Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333130303a3a2f34342d3434203d3e20323639373330.roa
File:                     323830333a353136303a333130303a3a2f34342d3434203d3e20323639373330.roa (raw, json)
Hash identifier:          JWWJFqml25nc2NbG4w5iUxDsJyEXlZzY7ArE9idePSI=
Subject key identifier:   98:1F:11:C4:B4:F1:3C:C0:B8:63:3B:62:DF:27:EE:5D:EF:1D:EE:10
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       0A5EBACFF3251B2E385B1BDDFDFEDB416BE8BB1A
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333130303a3a2f34342d3434203d3e20323639373330.roa
Signing time:             Mon 31 Aug 2026 19:33:08 +0000
ROA not before:           Mon 31 Aug 2026 19:28:08 +0000
ROA not after:            Mon 30 Aug 2027 19:33:08 +0000
asID:                     269730
IP address blocks:        2803:5160:3100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5e:ba:cf:f3:25:1b:2e:38:5b:1b:dd:fd:fe:db:41:6b:e8:bb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Aug 31 19:28:08 2026 GMT
            Not After : Aug 30 19:33:08 2027 GMT
        Subject: CN=981F11C4B4F13CC0B8633B62DF27EE5DEF1DEE10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:64:d7:09:91:5a:91:4d:bf:4b:eb:db:32:
                    13:86:64:80:5f:d8:19:de:0d:e3:44:af:7f:87:d3:
                    ba:f8:c9:2a:83:67:de:c3:9a:f5:9e:f0:71:b1:df:
                    57:9a:4c:6e:e4:f7:d3:c7:5a:c4:0b:8a:4d:2f:ea:
                    88:26:fb:2d:b6:57:af:c0:cd:23:65:29:0c:fb:0e:
                    55:a5:a9:14:93:dd:18:e1:dd:df:04:41:1c:50:06:
                    e7:fb:c9:df:42:05:3c:27:51:b7:26:ca:80:20:0c:
                    29:5d:40:29:6a:f6:71:16:95:f4:7f:9f:bd:5b:e8:
                    15:f2:e6:01:f5:d4:d4:e1:a6:73:cc:89:45:99:9b:
                    f8:62:95:53:ba:7e:01:d3:fc:ec:de:72:c1:d1:df:
                    dc:58:a1:38:e3:47:94:7c:8d:de:b0:d6:c2:82:38:
                    64:fc:18:d3:45:1c:13:b6:b0:f2:b5:43:23:3a:41:
                    b4:ec:92:6d:08:13:23:94:70:fe:2f:4c:e6:4c:71:
                    db:0d:af:c2:ad:5c:46:d5:cf:75:ad:61:56:81:ef:
                    b3:d9:49:b4:81:7b:17:5a:7f:38:20:8b:06:20:cc:
                    54:9c:9c:f6:9a:14:4e:7d:fa:a9:56:6d:83:5d:22:
                    99:42:ff:6d:79:d0:68:c6:5a:f9:88:8b:da:f2:9a:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1F:11:C4:B4:F1:3C:C0:B8:63:3B:62:DF:27:EE:5D:EF:1D:EE:10
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333130303a3a2f34342d3434203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:3100::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:b4:49:cb:b8:65:7a:8d:70:f9:a2:d7:ad:d3:99:a6:08:f5:
         90:f1:e5:de:a1:31:17:5a:05:22:b6:83:bb:91:73:81:62:d5:
         ae:00:5c:a7:a0:de:6a:50:de:f5:9b:70:1d:b1:d2:12:63:f9:
         4c:ad:bb:5f:f5:9b:84:e5:ad:df:c4:6c:34:e8:2f:0e:ab:c3:
         67:6a:99:e8:e7:6f:bf:49:24:0b:aa:0d:f7:08:7f:95:75:f5:
         31:3e:34:cc:bf:02:e5:37:fd:71:42:03:a0:d5:29:4f:ad:f3:
         c5:2e:3d:f4:96:be:29:ab:b8:94:30:fe:be:ab:18:c7:28:01:
         03:ae:7b:8b:d7:34:2c:d6:2e:fd:e6:2c:71:fe:16:b0:da:7e:
         d3:4a:84:4f:88:d4:9c:9a:14:b1:b7:43:05:a8:fe:9a:7b:c6:
         4f:64:15:61:19:55:90:15:8a:ca:3e:5f:5f:7d:d3:fd:19:f4:
         66:57:12:98:a5:9f:74:f6:74:19:3c:6c:96:99:74:44:9d:b0:
         dc:02:61:7f:e4:79:e6:85:f2:1d:a2:47:85:6d:62:58:cc:02:
         74:78:4d:44:8a:7b:55:dc:3d:a2:64:ac:71:ae:d9:28:5b:01:
         e8:3b:fb:f7:86:a3:61:51:49:3f:7a:5d:4c:62:47:d6:97:53:
         7c:1a:a2:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:25:56 2026 by rpki-client