Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3330313a3a2f34382d3438203d3e20323639373330.roa
File:                     323830333a353136303a3330313a3a2f34382d3438203d3e20323639373330.roa (raw, json)
Hash identifier:          hmk+4bNndRSRXfpwi7QOjKncZyiOPBHKUyMghkTGqpk=
Subject key identifier:   6B:6B:37:06:C7:C2:5A:34:45:C3:A4:70:80:7D:3B:67:2A:5D:CF:0D
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       74C3823BA866790182FC0FFE0B6CE691B51AFCC2
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3330313a3a2f34382d3438203d3e20323639373330.roa
Signing time:             Wed 28 May 2025 19:15:00 +0000
ROA not before:           Wed 28 May 2025 19:10:00 +0000
ROA not after:            Wed 27 May 2026 19:15:00 +0000
asID:                     269730
IP address blocks:        2803:5160:301::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 02:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c3:82:3b:a8:66:79:01:82:fc:0f:fe:0b:6c:e6:91:b5:1a:fc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: May 28 19:10:00 2025 GMT
            Not After : May 27 19:15:00 2026 GMT
        Subject: CN=6B6B3706C7C25A3445C3A470807D3B672A5DCF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:3d:8f:f5:73:90:1f:df:aa:79:63:c5:0f:
                    69:d9:ae:2e:ff:38:5e:cb:55:18:76:6e:5a:25:e6:
                    84:41:0e:62:37:78:b6:1b:06:3c:98:2f:9d:44:ec:
                    a7:6f:40:b2:c8:ee:15:71:14:bc:db:7f:8c:4a:a4:
                    45:72:bf:d2:b1:4f:1e:ea:7d:58:46:30:7a:0b:89:
                    37:9c:15:12:df:74:e5:78:ef:69:75:a0:1f:d7:df:
                    15:3e:9e:d5:79:c6:f5:d8:cb:f3:86:c5:92:17:9a:
                    2a:57:bb:80:06:07:ef:52:43:34:62:3e:b9:03:c2:
                    3d:b0:00:7e:a7:94:83:d9:0e:a8:13:f1:d5:48:49:
                    09:04:a4:5f:f1:dc:08:c5:93:68:df:2d:97:45:7a:
                    d0:19:17:e1:ce:d4:49:05:fa:2d:71:e2:38:68:81:
                    9b:65:10:8e:1b:52:29:63:89:42:de:7d:d6:4b:97:
                    06:fc:14:ac:d1:14:65:fe:0d:18:a5:5e:bb:af:ca:
                    57:e2:6b:01:93:40:ac:32:4c:97:0b:b9:dd:a5:cb:
                    55:89:ce:94:18:68:79:6d:3d:71:51:8a:22:98:47:
                    49:7c:af:d9:80:5b:26:ef:ef:2e:76:d3:e9:d3:f1:
                    a8:30:3c:67:b6:ed:d7:a2:84:e0:0c:b5:56:40:ef:
                    10:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6B:37:06:C7:C2:5A:34:45:C3:A4:70:80:7D:3B:67:2A:5D:CF:0D
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3330313a3a2f34382d3438203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:301::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:37:4b:90:17:f5:fd:46:a5:9e:8e:54:b3:33:30:4c:75:
         52:57:a7:b4:93:ca:0a:0c:6b:0f:8e:9a:3c:e9:f3:69:98:2e:
         41:14:07:ca:0d:c5:58:c2:15:22:0a:78:07:38:62:25:06:3e:
         f8:72:99:2a:24:2d:c4:c2:c9:a5:01:65:5e:c0:63:48:63:5a:
         d1:df:20:01:86:ae:ff:3c:52:11:48:be:1f:68:36:dc:78:e1:
         27:e4:8a:08:cf:78:88:bb:bf:38:c6:31:71:78:2f:e8:6b:30:
         e0:1d:23:1b:ab:c2:dd:a9:45:94:f8:58:8a:f9:49:fa:1e:2e:
         cc:df:f7:42:df:a2:62:d0:e1:bc:56:15:4e:8a:12:4e:50:de:
         13:85:bb:37:61:0b:70:4a:17:7f:2c:07:f2:f7:a9:31:d1:d0:
         bc:d8:10:de:6a:47:25:7c:2e:ba:7b:b6:c7:33:15:53:bd:46:
         46:bb:ab:4f:f1:6b:40:9e:0e:18:d2:96:06:4d:81:35:62:44:
         5c:b6:bb:91:c9:bc:ae:32:5f:9f:03:f6:17:c3:e9:c9:42:1f:
         c6:f3:d9:b9:37:d0:76:0b:ee:69:0c:91:4b:bc:0f:15:14:1d:
         05:b7:d5:d6:4f:b1:2c:ff:68:c9:77:91:97:12:cc:19:2b:5a:
         60:ff:78:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:43:02 2025 by rpki-client