Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333063303a3a2f34342d3434203d3e20323639373330.roa
File:                     323830333a353136303a333063303a3a2f34342d3434203d3e20323639373330.roa (raw, json)
Hash identifier:          ilj8kUnESB4fVR2mDOBeBclctL7T4P9r9JAQRIeJPIA=
Subject key identifier:   B3:D5:56:00:50:DC:23:1A:05:81:9D:76:96:6C:00:87:76:FA:3B:15
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       5DE2E22F8AB19ECA50532954F2F20787EF3D7309
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333063303a3a2f34342d3434203d3e20323639373330.roa
Signing time:             Mon 29 Sep 2025 19:15:04 +0000
ROA not before:           Mon 29 Sep 2025 19:10:04 +0000
ROA not after:            Mon 28 Sep 2026 19:15:04 +0000
asID:                     269730
IP address blocks:        2803:5160:30c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e2:e2:2f:8a:b1:9e:ca:50:53:29:54:f2:f2:07:87:ef:3d:73:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Sep 29 19:10:04 2025 GMT
            Not After : Sep 28 19:15:04 2026 GMT
        Subject: CN=B3D5560050DC231A05819D76966C008776FA3B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6e:e0:30:bc:10:62:0e:9f:dc:51:8f:fd:17:
                    1d:37:15:c5:88:40:51:c1:c5:2d:23:2e:5f:f6:94:
                    47:61:db:52:47:7c:29:05:c1:2f:0b:58:4a:42:35:
                    66:8b:06:21:13:c5:aa:77:d5:30:7a:47:63:1f:c9:
                    47:6c:d1:47:18:af:e4:ef:8e:87:e3:00:67:07:ec:
                    65:13:f7:ba:b2:ae:ac:fe:b3:cc:51:bb:c4:88:e2:
                    05:76:01:7e:f5:87:3c:93:3e:d4:34:0c:52:cd:9d:
                    da:ce:10:a0:93:af:ec:a2:4e:80:c2:f6:36:d9:c3:
                    c5:3e:e4:b4:e7:7f:7e:28:f0:a5:cc:29:9b:f2:ee:
                    56:67:8e:1f:bf:28:36:ea:42:97:8e:7c:36:ee:89:
                    e9:f9:2c:87:95:fa:8d:20:ec:35:0a:aa:d8:59:85:
                    54:e9:2b:b5:19:71:3f:71:e4:f7:7d:d5:00:38:d2:
                    a5:99:9a:38:c2:e7:f5:df:19:18:d5:41:11:84:45:
                    84:8c:28:59:54:b2:8d:e7:99:08:74:a5:47:86:a1:
                    27:9e:c3:59:05:9a:55:88:d9:a8:f6:56:50:a5:a6:
                    e1:31:a0:8f:0a:fa:e2:e9:f5:95:a5:03:d9:40:97:
                    5f:fb:dd:81:47:b8:f9:b3:e2:68:37:91:34:7c:3c:
                    4a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D5:56:00:50:DC:23:1A:05:81:9D:76:96:6C:00:87:76:FA:3B:15
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333063303a3a2f34342d3434203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:30c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:23:be:d3:80:80:2f:e9:c2:81:52:fa:f7:1e:32:35:91:e5:
         57:31:f9:58:19:f4:21:ca:53:d5:e1:8d:cb:30:4e:4e:1f:83:
         95:18:15:08:59:09:fb:b9:b0:4a:e2:29:2d:11:9a:f2:c8:75:
         80:b0:33:1f:8d:c6:ab:5f:07:8f:57:e9:33:0f:c0:99:a1:ff:
         69:3f:d6:a6:e9:55:31:45:85:72:29:82:4b:5a:40:9e:f6:69:
         b6:d1:a0:f7:10:0f:14:7d:d6:86:69:db:15:f0:a8:6e:bf:7f:
         85:1d:d8:2d:30:1e:47:1b:96:d5:14:f3:54:cc:bd:f6:dc:85:
         2c:62:3e:57:fc:35:5f:95:32:52:51:d4:34:f9:4e:ce:22:19:
         46:e4:90:20:14:5c:d9:2f:81:74:ea:00:35:8c:3a:95:50:bd:
         7b:8c:fe:43:8f:81:6c:c7:64:9e:b5:85:d7:8c:8a:13:b2:f5:
         53:29:79:a5:97:5d:08:40:ea:75:5b:ff:d4:4a:ed:33:38:b9:
         d1:48:6a:c1:f8:eb:f5:7a:63:59:26:3a:6b:33:ae:38:a0:a6:
         26:5f:ef:55:b7:0e:6f:0d:34:30:58:de:ca:ae:fd:d7:ba:9b:
         b1:75:d0:0b:51:67:0b:4f:c3:2a:10:f5:fb:61:eb:a7:fb:d4:
         af:81:a8:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:09 2025 by rpki-client