Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3630303a3a2f34312d3431203d3e20323639373330.roa
File:                     323830333a353136303a3630303a3a2f34312d3431203d3e20323639373330.roa (raw, json)
Hash identifier:          jvp6n9hFxq/LsocKFQAL9f5d4K/tFXMB/TfSjGuekl4=
Subject key identifier:   74:AD:8D:A0:AF:21:60:71:BA:3D:C1:D7:14:FC:3F:51:A8:FF:44:B8
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       7261618247F8BB261D47C94B4CF490C05B68DF40
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3630303a3a2f34312d3431203d3e20323639373330.roa
Signing time:             Mon 29 Sep 2025 19:00:00 +0000
ROA not before:           Mon 29 Sep 2025 18:55:00 +0000
ROA not after:            Mon 28 Sep 2026 19:00:00 +0000
asID:                     269730
IP address blocks:        2803:5160:600::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:61:61:82:47:f8:bb:26:1d:47:c9:4b:4c:f4:90:c0:5b:68:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Sep 29 18:55:00 2025 GMT
            Not After : Sep 28 19:00:00 2026 GMT
        Subject: CN=74AD8DA0AF216071BA3DC1D714FC3F51A8FF44B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1a:7b:50:5d:67:8e:0d:13:a0:98:78:eb:6c:
                    1b:e4:7a:74:5f:0d:a6:ba:5f:51:da:09:ca:86:cc:
                    0b:17:0e:57:05:90:b1:ce:84:38:6d:6d:6c:e3:29:
                    06:2b:e3:b2:73:de:8e:d2:ec:64:43:67:5a:5e:b2:
                    11:29:c7:cd:0b:3d:4b:6c:13:93:6f:62:56:c2:ec:
                    58:c2:27:0a:5a:2c:c9:1a:7b:5f:fc:f1:f1:06:88:
                    1c:1e:16:ff:67:ca:aa:4a:e7:5b:66:8a:ee:3d:2b:
                    30:32:fb:94:e2:11:13:72:3c:93:1d:aa:7c:19:25:
                    df:72:0f:f3:0b:af:d7:f8:4e:77:e9:cf:dc:d2:9c:
                    a7:b4:c3:4e:00:50:d8:8d:d7:55:4a:ff:4f:be:75:
                    45:14:74:9c:58:10:4f:03:83:e1:e5:e8:ba:16:f0:
                    cb:88:fd:09:71:93:8d:a9:bf:73:e9:30:c6:1d:a7:
                    f2:44:0e:04:c4:73:3f:d4:f6:d9:1b:78:0d:15:79:
                    fe:d4:7f:dd:6f:8c:79:ea:da:b0:d7:a3:ca:e6:42:
                    4c:79:08:7f:6c:72:f9:ec:34:2a:4c:e7:ad:c4:af:
                    27:08:2a:73:bb:29:93:f0:8c:7e:3e:56:18:57:c0:
                    07:98:6f:c8:dc:f2:3a:3d:4e:cd:54:52:f1:4b:4b:
                    f7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AD:8D:A0:AF:21:60:71:BA:3D:C1:D7:14:FC:3F:51:A8:FF:44:B8
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3630303a3a2f34312d3431203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:600::/41

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:1f:f9:66:5b:91:ce:86:62:86:57:80:53:f7:f3:eb:26:
         80:40:58:fb:bf:73:49:dd:1d:96:85:3e:6e:af:e2:14:93:91:
         95:d5:19:f6:40:44:02:2c:50:76:3e:52:71:c3:bf:ca:45:67:
         d6:15:35:01:86:b7:c4:9e:cb:4c:69:5f:71:03:30:2a:20:d1:
         cf:af:4c:85:fd:8a:78:6f:5d:62:fe:05:73:55:c7:6c:09:88:
         94:64:69:c7:32:0d:87:df:cf:ea:ef:b3:47:ff:28:ad:20:f2:
         2b:cf:87:fe:19:51:56:ee:0a:1b:4e:c5:24:6a:b2:4d:a8:88:
         c4:54:a0:be:70:01:95:ff:45:98:35:38:3d:b7:02:07:d9:43:
         03:7d:d9:d7:e0:ff:a6:86:f4:80:e9:dd:4c:55:3c:a5:11:77:
         41:76:64:a1:36:9e:c3:87:fd:14:67:2b:ce:db:90:14:84:08:
         c9:5d:4c:8c:47:d3:fa:72:fa:70:bf:3b:72:d0:a6:9c:4c:ed:
         13:ee:16:e9:fc:f2:f9:9c:69:5c:71:30:2d:0f:b0:00:41:79:
         ec:ee:cc:bf:8f:29:c4:99:0e:c1:f1:98:c7:f2:37:f5:70:34:
         79:bb:3f:d0:b2:fa:ff:e4:a5:cc:58:48:fc:b7:44:76:a0:aa:
         59:85:3e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:08 2025 by rpki-client