Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3830303a3a2f34312d3431203d3e20323639373330.roa
File:                     323830333a353136303a3830303a3a2f34312d3431203d3e20323639373330.roa (raw, json)
Hash identifier:          zwDbjnlo6llUHVQD3DRxz7tg+S+N2b90Zm3jwaXVC2w=
Subject key identifier:   DD:43:F6:78:FC:83:14:1A:AE:C1:D3:C2:28:A4:57:BA:6A:1D:DB:7D
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       53A0A9B0918A847D29B66C5E83CC88BEB4C0573A
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3830303a3a2f34312d3431203d3e20323639373330.roa
Signing time:             Mon 18 May 2026 13:42:56 +0000
ROA not before:           Mon 18 May 2026 13:37:56 +0000
ROA not after:            Mon 17 May 2027 13:42:56 +0000
asID:                     269730
IP address blocks:        2803:5160:800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a0:a9:b0:91:8a:84:7d:29:b6:6c:5e:83:cc:88:be:b4:c0:57:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: May 18 13:37:56 2026 GMT
            Not After : May 17 13:42:56 2027 GMT
        Subject: CN=DD43F678FC83141AAEC1D3C228A457BA6A1DDB7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:09:c9:02:d8:ad:9f:14:07:a1:97:20:a0:
                    16:f6:87:a3:1d:a2:7c:36:72:ad:c8:9b:e6:eb:1e:
                    ca:76:6c:bf:a3:34:37:99:dc:32:27:02:21:ee:cf:
                    15:85:40:6e:34:9c:5a:87:2d:03:cb:ad:93:2c:d9:
                    b7:2f:99:bc:69:fd:da:7e:3a:ae:b9:65:45:33:4d:
                    0c:5b:03:06:11:01:42:52:11:06:f8:fb:f6:f8:68:
                    f9:4d:54:1f:b6:06:8c:ab:4b:39:2f:79:fc:e3:0e:
                    eb:ad:7f:9b:31:6f:37:22:ff:a2:f3:6f:78:cb:5b:
                    12:8c:b8:14:08:e6:63:32:ae:31:e4:12:7d:6e:b6:
                    b6:bf:5c:e1:a3:e5:2b:1d:dc:0d:1a:8b:48:7f:6f:
                    22:0b:ef:66:9b:96:1b:2d:a0:16:91:8c:a3:51:1d:
                    9e:bd:22:30:46:52:48:9b:f9:4a:f0:8b:4c:ee:20:
                    b8:23:9d:f2:6d:92:e0:a5:2d:e5:98:cc:28:9a:42:
                    cd:cd:56:0d:6a:f1:d4:fd:9c:b5:52:8f:ab:92:cf:
                    be:45:e4:19:e9:f4:a2:14:70:79:a9:05:88:5b:d9:
                    7d:e7:13:9a:13:16:6c:a8:62:bf:5c:c9:6e:93:65:
                    23:88:3d:66:10:9e:87:3f:48:b1:3a:16:18:7b:82:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:43:F6:78:FC:83:14:1A:AE:C1:D3:C2:28:A4:57:BA:6A:1D:DB:7D
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3830303a3a2f34312d3431203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:800::/41

    Signature Algorithm: sha256WithRSAEncryption
         22:84:bd:28:5b:ad:74:47:aa:10:95:6b:a8:3f:22:c8:0f:44:
         87:ec:20:ed:1f:68:6e:4c:65:ce:57:22:b1:d3:6b:08:cc:85:
         f6:b2:0b:c1:63:a4:cb:98:6b:63:a3:55:dd:64:39:4a:76:59:
         35:ce:b2:97:71:3b:1a:2d:c8:c1:2f:f1:d8:81:45:78:74:c4:
         73:93:09:9b:ec:1f:db:66:72:ae:dd:a6:7f:0c:b5:21:b7:73:
         3c:df:83:cc:04:bc:e3:3d:6f:c7:24:8a:75:eb:8b:ae:ab:89:
         88:85:5e:f3:00:07:37:03:3a:2d:95:cf:cf:57:81:05:69:19:
         45:f4:9d:6f:85:1c:b3:06:64:54:cd:a3:e2:ab:47:8b:37:a5:
         ab:35:1f:a3:5a:d9:30:d3:7c:25:9b:21:09:bf:47:af:e9:ba:
         23:9d:ad:78:6d:35:e2:86:a4:d1:34:ae:60:22:02:bc:4d:5f:
         9f:6f:75:51:dd:e0:48:5b:83:7e:47:ac:0c:e0:37:87:c2:85:
         bb:67:bb:c9:ed:53:d7:67:7f:ae:4c:94:f6:c0:9a:93:70:5f:
         ac:98:d7:03:5c:03:62:f2:ac:3d:d2:e1:22:12:06:3f:b5:21:
         58:ff:61:63:f0:df:e0:fb:1d:83:8f:ea:d1:56:a0:64:af:3f:
         80:11:3f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:07:35 2026 by rpki-client