Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3631363a3a2f34372d3438203d3e203532343233.roa
File:                     323830333a363930303a3631363a3a2f34372d3438203d3e203532343233.roa (raw, json)
Hash identifier:          2Qm14RRld30Toor/vKbZPlX0nUGaEtBChrrlVXWPaaM=
Subject key identifier:   F6:6F:28:E1:4F:8A:95:25:59:F6:02:4D:40:0F:62:3F:A2:87:5F:2C
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       0B56316ACBC62859846E5B1C5630227F76158CA1
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3631363a3a2f34372d3438203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:58:54 +0000
ROA not before:           Tue 05 Mar 2024 17:53:54 +0000
ROA not after:            Tue 04 Mar 2025 17:58:54 +0000
asID:                     52423
IP address blocks:        2803:6900:616::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:56:31:6a:cb:c6:28:59:84:6e:5b:1c:56:30:22:7f:76:15:8c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  5 17:53:54 2024 GMT
            Not After : Mar  4 17:58:54 2025 GMT
        Subject: CN=F66F28E14F8A952559F6024D400F623FA2875F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:df:49:b4:21:b8:ad:ef:c0:04:99:94:00:
                    ff:f1:8f:3e:22:65:5e:bd:fd:19:fc:a0:a5:b5:7e:
                    52:70:f5:c1:e0:d7:54:80:22:af:9b:58:fc:bc:35:
                    70:65:78:ea:48:de:8e:c6:b0:df:99:b0:c4:48:19:
                    0e:ce:32:ae:f9:18:ca:29:fc:38:d5:4c:c2:87:5e:
                    69:ef:1f:6b:7b:fe:73:ba:31:b7:51:98:70:fe:30:
                    ce:8b:b4:bc:7e:eb:d1:ee:8e:c1:60:63:72:49:b7:
                    61:ec:6a:1f:96:6b:04:44:e5:aa:6c:31:5d:00:55:
                    be:9f:cb:79:aa:d1:ef:e0:30:5e:b4:56:e2:f4:67:
                    13:7d:67:0d:32:36:65:e1:92:ce:48:1c:cd:99:be:
                    04:67:01:7d:91:1b:f8:cd:3a:87:36:b3:fd:30:e6:
                    86:47:d1:d6:2a:79:53:13:eb:2a:ba:ea:60:7c:cc:
                    d5:c3:b2:76:bf:4c:63:57:93:23:02:8e:ed:ce:b3:
                    7b:42:b6:79:c5:ca:74:a0:0a:c0:88:e7:21:4d:d6:
                    75:06:7b:41:cd:10:24:f7:a1:4c:eb:1d:af:7d:e3:
                    89:35:ce:64:61:fd:29:d7:c0:8b:d2:26:26:d7:4d:
                    7c:94:1f:84:4f:8e:68:2f:a1:98:95:b5:fd:67:ee:
                    4a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6F:28:E1:4F:8A:95:25:59:F6:02:4D:40:0F:62:3F:A2:87:5F:2C
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3631363a3a2f34372d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:616::/47

    Signature Algorithm: sha256WithRSAEncryption
         45:0c:1c:16:40:98:92:6e:98:a0:7e:23:f7:60:7a:63:6c:9e:
         06:99:b8:bf:42:6a:e3:d1:57:48:14:2c:cc:51:e1:16:ec:82:
         af:af:22:fd:2b:f1:88:82:c5:a3:4f:46:d3:4e:be:02:72:42:
         eb:a1:8c:93:9a:b5:89:fa:0e:49:93:48:82:ab:55:4f:e6:3a:
         e6:ff:ac:57:de:15:d5:fe:bf:da:71:b9:05:9c:78:25:2c:b6:
         c2:f2:67:5c:c7:23:32:81:98:c4:42:bf:12:2c:3c:c5:b2:da:
         c5:c7:f2:4e:36:24:58:4b:26:6b:51:fd:03:04:f0:3a:09:f9:
         4d:69:94:37:43:5b:2a:77:1a:6b:4b:d6:eb:f2:09:9a:ff:79:
         22:99:07:f8:97:77:3b:c1:be:b0:95:ee:8e:56:7f:2f:89:9a:
         07:f4:88:4a:d6:04:f2:3b:5b:33:76:1c:ac:c0:9d:49:5e:8e:
         f7:13:64:8c:a7:c0:93:56:9e:46:aa:e8:39:97:f5:08:c5:87:
         76:24:9d:10:fb:45:54:eb:b8:80:9f:f4:a6:37:ca:00:6d:74:
         ae:78:66:4c:b5:5f:61:47:ce:5a:5d:d4:1e:41:7e:ef:5a:a8:
         28:84:3e:3e:19:3a:64:77:ff:6f:86:3f:a9:69:6c:e1:bb:42:
         50:8f:a8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org