Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3630323a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3630323a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          nUSXLAp7NgM+g8FY4IMfrC1HcYXXPKOt1hrb/rRNbK4=
Subject key identifier:   B7:41:3A:0A:DB:A1:96:4A:0B:45:CA:D6:E6:30:4D:1D:50:4A:37:35
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       3E523786D8051734EA0B1812922ABE3CB852BE4F
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3630323a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:20:41 +0000
ROA not before:           Tue 04 Feb 2025 18:15:41 +0000
ROA not after:            Tue 03 Feb 2026 18:20:41 +0000
asID:                     52423
IP address blocks:        2803:6900:602::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:52:37:86:d8:05:17:34:ea:0b:18:12:92:2a:be:3c:b8:52:be:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Feb  4 18:15:41 2025 GMT
            Not After : Feb  3 18:20:41 2026 GMT
        Subject: CN=B7413A0ADBA1964A0B45CAD6E6304D1D504A3735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:57:b7:6f:27:8d:12:6c:3b:b1:fc:43:0b:
                    b7:a5:13:78:0e:74:dc:92:36:98:7d:de:1e:ec:6f:
                    a7:9e:0b:76:0c:ab:62:8d:d3:3b:1b:b0:c0:c4:b8:
                    e5:75:56:95:2a:37:e7:21:19:7d:f4:67:3a:1e:6d:
                    a6:8d:1f:b0:13:fb:1a:b2:8d:e0:c5:f8:7a:6e:4a:
                    d7:d1:60:be:77:2b:37:06:58:2d:15:f7:50:f1:28:
                    20:18:c2:e1:9d:32:41:56:9a:11:1b:b1:66:ee:86:
                    76:3e:ed:a0:2d:c5:28:3e:89:c5:6c:96:df:97:d8:
                    72:ca:f3:b6:d2:76:d6:3f:69:32:d0:c2:f3:2b:3d:
                    d5:51:be:8f:86:b2:28:30:77:aa:30:f3:4d:fe:6f:
                    ec:22:18:99:c3:b3:07:f1:c3:05:61:05:21:61:0c:
                    fb:1d:e8:46:48:7c:4c:f4:6a:0c:cf:6c:d3:01:cd:
                    e6:ca:dd:41:40:49:4e:b7:ff:f1:66:11:26:1f:7d:
                    1b:1e:92:c3:b9:04:bf:63:a3:11:43:46:82:6d:0c:
                    9f:59:b7:0c:f8:a6:f4:15:ca:eb:ba:9c:a9:d7:f3:
                    66:55:c6:5a:63:fc:ea:69:42:eb:f4:e9:43:f3:14:
                    11:c3:c5:17:f9:37:12:bc:25:6b:82:9c:2f:0e:61:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:41:3A:0A:DB:A1:96:4A:0B:45:CA:D6:E6:30:4D:1D:50:4A:37:35
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3630323a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:602::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:c5:f1:12:a5:2c:66:34:ac:83:83:e2:01:ec:d6:82:73:9f:
         b4:9c:47:47:f0:31:10:52:0f:ac:cb:63:67:c0:ad:f9:b7:31:
         25:dc:c4:a9:31:b9:d9:77:20:9a:8b:25:2f:52:06:01:80:f7:
         ad:bf:8f:17:05:3c:e6:0f:e4:c6:ce:78:b2:19:0d:e3:5c:58:
         d2:19:aa:8f:68:53:5c:30:ce:d7:c6:5d:25:b5:f1:5f:9b:4b:
         4b:73:12:ca:e2:14:10:61:72:fa:d6:e0:c3:0b:bf:b6:1b:72:
         95:03:eb:61:5f:bc:24:55:b8:85:f2:df:b7:68:14:7c:0d:ce:
         71:cb:5c:b1:cb:09:6c:ca:b2:ee:c9:c6:b4:f0:f4:16:e3:4a:
         95:41:b1:a8:55:8b:27:88:a5:bf:59:6d:11:2c:60:ca:2e:a3:
         ea:30:78:cd:d9:bd:e4:4a:8d:db:44:09:e9:ea:fa:28:a2:aa:
         6c:79:11:7f:b6:bc:42:54:71:56:3e:b4:47:36:6e:99:e8:ba:
         85:67:77:dc:8e:bb:d8:7d:e8:24:16:b4:99:02:38:ec:c9:c1:
         1d:23:17:59:76:aa:d0:be:02:00:48:64:39:5c:b1:0f:2c:e0:
         21:03:7d:dc:12:03:bd:11:05:8b:34:3a:a0:26:73:0e:23:db:
         1e:28:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:12 2025 by rpki-client