Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3a2f34302d3430203d3e20323639373330.roa
File:                     323830333a353136303a3a2f34302d3430203d3e20323639373330.roa (raw, json)
Hash identifier:          MuWwx15o+Gg+yuEhrWDNtq7cXOacBWmiwJ3oa+6PjG0=
Subject key identifier:   F0:CE:DC:C8:6C:F8:43:5D:AB:35:21:07:52:1A:FB:D5:FA:BB:AE:C4
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       783DBEDFA7636456B14EA3D6CE6AD328882333A8
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3a2f34302d3430203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:06 +0000
ROA not before:           Fri 17 Jan 2025 14:40:06 +0000
ROA not after:            Fri 16 Jan 2026 14:45:06 +0000
asID:                     269730
IP address blocks:        2803:5160::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3d:be:df:a7:63:64:56:b1:4e:a3:d6:ce:6a:d3:28:88:23:33:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:06 2025 GMT
            Not After : Jan 16 14:45:06 2026 GMT
        Subject: CN=F0CEDCC86CF8435DAB352107521AFBD5FABBAEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:20:85:16:90:c1:c9:d5:41:a0:7f:f6:16:13:
                    4b:c4:e7:ce:16:d7:8e:e4:5c:13:fa:10:b0:4e:75:
                    36:0e:1c:21:2b:af:08:ab:aa:a9:70:6c:b7:b0:fe:
                    7c:f1:2a:13:c0:a2:46:75:62:08:91:17:75:26:e8:
                    8b:ca:be:2e:6b:c3:a8:1f:8f:8c:9d:90:e3:ac:ad:
                    68:a7:3b:d2:4b:cb:f2:bf:74:32:d0:56:19:d0:11:
                    fd:dd:e2:e7:01:57:d8:7e:b8:16:96:8e:de:2a:c4:
                    58:4b:41:4c:46:f5:fc:54:32:2f:62:3b:23:b5:64:
                    b6:a5:9e:e2:67:fd:ed:f7:cd:7d:9d:d7:cd:99:80:
                    85:bb:3b:1b:1c:c1:f8:51:be:3c:73:36:a9:5d:bc:
                    3a:77:cb:62:41:36:60:29:08:91:fd:ef:01:67:5c:
                    95:05:fa:88:dc:2f:3a:6e:be:1f:d4:8e:9f:87:e2:
                    e7:f3:7d:c2:45:51:3e:73:2b:64:86:10:60:b7:b6:
                    eb:80:88:c0:79:cf:51:59:dc:6f:6a:f6:f3:ba:7e:
                    67:7c:67:20:f2:39:ce:ae:92:12:5c:31:84:08:b9:
                    16:bc:22:34:76:d0:d7:d7:61:24:18:7c:f4:cc:27:
                    98:a1:0f:78:3f:89:05:2f:57:e7:11:8a:40:3f:23:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CE:DC:C8:6C:F8:43:5D:AB:35:21:07:52:1A:FB:D5:FA:BB:AE:C4
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3a2f34302d3430203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:68:6d:b3:ba:fd:89:c0:5a:ea:72:21:11:1d:bd:37:dc:9f:
         a4:c3:a2:ba:f6:1e:e5:c9:e1:c9:65:6e:48:09:9d:60:6e:b5:
         27:0e:52:94:c9:c3:44:19:ac:18:07:31:2a:81:80:f8:ac:43:
         23:90:66:dd:f2:a5:16:b8:0c:f7:29:1c:1e:90:7a:e5:c3:26:
         bd:d8:c6:c7:ae:a4:16:2b:ca:de:c6:05:43:f7:e9:3f:61:9e:
         53:f3:b6:61:ee:c3:fe:d6:7d:2e:27:34:cb:f5:23:48:06:2d:
         42:7a:1e:5e:00:b0:66:6c:72:f9:0d:82:59:07:80:b5:37:61:
         62:47:48:da:b3:ac:2f:b8:72:d6:d1:7a:75:b8:16:b1:e9:49:
         c5:18:d8:b0:4d:71:5b:54:79:96:bb:41:b7:39:34:87:c2:00:
         48:93:d9:1d:46:53:1a:65:84:6d:c5:15:8d:a2:95:c1:00:23:
         2d:d3:96:e5:7d:e8:fa:fd:ff:c4:b0:b9:d8:93:55:a3:0e:26:
         f1:b7:10:5e:a0:3f:d7:c0:0e:b1:63:ef:60:89:9f:26:d8:f8:
         d7:b4:1e:4c:df:a7:02:19:28:2d:42:ef:a7:40:9f:bb:9e:31:
         3c:a2:58:71:92:27:43:b6:76:d0:45:cf:1d:ea:81:25:f9:17:
         0f:07:2c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:51:21 2025 by rpki-client