Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333032303a3a2f34342d3434203d3e20323639373330.roa
File:                     323830333a353136303a333032303a3a2f34342d3434203d3e20323639373330.roa (raw, json)
Hash identifier:          YegHSupIAXec2U48OdeXim9JdiFbwsCiH6+iuDdpNZ0=
Subject key identifier:   A1:DB:7E:27:A4:CD:CD:BB:73:5B:90:5F:26:0E:E4:55:01:C9:50:F5
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       37B6D2AE1AAE3633DE9D282702D7D30DDD480F34
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333032303a3a2f34342d3434203d3e20323639373330.roa
Signing time:             Mon 31 Aug 2026 19:33:07 +0000
ROA not before:           Mon 31 Aug 2026 19:28:07 +0000
ROA not after:            Mon 30 Aug 2027 19:33:07 +0000
asID:                     269730
IP address blocks:        2803:5160:3020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b6:d2:ae:1a:ae:36:33:de:9d:28:27:02:d7:d3:0d:dd:48:0f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Aug 31 19:28:07 2026 GMT
            Not After : Aug 30 19:33:07 2027 GMT
        Subject: CN=A1DB7E27A4CDCDBB735B905F260EE45501C950F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:09:6e:db:ef:76:56:1a:3e:e0:d6:8d:81:
                    5a:12:01:ef:5b:5b:e9:da:3a:fe:f0:c1:ee:19:1e:
                    bd:7a:53:18:38:fb:be:1a:01:2c:b7:a4:14:ae:df:
                    61:53:37:c7:3b:46:24:e3:39:f8:12:1e:8c:90:96:
                    81:8f:24:fd:8b:44:3c:61:b9:cc:4f:63:5b:ee:1e:
                    51:b5:3d:5c:13:af:36:02:be:22:d5:d9:a9:87:2a:
                    9d:42:90:03:67:41:2f:2d:0a:d1:a2:93:a3:2d:d8:
                    42:53:5c:92:93:37:9a:78:20:5c:ed:db:9c:cd:c8:
                    1f:f3:c4:f1:d9:10:47:6c:bb:d3:f1:2c:f4:ce:3e:
                    b6:2f:31:79:c3:c1:1c:25:98:21:ef:9a:f5:11:c8:
                    1c:27:ab:b8:2a:d1:bb:70:0c:5e:fa:f7:e2:aa:6a:
                    47:ac:bf:9d:87:25:b1:4c:56:1e:85:ad:63:34:6e:
                    11:e2:84:69:c4:d9:b3:3f:58:cd:33:5b:b5:eb:ca:
                    b6:00:44:d6:77:12:d1:67:a4:a8:1c:da:34:c7:03:
                    fb:4e:0f:37:1d:22:6e:2c:d6:51:a8:67:50:26:5b:
                    6e:82:a8:5d:41:14:e9:7f:b6:45:66:e8:82:16:6e:
                    b4:22:43:bc:fa:dc:12:6a:fc:70:b8:75:61:de:ca:
                    09:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DB:7E:27:A4:CD:CD:BB:73:5B:90:5F:26:0E:E4:55:01:C9:50:F5
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333032303a3a2f34342d3434203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:3020::/44

    Signature Algorithm: sha256WithRSAEncryption
         a8:87:89:64:08:45:9b:e7:1c:c7:a1:36:e9:ec:d6:ea:ba:92:
         2d:1b:3d:5b:fe:ff:df:be:53:fe:c7:0e:07:f5:8a:b1:ff:33:
         5b:71:69:ed:5d:7e:63:0a:02:8c:28:54:94:73:14:be:f9:98:
         ff:6e:0f:c3:5d:ad:97:0f:17:8b:6e:d9:4e:05:ae:3f:6c:c9:
         f8:27:09:05:cc:fb:17:4d:99:f0:44:37:ba:ac:67:6b:5e:00:
         2d:d1:2a:8a:2c:5d:95:5f:fc:ea:34:0d:ac:71:b3:8d:db:79:
         98:07:6a:67:25:66:55:ac:da:64:9d:47:e0:57:a7:ad:ed:31:
         a9:ba:26:ac:21:11:79:98:d5:2c:35:69:f7:25:f8:72:7e:48:
         1f:5b:5b:b2:a4:8a:89:97:db:c0:8b:be:26:dc:c8:8f:c9:17:
         be:be:c2:f9:11:17:1c:c8:61:c1:3e:4b:7d:52:17:66:76:93:
         f0:ad:3a:97:aa:bf:9c:db:89:43:69:2d:d1:d7:21:b3:9b:98:
         61:28:7c:5b:b8:36:85:c5:64:a7:c9:3c:70:fa:d9:53:57:26:
         29:6a:97:dc:85:78:27:a9:9d:21:e6:c9:8b:90:90:c2:51:03:
         d7:e2:9b:55:08:8e:17:3f:33:c9:46:35:27:ef:b6:af:91:91:
         96:1f:72:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:25:53 2026 by rpki-client