Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3366633a3a2f34382d3438203d3e20323639373330.roa
File:                     323830333a353136303a3366633a3a2f34382d3438203d3e20323639373330.roa (raw, json)
Hash identifier:          8nn/1HC7Myegj/kY+EDF3ZKqqQXkkMVEfj+jZxfE6lY=
Subject key identifier:   AE:E5:18:90:3E:9E:1F:91:4E:8E:0C:08:B2:DA:6D:3B:11:53:F1:A4
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       5512021283CFE8F3CE56268E1122797787189320
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3366633a3a2f34382d3438203d3e20323639373330.roa
Signing time:             Sat 05 Jul 2025 01:05:00 +0000
ROA not before:           Sat 05 Jul 2025 01:00:00 +0000
ROA not after:            Sat 04 Jul 2026 01:05:00 +0000
asID:                     269730
IP address blocks:        2803:5160:3fc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 02:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:12:02:12:83:cf:e8:f3:ce:56:26:8e:11:22:79:77:87:18:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jul  5 01:00:00 2025 GMT
            Not After : Jul  4 01:05:00 2026 GMT
        Subject: CN=AEE518903E9E1F914E8E0C08B2DA6D3B1153F1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:f3:9e:fd:c3:f4:4c:5b:42:7b:63:8e:21:
                    80:d5:09:4e:56:c0:f6:d9:d7:16:bd:8e:16:49:df:
                    4e:20:e6:cb:cc:db:2b:99:bc:54:7b:4a:ca:12:f6:
                    65:be:fa:22:bd:84:e7:d0:2b:22:7f:02:c9:89:f1:
                    01:94:f9:f3:e2:bc:37:6e:be:4a:02:54:13:0f:14:
                    a2:ea:bb:22:40:9e:18:ac:d6:1e:4a:69:05:03:6b:
                    93:28:da:91:df:bb:47:10:22:62:73:0e:0f:bd:70:
                    95:aa:27:a2:06:ec:f3:fa:ea:00:a3:65:06:2f:d5:
                    81:75:46:13:96:ce:5b:cd:7d:c3:54:7d:42:43:70:
                    72:d7:d5:3d:0e:0f:7b:2b:d2:82:e8:c8:35:63:04:
                    11:7e:06:74:59:38:89:b9:c6:df:81:35:84:30:a8:
                    c9:db:91:33:36:99:b7:3a:54:79:4c:1f:59:df:48:
                    ef:79:09:73:ef:0e:ed:3c:15:14:3f:c2:41:96:ad:
                    81:3a:a5:25:fb:7c:df:53:d1:3f:2e:8e:27:89:aa:
                    d4:28:ad:1d:57:17:01:d5:3d:d1:5f:4e:fd:72:86:
                    04:f7:b1:fc:5a:2f:1c:01:be:79:66:84:f2:91:8a:
                    ba:14:84:83:65:4b:92:0d:10:0d:00:14:0c:a7:3d:
                    26:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E5:18:90:3E:9E:1F:91:4E:8E:0C:08:B2:DA:6D:3B:11:53:F1:A4
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3366633a3a2f34382d3438203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:3fc::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:06:73:43:56:67:2b:fb:83:9b:91:1c:6c:89:44:cc:63:64:
         e1:1a:f9:00:1d:30:23:68:85:be:f9:d4:a0:2f:32:9b:91:40:
         da:cd:09:e3:b1:66:4b:90:4a:9a:e5:8c:a7:58:63:cd:33:72:
         34:72:55:d5:9f:01:72:e4:66:b7:9a:ba:e9:08:3b:09:d8:9f:
         ce:b8:d0:49:03:d4:69:bc:c9:1f:20:2d:3d:02:91:ca:bb:f9:
         eb:4e:ba:bc:73:4a:fd:29:f5:45:3c:87:03:25:83:6b:67:ea:
         8b:ad:11:a0:dc:61:82:2b:8f:8a:e8:ba:5e:f6:dd:41:03:2f:
         a0:ef:5f:5e:c8:6c:66:23:1a:19:67:a0:ae:c7:d1:2c:3a:ad:
         2f:a2:78:3f:3b:52:c2:3e:35:6f:dc:f9:65:85:42:98:ff:00:
         11:51:ab:b9:d1:a3:bd:8f:63:87:32:2f:c1:07:af:19:8d:bf:
         cf:e8:e5:a0:b2:44:52:cc:9f:4e:4b:6a:af:21:91:06:e9:8a:
         c1:cc:e8:87:55:ad:e5:f3:5d:c2:1c:8c:fc:73:cc:6a:b1:8b:
         54:3d:76:e6:72:47:a3:b6:8a:30:e9:a6:7a:7b:d1:d3:82:4a:
         59:8c:f1:ec:cc:b1:88:7d:ca:57:f0:ee:b0:d7:2d:86:fb:ee:
         4f:1b:54:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:24:01 2025 by rpki-client