:86
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       3A440812FDDBDEBC8C25C7B73E18D4CEE76AACE0
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3538313a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:59:00 +0000
ROA not before:           Tue 05 Mar 2024 17:54:00 +0000
ROA not after:            Tue 04 Mar 2025 17:59:00 +0000
asID:                     52423
IP address blocks:        2803:6900:581::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:44:08:12:fd:db:de:bc:8c:25:c7:b7:3e:18:d4:ce:e7:6a:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  5 17:54:00 2024 GMT
            Not After : Mar  4 17:59:00 2025 GMT
        Subject: CN=60B9410BEAAFE76D8726DAD2FEB434B2527F2586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:6d:aa:b4:03:a2:a4:f4:a3:c1:7b:ed:bb:
                    04:4d:65:05:f0:ed:6b:63:ab:89:e6:e4:dc:c9:bb:
                    ec:c2:f5:59:1f:b4:65:27:08:1a:00:74:31:48:d9:
                    39:80:0c:9b:28:02:a6:1a:ae:b3:63:4a:cc:5e:4a:
                    a1:f2:db:b0:73:85:cd:54:7f:d1:0f:3f:7c:33:e1:
                    62:0b:b4:8d:93:01:a7:46:10:05:69:a4:82:d8:70:
                    f6:b1:5d:13:71:db:7c:40:5d:77:eb:4a:a7:ff:de:
                    76:35:8d:71:4a:78:06:19:68:1e:49:79:7c:d7:5e:
                    29:4c:91:ae:e1:aa:5f:88:91:44:56:b9:fb:44:db:
                    71:40:ca:16:dd:10:27:d3:57:98:0f:ae:fe:3e:8a:
                    0b:d4:2c:3f:a8:47:3c:39:fb:b6:c0:8a:e0:e1:6f:
                    f2:a2:bf:e1:5e:96:9d:d3:42:6b:2a:b0:be:05:0b:
                    7a:96:d9:1d:5f:eb:1f:ca:ac:75:1c:f8:e5:81:07:
                    2b:4f:b0:14:a3:5a:42:cf:74:a9:06:0e:c1:d1:60:
                    4c:34:3b:3f:c8:f9:1d:bf:c6:4c:eb:62:99:2d:7b:
                    23:b2:f7:9d:5f:ad:9f:44:6c:a5:49:d9:49:4f:87:
                    27:d7:1a:7e:6e:c3:4b:aa:9c:cd:c0:9b:bc:0f:d5:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B9:41:0B:EA:AF:E7:6D:87:26:DA:D2:FE:B4:34:B2:52:7F:25:86
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3538313a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:581::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:36:d3:51:75:a8:65:a9:52:06:62:a1:20:b5:8f:4c:fe:eb:
         a0:e1:fe:3c:8a:be:ab:bb:1e:71:48:ae:c1:df:2f:db:0c:75:
         6d:8e:ed:49:83:34:7b:4d:8e:22:0a:b8:80:f3:33:6c:01:cb:
         e2:84:cf:6e:23:cf:7f:1e:0e:cb:bd:13:13:0b:d1:32:68:fb:
         72:34:70:a9:d2:70:f6:ab:0f:3f:e9:2a:2e:35:6d:3d:99:c5:
         ac:a5:73:7e:d6:13:54:e2:7b:5d:9f:0d:8c:71:a8:80:d0:31:
         ac:ec:e2:fa:97:5d:47:d7:7c:dc:3a:90:4b:dc:9e:43:73:b2:
         33:f2:e1:83:62:0c:b3:15:f2:d3:ba:bd:04:9b:f3:b3:3c:fb:
         7a:20:0a:39:61:3c:58:5f:96:7d:a4:9e:56:fa:30:ec:58:19:
         b5:e0:0b:d1:1f:9d:b9:4b:c5:a4:93:e4:f0:2b:47:ec:2d:33:
         19:c8:ab:ce:29:b7:32:5a:ec:8a:7c:bf:e8:88:7e:f7:04:77:
         fc:d0:40:46:62:ae:4f:6e:b9:87:3c:02:49:6f:df:e9:42:c8:
         b0:19:a6:c0:b7:3a:48:60:e9:9c:16:b0:d3:86:dc:9a:7b:15:
         fe:f1:ae:35:1f:3a:8b:3c:e6:f9:d4:9c:91:f1:46:12:78:b0:
         d9:e5:22:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org