Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333034303a3a2f34342d3434203d3e20323639373330.roa
File:                     323830333a353136303a333034303a3a2f34342d3434203d3e20323639373330.roa (raw, json)
Hash identifier:          +wtcnv0Ft/aQN3t7iLpHIxvvw1ZZ1aeY+ijzHifcEiA=
Subject key identifier:   F2:01:E3:D6:4C:66:16:BB:53:15:87:D2:A7:3C:D8:F5:85:53:0A:76
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       02036EF8CD978D01A437676712633CC44FC1DA2A
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333034303a3a2f34342d3434203d3e20323639373330.roa
Signing time:             Mon 31 Aug 2026 19:33:09 +0000
ROA not before:           Mon 31 Aug 2026 19:28:09 +0000
ROA not after:            Mon 30 Aug 2027 19:33:09 +0000
asID:                     269730
IP address blocks:        2803:5160:3040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:03:6e:f8:cd:97:8d:01:a4:37:67:67:12:63:3c:c4:4f:c1:da:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Aug 31 19:28:09 2026 GMT
            Not After : Aug 30 19:33:09 2027 GMT
        Subject: CN=F201E3D64C6616BB531587D2A73CD8F585530A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0f:7f:69:55:70:6c:f6:8a:6d:11:67:69:2b:
                    4f:3e:b4:b0:fa:fa:7d:50:d3:a6:b4:8b:80:fd:1b:
                    75:50:eb:c5:ba:af:a2:49:71:d6:17:59:b9:a7:72:
                    71:ba:67:90:cb:51:46:d0:88:74:ca:d7:24:50:ab:
                    5d:65:f2:43:68:6b:67:a9:33:3c:b5:37:c3:c6:8b:
                    2f:56:07:6b:1f:8a:e0:40:e4:d1:b5:3a:47:55:c8:
                    53:d9:ab:1a:83:8e:58:4c:a1:b2:f3:8b:9d:43:b5:
                    6a:81:0d:e0:d8:1b:0e:c5:d3:06:7f:ab:d9:a7:ff:
                    04:15:64:d4:eb:68:71:bd:91:2f:a2:95:52:4f:02:
                    1d:64:f4:0c:80:e5:97:ac:3d:08:d4:3c:9f:9a:86:
                    1c:7a:72:5c:e4:a8:74:96:12:25:6b:c0:b9:49:fa:
                    49:c9:b3:39:3a:ed:7f:66:63:28:c6:e6:1d:78:e7:
                    49:29:60:11:5e:b8:8f:2c:34:e0:48:a2:76:34:2e:
                    b0:20:ba:8c:50:38:5c:08:0e:8d:cb:4a:e5:9f:ae:
                    cc:23:0b:3c:8d:e1:be:99:e8:2e:0c:b6:da:40:2b:
                    89:0e:83:0f:90:cc:a4:cf:94:fc:7f:64:d7:96:e6:
                    b2:be:92:e2:0f:14:a8:e1:ce:39:cf:43:fd:0b:7f:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:01:E3:D6:4C:66:16:BB:53:15:87:D2:A7:3C:D8:F5:85:53:0A:76
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333034303a3a2f34342d3434203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:3040::/44

    Signature Algorithm: sha256WithRSAEncryption
         9f:cf:cb:b4:55:6a:28:1d:1b:b0:48:58:15:ae:a1:7e:f1:a4:
         72:d1:34:f0:8e:c1:0d:f6:26:ed:b0:e7:06:7f:71:a8:86:7f:
         89:00:d5:74:01:c9:53:70:d6:73:3b:51:e4:7a:21:49:2f:c5:
         e9:54:9b:69:a1:8d:56:84:e4:20:29:58:46:07:c0:a3:d8:ef:
         8b:41:e6:f5:de:92:39:14:37:8a:79:f4:f5:a7:87:c5:ab:5c:
         82:26:77:13:f9:45:eb:9d:d4:0e:d1:5a:77:a0:2d:54:94:63:
         cc:0c:26:c3:41:f8:46:3b:09:ec:03:35:ed:0a:1b:02:80:5c:
         9c:7c:62:b3:bb:b6:da:b1:53:af:68:c5:ce:c6:a2:58:64:26:
         fd:e2:49:12:e4:80:49:9c:af:5f:d5:05:9e:67:41:e3:fb:4b:
         ca:b1:ee:60:22:36:91:3b:a7:82:55:91:8d:36:5c:7a:a0:62:
         ba:64:a0:ae:dc:5d:cd:93:bf:ab:5c:8a:ca:5b:64:ff:0a:b5:
         fa:42:fc:09:f6:bc:f4:37:12:94:d2:ee:e3:17:63:fd:88:43:
         c2:e9:a2:5a:8f:73:8c:01:e8:3c:50:ef:72:cb:45:fb:90:b6:
         4e:a5:82:7f:90:50:97:0e:6f:d8:4a:9b:37:c8:64:e7:92:15:
         06:67:9b:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:25:57 2026 by rpki-client