Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3830303a3a2f34312d3431203d3e20323639373330.roa
File:                     323830333a353136303a3830303a3a2f34312d3431203d3e20323639373330.roa (raw, json)
Hash identifier:          96Bim6ZfiSVUXjvLCJCSAnKG6Mw8IlDx95T9DBtRITg=
Subject key identifier:   B1:97:59:3F:52:F9:F6:C1:96:5F:05:4D:D2:0C:3E:16:18:54:C0:17
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       5EFEB7696EE8ACAF2176658A6A0FAE6C3E5D8134
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3830303a3a2f34312d3431203d3e20323639373330.roa
Signing time:             Mon 16 Jun 2025 13:20:00 +0000
ROA not before:           Mon 16 Jun 2025 13:15:00 +0000
ROA not after:            Mon 15 Jun 2026 13:20:00 +0000
asID:                     269730
IP address blocks:        2803:5160:800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 18:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fe:b7:69:6e:e8:ac:af:21:76:65:8a:6a:0f:ae:6c:3e:5d:81:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jun 16 13:15:00 2025 GMT
            Not After : Jun 15 13:20:00 2026 GMT
        Subject: CN=B197593F52F9F6C1965F054DD20C3E161854C017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:df:62:8c:18:26:2f:44:f9:06:76:e0:65:2f:
                    b8:d7:2b:c0:1b:6a:74:bc:4f:43:64:a5:8e:e0:b6:
                    db:b4:1f:f2:b5:2f:81:92:a1:7e:ec:e3:29:7f:7c:
                    70:5b:4c:e5:3c:74:11:7e:f2:9f:65:1b:27:38:fc:
                    ba:a1:d6:f1:50:90:3f:12:c4:1b:bb:3a:2a:f9:c9:
                    cd:19:da:1f:b9:1f:c5:84:69:10:37:a1:85:4e:38:
                    5e:aa:6f:41:03:6c:ae:a3:b4:d7:86:46:42:79:46:
                    f3:33:7b:25:26:4d:aa:3b:aa:4b:e6:8a:95:0d:1a:
                    22:3e:a1:05:50:29:8b:40:f8:85:2f:b9:57:73:d3:
                    9a:c7:2d:95:eb:a9:1d:1c:5c:b1:ad:ea:77:c0:cc:
                    fa:59:92:23:a9:7c:86:ad:be:9d:c2:0d:57:64:09:
                    95:47:67:c5:6b:aa:25:e0:f6:aa:6c:cc:77:9b:b4:
                    a2:04:dc:eb:8e:e3:c1:e6:71:ab:1c:4f:f4:68:85:
                    e9:c1:b7:a2:c0:9d:b7:22:fd:3d:62:e8:ca:ee:bd:
                    f4:0a:cc:31:d3:a1:14:19:19:a3:9f:8f:7f:02:0d:
                    24:f0:ba:08:9e:c2:9b:5c:8c:69:8e:e9:cf:12:c8:
                    d2:21:46:a5:77:85:0e:aa:82:aa:e1:60:82:67:99:
                    f0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:97:59:3F:52:F9:F6:C1:96:5F:05:4D:D2:0C:3E:16:18:54:C0:17
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3830303a3a2f34312d3431203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:800::/41

    Signature Algorithm: sha256WithRSAEncryption
         57:56:65:a5:21:66:39:81:b8:65:3f:ea:e3:6f:f6:e7:78:86:
         2b:a0:62:a4:44:d4:5e:fb:0a:bb:bd:97:5f:4c:16:44:df:ea:
         a3:55:ca:a4:91:32:31:d9:05:36:a0:f6:84:2e:83:72:cf:01:
         f4:e7:05:79:e7:d1:df:9a:fb:8c:65:d4:b3:83:f8:82:f8:de:
         92:a6:1e:2e:53:fc:7e:57:59:8b:2e:60:5f:e7:cf:7d:70:b4:
         54:9e:e7:11:ef:e8:d1:26:bc:e4:f3:3d:97:1a:df:a0:45:65:
         d1:53:6f:ab:77:6d:62:e9:2c:56:70:78:9b:64:94:3a:76:66:
         76:86:b0:da:5f:ba:3d:01:5a:b2:f0:22:10:ff:54:09:1d:5e:
         1d:b3:3e:2c:a2:96:43:98:55:b3:fc:42:b9:f2:ce:29:16:44:
         5d:3c:4b:19:ae:7b:1c:9c:7b:23:4a:36:98:87:17:c7:d0:6d:
         0b:fe:cc:67:d4:7d:f7:14:8f:3c:47:21:98:d0:2d:79:bd:a5:
         15:dd:35:c7:48:60:da:d2:b4:b6:24:5b:da:25:29:e8:44:39:
         89:13:59:43:20:a5:59:ee:75:95:75:3b:58:6f:31:12:f8:7e:
         f6:56:70:1f:92:55:c3:71:62:37:20:6c:5c:05:81:ff:de:63:
         11:9b:27:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:15:26 2025 by rpki-client