Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333063303a3a2f34342d3434203d3e20323639373330.roa
File:                     323830333a353136303a333063303a3a2f34342d3434203d3e20323639373330.roa (raw, json)
Hash identifier:          SCrU2ZjFQJHGcciEss0Dsc7ic/Tm4yTP6sGFPvUb1XQ=
Subject key identifier:   80:15:71:BF:A2:22:9F:80:F7:DB:81:47:9E:80:CE:C8:5D:3E:4F:FA
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       25941158ABA1F2D3CAC39EC224A73FCCEC5BCAA5
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333063303a3a2f34342d3434203d3e20323639373330.roa
Signing time:             Mon 31 Aug 2026 19:33:07 +0000
ROA not before:           Mon 31 Aug 2026 19:28:07 +0000
ROA not after:            Mon 30 Aug 2027 19:33:07 +0000
asID:                     269730
IP address blocks:        2803:5160:30c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:94:11:58:ab:a1:f2:d3:ca:c3:9e:c2:24:a7:3f:cc:ec:5b:ca:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Aug 31 19:28:07 2026 GMT
            Not After : Aug 30 19:33:07 2027 GMT
        Subject: CN=801571BFA2229F80F7DB81479E80CEC85D3E4FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e9:c1:56:96:ea:5e:65:d3:04:60:92:b4:b8:
                    1c:55:24:b8:4a:f1:b6:b5:56:80:bb:c5:f6:65:61:
                    b5:0d:ab:8f:38:fd:95:eb:4a:62:7d:62:80:c7:31:
                    0b:3d:a2:dd:09:f5:78:93:80:ff:65:4f:18:67:7d:
                    6d:37:89:ab:94:ef:5e:3d:4f:a0:5b:8f:6f:b5:fc:
                    bd:9b:5c:9c:c1:2c:b3:ae:e7:ac:a2:1d:67:c4:df:
                    04:c9:b6:96:e4:61:89:8c:33:b4:3e:b2:ca:ca:af:
                    ff:9d:65:d7:a8:0b:f9:70:51:ad:dc:aa:73:88:75:
                    2c:8b:38:95:75:81:c9:cf:cf:bb:23:97:9b:2b:81:
                    36:d0:11:a6:a4:bf:a9:60:1c:cf:d1:3d:5d:11:f1:
                    d8:b1:39:8d:13:a5:02:59:f5:b7:37:47:3d:1b:e5:
                    d8:2f:0a:5b:1b:c5:b6:17:4f:06:56:27:c6:54:7a:
                    10:8b:a3:74:b6:e0:be:a9:ab:ca:27:91:0b:fd:3b:
                    90:b9:b7:b0:1d:ee:d3:16:2f:7c:a2:36:1e:02:98:
                    01:f8:ea:7d:93:ef:5d:9b:e3:7e:1f:a3:50:99:1b:
                    a3:03:6b:4b:a9:83:79:71:6a:24:f1:78:50:af:18:
                    9d:90:74:97:de:22:57:c6:f8:b2:e7:92:ed:93:03:
                    98:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:15:71:BF:A2:22:9F:80:F7:DB:81:47:9E:80:CE:C8:5D:3E:4F:FA
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333063303a3a2f34342d3434203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:30c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2a:d5:78:37:e8:f3:45:01:5b:0a:3a:ae:93:5c:58:ed:bc:26:
         be:9e:94:49:ef:33:1b:14:a6:b1:d3:67:e0:d0:32:9d:4f:81:
         29:0b:87:42:66:1e:96:af:f3:43:ce:10:af:06:8d:2d:e5:42:
         b7:6b:3c:69:b5:24:8f:9f:63:07:5b:6b:87:5c:4d:3d:d6:31:
         01:62:65:0b:59:69:eb:43:ef:b0:fe:28:f9:1a:c0:7c:eb:a1:
         da:12:aa:a1:31:c2:90:27:4d:30:b8:b6:08:9b:86:ab:c3:50:
         88:09:ee:8e:69:12:a9:82:7b:71:a3:64:38:9a:21:56:63:14:
         e1:95:78:45:0b:7a:01:ab:24:8c:a4:ad:f8:04:47:d4:99:d5:
         5f:f9:66:5e:07:d2:7b:25:fc:77:94:e3:d1:e9:cf:fc:db:e3:
         f3:55:bc:ec:20:da:5a:9f:fb:8f:fd:6b:77:fd:57:10:ea:9c:
         bf:38:f6:3d:6e:3f:b3:b1:12:d3:89:1e:62:b1:c4:ba:a9:1f:
         0d:35:7f:db:3a:d7:6d:03:7b:6e:18:c0:1a:c8:85:1a:7e:74:
         d8:34:3a:24:21:7e:e3:b8:ed:00:4b:86:40:08:98:cf:da:0e:
         a3:9c:3d:c6:97:37:21:10:4f:8c:9d:a7:a5:f4:6b:ce:a6:73:
         a9:3d:46:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:25:49 2026 by rpki-client