Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333037303a3a2f34342d3434203d3e20323639373330.roa
File:                     323830333a353136303a333037303a3a2f34342d3434203d3e20323639373330.roa (raw, json)
Hash identifier:          zSbmzUBVxdgK9xJ1BTocm/61cU9Eyp3WuZWPVtWQ6jc=
Subject key identifier:   39:57:23:FA:13:90:F9:39:D7:E6:C1:5F:15:F6:74:64:7C:61:A9:C1
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       0A71BFFE9DF6E45791AAD140A34A9C8C8D55260F
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333037303a3a2f34342d3434203d3e20323639373330.roa
Signing time:             Mon 29 Sep 2025 19:15:04 +0000
ROA not before:           Mon 29 Sep 2025 19:10:04 +0000
ROA not after:            Mon 28 Sep 2026 19:15:04 +0000
asID:                     269730
IP address blocks:        2803:5160:3070::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:71:bf:fe:9d:f6:e4:57:91:aa:d1:40:a3:4a:9c:8c:8d:55:26:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Sep 29 19:10:04 2025 GMT
            Not After : Sep 28 19:15:04 2026 GMT
        Subject: CN=395723FA1390F939D7E6C15F15F674647C61A9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:6d:be:d0:f3:d9:a4:4b:2d:85:94:15:89:
                    92:56:97:32:01:8f:50:ab:69:7e:84:2f:79:4a:41:
                    07:b8:d6:6c:26:4d:f6:c8:13:2b:19:d2:36:fd:d7:
                    b8:be:31:c3:da:5d:5b:c7:21:ed:11:b2:a9:43:2d:
                    24:e9:ee:19:58:fe:b4:25:ab:ae:58:0b:7b:ff:9f:
                    23:ee:bb:78:ed:8c:7f:f7:10:02:c9:8b:8f:ea:6e:
                    b4:73:e9:20:d7:91:9a:c8:24:8a:d7:7d:d2:f5:25:
                    31:ad:26:5e:93:82:10:7b:b9:c1:d6:bc:7e:d0:a5:
                    70:83:42:55:52:6c:e1:85:47:c8:8b:a3:60:72:c2:
                    f8:0e:08:89:87:46:97:f3:ff:da:74:8a:45:94:1a:
                    5c:33:fd:75:5c:3d:ac:70:71:f4:88:8e:3c:e1:be:
                    dc:c2:c9:c7:85:2b:dc:1f:65:08:a7:99:a6:73:7f:
                    ce:49:13:bf:f8:35:6c:8e:d6:e7:f9:db:8e:c5:44:
                    f3:27:9d:55:1c:b2:72:12:cf:df:7d:88:24:ae:7f:
                    aa:3f:b3:d1:d5:ef:0a:b2:04:4e:e1:df:c1:41:de:
                    39:cc:66:c7:52:4c:78:6d:c0:df:b4:7a:dc:3e:e3:
                    e1:64:e7:48:bc:b1:a5:a6:e7:ba:36:9f:a4:c0:25:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:57:23:FA:13:90:F9:39:D7:E6:C1:5F:15:F6:74:64:7C:61:A9:C1
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333037303a3a2f34342d3434203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:3070::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:7c:1c:90:94:c9:7b:fe:21:54:eb:15:01:93:d4:9e:7d:07:
         df:2a:14:29:bf:fb:3a:14:75:2e:a9:db:96:bb:db:8c:da:cc:
         9f:5f:29:94:b7:d0:22:b3:6d:2a:1f:f5:94:4e:df:b5:fb:d1:
         a1:f9:ce:38:87:d3:e7:0b:81:0e:1e:5f:4d:61:03:70:93:7a:
         73:fc:3c:3e:72:8b:05:ca:6f:a3:ef:18:0d:e8:53:d3:10:62:
         89:65:73:8b:a1:0c:ed:46:08:75:b9:d5:e0:1d:c5:c3:36:00:
         08:8f:a0:56:47:16:66:e4:6d:af:0c:61:06:a2:5e:f6:94:77:
         f0:98:ce:37:9d:a5:3c:57:af:d9:e1:10:7e:52:c4:53:be:13:
         6b:59:86:e8:9d:6f:63:9c:87:23:a6:3d:9e:34:f7:fc:66:20:
         43:12:a5:af:69:43:bb:3e:42:6e:ab:a4:34:e8:b5:65:f2:e4:
         b0:25:09:78:1a:30:a6:7d:fb:d1:8a:cd:90:23:2a:c9:4a:41:
         4f:b6:04:96:aa:7b:e0:2f:5f:51:a0:d7:29:8e:fe:c9:7d:79:
         77:13:5a:e8:a5:8e:f6:d3:b4:51:a1:71:d2:9e:bb:db:fe:df:
         27:ca:a0:e7:f9:2c:b8:78:eb:96:83:bd:66:50:b0:4c:84:11:
         71:48:0e:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:10 2025 by rpki-client