Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333130303a3a2f34342d3434203d3e20323639373330.roa
File:                     323830333a353136303a333130303a3a2f34342d3434203d3e20323639373330.roa (raw, json)
Hash identifier:          TKu1kAHJMi/qRtFUlEwy4/+bhWqeINLsd2opUyYkqlo=
Subject key identifier:   D5:C2:20:81:50:B6:0F:F5:0C:B5:6B:D6:5A:FB:3E:51:D0:C7:DE:87
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       2A65BA2BB8605CD22F21247D674C9A2A9CFACB27
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333130303a3a2f34342d3434203d3e20323639373330.roa
Signing time:             Mon 29 Sep 2025 19:15:03 +0000
ROA not before:           Mon 29 Sep 2025 19:10:03 +0000
ROA not after:            Mon 28 Sep 2026 19:15:03 +0000
asID:                     269730
IP address blocks:        2803:5160:3100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:65:ba:2b:b8:60:5c:d2:2f:21:24:7d:67:4c:9a:2a:9c:fa:cb:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Sep 29 19:10:03 2025 GMT
            Not After : Sep 28 19:15:03 2026 GMT
        Subject: CN=D5C2208150B60FF50CB56BD65AFB3E51D0C7DE87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:da:ca:11:46:41:ae:6b:fd:e3:c9:c7:6a:
                    f2:d7:14:6a:ce:d2:d9:21:4c:3f:8c:0d:47:1e:ad:
                    0b:d8:11:37:87:d8:5f:7b:94:0a:e1:82:a1:fb:20:
                    62:03:3b:28:50:e6:59:65:8f:ae:79:e3:d7:19:f5:
                    9a:0b:eb:9b:d9:a1:ba:ac:cd:2b:d6:05:2b:d9:1f:
                    5d:17:92:70:be:8b:1c:cd:72:e0:87:e1:f4:5c:20:
                    7d:52:51:3b:1a:00:3e:6c:7c:c2:bf:9c:5b:65:90:
                    3e:72:e9:9c:04:5a:a8:f5:15:d9:26:90:ad:b3:76:
                    d6:17:96:79:f7:2b:63:88:d1:66:4f:5c:68:e9:e2:
                    d4:ac:03:ca:20:c4:52:40:d8:e2:0d:11:9c:9b:f4:
                    38:d0:23:64:6e:78:44:ab:80:0b:00:c1:f9:3e:ef:
                    8e:4b:55:80:b9:04:d8:c1:79:64:e0:18:9d:7a:88:
                    1b:7e:77:16:5d:7e:13:75:d3:2d:38:21:f5:5f:1e:
                    20:12:68:75:ef:7b:fe:7a:44:75:d1:54:60:f0:14:
                    cf:95:34:8e:f1:91:6f:1f:e9:c4:28:c8:9e:15:ad:
                    70:5c:1d:5c:b5:52:37:75:cc:ed:7e:25:06:25:12:
                    34:0a:3e:84:d4:6a:be:cf:2d:18:5d:09:05:ad:b9:
                    70:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C2:20:81:50:B6:0F:F5:0C:B5:6B:D6:5A:FB:3E:51:D0:C7:DE:87
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333130303a3a2f34342d3434203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:3100::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:58:9b:df:78:07:26:f5:b0:44:a5:8e:ae:d1:b6:2e:3b:a2:
         3b:c6:09:5c:54:0e:5b:da:42:d9:3d:08:a0:ec:9e:2a:13:90:
         bf:88:fa:de:65:51:a2:55:d4:f7:bf:76:c9:24:42:4d:51:82:
         75:07:c8:2f:b8:31:4a:c1:23:3f:e1:4e:27:fb:d9:09:5b:03:
         2c:0f:c4:af:8a:60:69:17:8d:5d:c7:0a:28:c3:e9:8b:4c:7a:
         32:a9:e7:70:fd:57:b0:23:7a:30:b0:23:eb:38:a5:45:b5:65:
         9c:65:5c:0b:94:25:e0:10:1e:21:d7:35:06:fa:9f:a0:de:27:
         15:a6:8b:05:61:3f:fa:82:b6:3a:02:04:19:50:fd:d0:55:5a:
         41:a6:7a:75:73:86:41:95:1e:bd:f0:bc:1f:e1:99:6c:92:8b:
         ed:b0:6a:f6:43:20:88:df:06:c1:f6:44:d7:af:4f:e7:b0:c5:
         e7:8c:84:85:27:b8:58:9c:74:66:12:36:c6:fc:96:1b:13:e5:
         f0:0e:61:94:16:ef:49:34:2b:ce:d9:31:f5:93:6e:17:78:5f:
         97:6a:97:6d:83:68:b4:6f:9c:75:56:7f:41:96:8d:96:a6:1c:
         a5:f0:c8:27:91:73:6a:d2:72:9d:37:1c:84:cf:65:c7:81:22:
         c2:8f:1d:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:08 2025 by rpki-client