Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3330303a3a2f34382d3438203d3e20323639373330.roa
File:                     323830333a353136303a3330303a3a2f34382d3438203d3e20323639373330.roa (raw, json)
Hash identifier:          1r7b6eAVGnFKndUoD/pbyi8nx1+fqAaI5EcTS3VN6U0=
Subject key identifier:   83:5E:C8:42:A3:AB:BB:2C:82:AA:D8:84:5F:F7:9A:9C:3D:D9:EC:FF
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       523304D45A748B860FFCF1359CA194A122EF38A4
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3330303a3a2f34382d3438203d3e20323639373330.roa
Signing time:             Thu 03 Jul 2025 04:05:00 +0000
ROA not before:           Thu 03 Jul 2025 04:00:00 +0000
ROA not after:            Thu 02 Jul 2026 04:05:00 +0000
asID:                     269730
IP address blocks:        2803:5160:300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 02:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:33:04:d4:5a:74:8b:86:0f:fc:f1:35:9c:a1:94:a1:22:ef:38:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jul  3 04:00:00 2025 GMT
            Not After : Jul  2 04:05:00 2026 GMT
        Subject: CN=835EC842A3ABBB2C82AAD8845FF79A9C3DD9ECFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:d0:33:2a:7f:7d:71:e4:13:2c:c5:e8:1d:
                    f0:ad:a8:d8:20:4b:aa:97:c9:2f:9c:e1:14:19:22:
                    92:b5:b3:54:33:c4:c6:bf:37:f5:68:61:bb:e6:3a:
                    a8:e7:fc:9f:87:6b:3e:09:5f:d6:70:21:6d:bd:57:
                    a2:e0:05:7e:a9:7c:ab:d0:5d:57:8b:88:61:44:26:
                    d1:82:96:d1:f7:4a:8f:76:d4:bf:ab:6c:83:63:7c:
                    14:6b:f9:7b:88:a9:6f:08:c7:8f:2e:b7:ab:58:a1:
                    7c:38:be:be:d4:ee:03:38:d0:52:94:0e:09:8a:0c:
                    02:03:c8:38:6d:ef:e5:ed:dc:b8:8e:c6:94:3b:9d:
                    df:a8:c5:72:32:dd:36:8f:69:23:b7:eb:69:40:4f:
                    55:6a:26:c8:37:ea:a4:53:0f:24:a2:15:09:bd:bc:
                    34:54:5d:e4:9c:2b:31:1b:47:b7:0f:59:e8:98:b1:
                    3e:da:33:a0:8a:b7:16:48:de:72:f9:a7:4d:9b:47:
                    c1:67:c9:3a:a5:71:8f:7d:0a:a1:35:c1:b9:1a:9b:
                    42:14:53:43:70:39:85:13:34:37:75:58:9d:6d:14:
                    fb:73:12:d2:d4:64:c5:eb:9c:8c:7f:48:12:ae:71:
                    ea:60:f8:58:45:00:f3:8c:da:ef:4c:30:19:e6:b7:
                    1d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5E:C8:42:A3:AB:BB:2C:82:AA:D8:84:5F:F7:9A:9C:3D:D9:EC:FF
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3330303a3a2f34382d3438203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:64:45:0c:62:90:a8:a8:f9:be:2e:a0:d6:bf:1c:3d:3a:70:
         04:fe:1e:93:50:10:2f:b3:3f:1f:2c:09:ea:9f:13:2f:75:3f:
         c2:59:48:a1:87:a0:29:e7:af:de:64:48:86:02:90:f6:62:b2:
         18:d2:1a:02:ad:11:ff:4c:2e:84:cc:43:52:7b:ab:e0:b2:05:
         1e:7f:fc:3b:0b:8e:98:a6:86:d5:e8:47:b4:ef:51:9d:cc:d3:
         53:4a:ad:08:64:be:c6:ed:46:2f:15:55:91:5d:57:2e:ba:f4:
         d5:c4:6e:c2:cb:4d:18:9c:bb:6e:5e:d5:b1:15:aa:ac:3b:5d:
         74:53:26:f7:f0:67:88:74:ab:ca:1e:90:2c:6d:76:f6:4c:60:
         46:a2:18:04:1f:05:48:5e:ec:15:d5:e8:86:8d:1a:7e:71:1f:
         f1:80:fa:3a:0e:82:0a:5f:7e:54:48:15:16:93:c1:5c:11:02:
         6e:61:9a:9e:9f:e4:04:e4:7d:cc:03:6b:f8:fa:57:07:e2:4c:
         75:b8:d7:8c:79:f7:2c:e9:31:e1:55:68:cc:f4:4b:f4:25:22:
         83:8f:e3:16:a9:e3:4d:f3:19:dc:c7:68:1a:b9:3d:eb:82:11:
         49:b1:c9:42:f8:b0:09:75:79:b0:35:9e:30:b8:b6:66:4d:3f:
         f9:f4:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:56:01 2025 by rpki-client