Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3630303a3a2f34312d3431203d3e20323639373330.roa
File:                     323830333a353136303a3630303a3a2f34312d3431203d3e20323639373330.roa (raw, json)
Hash identifier:          QOX5l8VBEMXsAEusHV6PCF8kxFWnucERlKwXxsTrfjI=
Subject key identifier:   F7:E9:DC:8B:5E:90:D2:42:B0:0F:47:F3:58:12:20:E5:AE:37:64:E8
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       173733267422443F83ACD18C50D98620F157E38F
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3630303a3a2f34312d3431203d3e20323639373330.roa
Signing time:             Mon 31 Aug 2026 19:33:10 +0000
ROA not before:           Mon 31 Aug 2026 19:28:10 +0000
ROA not after:            Mon 30 Aug 2027 19:33:10 +0000
asID:                     269730
IP address blocks:        2803:5160:600::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:37:33:26:74:22:44:3f:83:ac:d1:8c:50:d9:86:20:f1:57:e3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Aug 31 19:28:10 2026 GMT
            Not After : Aug 30 19:33:10 2027 GMT
        Subject: CN=F7E9DC8B5E90D242B00F47F3581220E5AE3764E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:29:9a:40:fb:a7:ff:f4:2c:dc:f4:0f:73:95:
                    41:21:ca:b3:32:ca:7d:2a:ad:9f:95:5a:e9:ff:b0:
                    c1:17:5a:0f:bc:fb:d3:1e:cf:a1:ae:e1:1e:e1:9f:
                    09:7d:a9:5b:23:cf:fb:ab:e5:9a:e6:d8:d4:7f:95:
                    8b:9f:2d:3c:9c:a1:fa:43:f3:a0:03:93:8b:59:bd:
                    0b:c5:e1:56:a5:b7:ed:e5:da:b9:e2:4e:35:e4:a3:
                    cb:51:80:ef:83:fe:9c:68:ca:0c:20:e9:b0:99:3b:
                    a2:b9:a4:9b:64:c6:34:5a:57:1a:99:62:3c:30:4d:
                    89:38:87:26:f4:06:e6:99:a7:d7:43:0b:8a:46:92:
                    ad:37:cc:36:cc:89:7d:a4:bc:4b:76:c0:ba:e4:52:
                    70:c0:13:01:b1:6b:e3:3a:be:5d:5f:f3:0d:32:af:
                    30:85:c9:72:cf:cb:11:e5:32:cd:ce:06:65:a7:79:
                    86:13:41:80:62:55:89:f6:a4:22:9f:49:2d:c0:07:
                    53:c4:c8:39:59:91:ec:34:d8:9c:d0:6e:4d:b5:de:
                    19:b9:d7:e0:77:4a:0d:d0:e4:af:06:1a:2a:74:cb:
                    b8:32:db:3a:77:bc:74:fc:88:1e:74:cb:35:ae:0f:
                    78:a2:f1:ac:cd:5d:e1:1b:3a:79:de:69:ec:7c:d5:
                    8a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E9:DC:8B:5E:90:D2:42:B0:0F:47:F3:58:12:20:E5:AE:37:64:E8
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3630303a3a2f34312d3431203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:600::/41

    Signature Algorithm: sha256WithRSAEncryption
         8c:88:46:87:cb:74:c9:af:97:0d:d2:c0:b8:a1:82:13:59:dc:
         76:38:5b:b2:0f:41:e1:97:2a:8d:e4:8f:1c:4a:02:8d:b6:ca:
         9b:f0:64:2f:9e:c6:0b:1b:a0:d7:68:73:93:d0:19:f8:cc:71:
         10:ee:06:67:fd:b6:44:95:03:55:61:a2:28:62:fe:9b:26:5a:
         30:e5:35:b0:03:27:2f:da:40:12:5e:10:0a:18:ad:2a:70:42:
         22:ae:bb:c7:8b:a8:24:10:71:51:ae:cd:f9:73:92:16:c6:16:
         69:21:cf:c9:ce:be:e0:f4:c7:87:19:71:72:52:1e:56:1d:8e:
         3b:c5:6b:2f:3e:1a:9f:83:fd:9d:ca:90:0e:ca:81:7d:29:25:
         af:e2:aa:48:36:b1:dd:7e:ba:19:b8:ba:d7:c1:44:35:65:91:
         88:41:18:5a:2d:77:0c:b7:77:e8:4c:e8:5f:0f:25:41:62:39:
         aa:b7:0a:cd:cc:5e:cd:3a:cb:80:70:0e:39:69:2f:f8:df:0d:
         3e:3d:fa:d1:5d:73:55:38:f0:f0:ed:6f:ed:91:d1:f1:84:b4:
         76:d6:30:45:58:cf:22:fe:43:54:9a:77:2b:7f:a9:22:c0:cb:
         8b:85:b1:a9:25:31:72:2d:1e:43:06:91:4d:65:ea:be:8c:b4:
         d7:3f:63:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:25:49 2026 by rpki-client