Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333034303a3a2f34342d3434203d3e20323639373330.roa
File:                     323830333a353136303a333034303a3a2f34342d3434203d3e20323639373330.roa (raw, json)
Hash identifier:          RiJAgeDHLeNmqyzYnep6dbOGON3nNUUiscIWsCEEZ5k=
Subject key identifier:   B5:19:0E:42:15:94:F7:08:B8:D5:A9:DF:12:CB:8E:80:65:96:12:12
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       24CA0D8EF62AE0199988EEE255EDE2A31B8CF86A
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333034303a3a2f34342d3434203d3e20323639373330.roa
Signing time:             Mon 29 Sep 2025 19:15:00 +0000
ROA not before:           Mon 29 Sep 2025 19:10:00 +0000
ROA not after:            Mon 28 Sep 2026 19:15:00 +0000
asID:                     269730
IP address blocks:        2803:5160:3040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ca:0d:8e:f6:2a:e0:19:99:88:ee:e2:55:ed:e2:a3:1b:8c:f8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Sep 29 19:10:00 2025 GMT
            Not After : Sep 28 19:15:00 2026 GMT
        Subject: CN=B5190E421594F708B8D5A9DF12CB8E8065961212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:5e:da:84:36:e8:c1:2d:cc:ac:4f:33:09:93:
                    50:64:1d:b5:6b:13:94:05:12:b1:be:e9:27:d5:d2:
                    db:b3:4c:0b:c3:17:12:be:45:c5:33:50:4e:55:8f:
                    01:90:48:5c:41:8d:36:b4:eb:4b:36:25:7f:9c:05:
                    06:66:d3:e1:77:98:cd:7b:51:c3:40:e0:4e:c4:eb:
                    aa:7a:37:1f:c2:5a:ac:4b:dc:9a:de:25:96:e7:60:
                    68:84:11:e5:f7:55:62:92:fa:c4:84:11:e5:5c:e8:
                    58:1d:cd:b1:b4:1d:e2:0c:03:7f:0b:59:80:b8:c9:
                    e4:fd:7a:cd:df:14:18:0a:a3:d2:0f:1c:54:db:34:
                    1a:93:f0:53:26:1a:5c:9d:3c:26:36:a6:45:06:a0:
                    66:66:38:49:16:18:3e:0c:01:6f:6d:c6:55:36:e6:
                    cb:ee:ec:c0:c3:a3:75:2f:2d:cf:44:54:f7:43:7b:
                    d5:f9:9f:77:11:c4:cc:6f:61:6f:1e:08:65:48:cb:
                    bf:65:57:6e:98:76:58:3f:f3:8d:62:bd:e6:b3:1f:
                    7b:7c:bd:83:41:e0:a8:73:e1:ef:0d:68:e3:1f:e0:
                    9b:24:bd:29:f0:67:e1:a9:47:0c:bf:35:de:37:fd:
                    01:40:90:be:99:a3:24:12:1f:9a:a0:2d:58:2d:ee:
                    7b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:19:0E:42:15:94:F7:08:B8:D5:A9:DF:12:CB:8E:80:65:96:12:12
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333034303a3a2f34342d3434203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:3040::/44

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:23:dc:6f:7b:03:3a:d0:c1:fe:a6:eb:ac:5b:37:c1:d5:
         98:7f:4a:8b:42:e9:67:b2:7d:91:85:20:82:f5:60:f4:19:f1:
         d7:6b:90:30:fc:34:09:02:d8:38:5d:88:df:21:9e:a7:b4:45:
         39:83:61:b9:96:b2:c7:05:56:7c:3b:59:37:06:f1:60:88:af:
         c4:ee:63:c9:af:29:75:28:7c:f0:13:59:57:7d:d6:47:c3:0a:
         32:8d:70:09:87:47:43:01:b5:62:1f:7a:49:77:71:c0:31:32:
         1a:f8:aa:9e:ce:ab:bd:26:df:0e:47:42:af:20:11:c6:52:fa:
         4a:4e:e7:7d:a3:4d:eb:de:a1:7c:94:1a:23:69:df:68:4d:7f:
         37:08:66:0b:e7:0d:83:a0:33:e9:bc:a7:87:00:a7:67:62:97:
         09:01:93:bc:bc:1e:21:29:3a:f5:3b:fb:28:a3:b7:cc:aa:3a:
         28:47:da:96:ce:fe:97:07:d1:9a:32:88:ea:0f:e2:3c:14:6d:
         f8:c0:cf:9f:9b:28:45:6a:32:e4:cb:c7:89:98:7d:dd:bf:44:
         3e:d8:c3:27:7e:20:c8:3e:f6:08:0d:94:56:ea:dd:8e:75:09:
         37:1e:73:c8:44:8a:a0:34:84:2f:eb:8f:41:d3:a6:b5:ec:51:
         38:59:92:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:10 2025 by rpki-client