Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6130303a3a2f34312d3431203d3e20323639373330.roa
File:                     323830333a353136303a6130303a3a2f34312d3431203d3e20323639373330.roa (raw, json)
Hash identifier:          vEi2kX50CqEhkD76QLYfr1BwDKKPCc+w57MXjaunXTs=
Subject key identifier:   76:C6:7B:5E:8B:D8:1D:26:E3:5C:51:9B:E6:76:FC:66:35:16:1C:83
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       5046D2054834DFC994607627FD48190FABF05237
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6130303a3a2f34312d3431203d3e20323639373330.roa
Signing time:             Mon 18 May 2026 13:42:56 +0000
ROA not before:           Mon 18 May 2026 13:37:56 +0000
ROA not after:            Mon 17 May 2027 13:42:56 +0000
asID:                     269730
IP address blocks:        2803:5160:a00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:46:d2:05:48:34:df:c9:94:60:76:27:fd:48:19:0f:ab:f0:52:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: May 18 13:37:56 2026 GMT
            Not After : May 17 13:42:56 2027 GMT
        Subject: CN=76C67B5E8BD81D26E35C519BE676FC6635161C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b8:4d:ae:c1:9a:86:54:42:b2:b8:4c:f6:52:
                    0e:ff:3c:8d:03:5c:34:1d:0b:b8:c7:f8:15:c1:49:
                    42:c1:09:b3:a3:e2:fa:8a:68:02:53:55:23:8e:f5:
                    4f:5b:e1:1f:40:02:f2:02:26:cd:80:6c:13:a9:24:
                    ba:4c:ff:7e:0f:b1:d4:03:28:bd:8e:09:34:de:18:
                    18:42:9f:29:f9:45:99:54:5e:fd:b3:8e:08:af:e0:
                    9b:6a:46:69:c8:62:9b:59:64:f7:36:10:57:75:fe:
                    25:48:fa:dc:22:e6:3a:01:ed:e9:03:53:00:2e:fc:
                    97:b0:fe:53:18:23:6b:c2:15:20:f8:fc:b3:ef:4e:
                    43:b5:15:f5:c3:b1:40:8b:c5:b2:4d:5e:b8:92:03:
                    20:4e:0f:20:bf:fd:1a:3c:ed:e6:16:85:31:0e:8b:
                    2a:d3:16:fd:43:70:5f:e0:83:46:3d:4b:d3:40:b4:
                    8e:c8:c2:bd:f3:90:53:0c:ff:68:9d:99:43:02:e1:
                    dc:74:72:e3:20:69:b9:cc:be:84:08:41:89:5a:16:
                    ad:d4:74:88:d6:b6:d0:2e:10:c3:b5:7f:9a:d3:e1:
                    ea:2e:cc:77:91:d9:df:41:6f:67:76:e6:04:98:dc:
                    cc:b0:8d:b1:c7:e1:56:8b:07:ea:7f:de:cf:65:0e:
                    54:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C6:7B:5E:8B:D8:1D:26:E3:5C:51:9B:E6:76:FC:66:35:16:1C:83
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6130303a3a2f34312d3431203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:a00::/41

    Signature Algorithm: sha256WithRSAEncryption
         20:19:f8:25:04:4d:8c:ba:f7:c4:4c:58:52:8c:16:9d:a6:29:
         86:d7:2f:b0:40:18:52:d3:71:87:96:57:e0:4a:de:82:8a:ab:
         6f:1a:03:c1:6c:36:12:84:49:85:63:cd:b9:86:ab:2a:b5:c6:
         a7:e2:a4:1b:46:03:2d:56:fd:00:06:4f:98:57:bd:90:24:49:
         4c:b5:b7:cf:5b:c8:91:a2:11:b2:00:a7:bc:2e:65:2b:23:7b:
         9f:41:a0:63:45:3e:ec:38:b6:06:49:9b:8c:26:aa:ae:b7:1f:
         4b:68:04:ff:0c:dc:58:a8:13:18:4b:0f:5e:e4:0b:96:54:3c:
         87:fe:6c:7e:4d:bd:b2:78:fb:bf:e2:53:e7:c4:a7:de:d4:37:
         93:fa:57:39:17:c8:49:51:b7:df:6e:96:19:fe:a0:cd:99:28:
         84:d0:b4:0d:fd:8b:1e:28:5a:d4:7e:84:88:c9:4d:47:45:36:
         e2:04:f9:59:4f:88:3c:1f:83:95:3d:bf:90:08:da:5c:6f:02:
         43:d7:b8:c1:9a:39:c8:b7:44:d6:12:4e:0b:31:20:9e:e6:14:
         63:57:cf:50:66:e2:a3:88:df:e7:c4:31:52:2d:0c:38:be:31:
         01:9b:6c:fe:dd:c9:f4:b6:e7:a8:44:53:67:7d:ec:8a:bd:1b:
         5a:ec:03:e9
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUUEbSBUg038mUYHYn/UgZD6vwUjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU5MjlCQjU5QzBDNzIzQzk3MjQ1QkYwRENGODY2Nzcy
RjQ3OUI3MzAeFw0yNjA1MTgxMzM3NTZaFw0yNzA1MTcxMzQyNTZaMDMxMTAvBgNV
BAMTKDc2QzY3QjVFOEJEODFEMjZFMzVDNTE5QkU2NzZGQzY2MzUxNjFDODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVuE2uwZqGVEKyuEz2Ug7/PI0D
XDQdC7jH+BXBSULBCbOj4vqKaAJTVSOO9U9b4R9AAvICJs2AbBOpJLpM/34PsdQD
KL2OCTTeGBhCnyn5RZlUXv2zjgiv4JtqRmnIYptZZPc2EFd1/iVI+twi5joB7ekD
UwAu/Jew/lMYI2vCFSD4/LPvTkO1FfXDsUCLxbJNXriSAyBODyC//Ro87eYWhTEO
iyrTFv1DcF/gg0Y9S9NAtI7Iwr3zkFMM/2idmUMC4dx0cuMgabnMvoQIQYlaFq3U
dIjWttAuEMO1f5rT4eouzHeR2d9Bb2d25gSY3MywjbHH4VaLB+p/3s9lDlS9AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUdsZ7XovYHSbjXFGb5nb8ZjUWHIMwHwYDVR0j
BBgwFoAU5ZKbtZwMcjyXJFvw3Phmdy9Hm3MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEFBMEE2NkMxQzAyRDJGMDY2N0JERjZEQUZERDY3QzJB
ODEzRkVGQkVENkQwRjQ2Mzk1MUEwNDI4ODQwNzdDLzAvRTU5MjlCQjU5QzBDNzIz
Qzk3MjQ1QkYwRENGODY2NzcyRjQ3OUI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTkyOUJCNTlDMEM3MjNDOTcy
NDVCRjBEQ0Y4NjY3NzJGNDc5QjczLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBBQTBBNjZDMUMwMkQyRjA2NjdCREY2REFGREQ2N0MyQTgxM0ZFRkJF
RDZEMEY0NjM5NTFBMDQyODg0MDc3Qy8wLzMyMzgzMDMzM2EzNTMxMzYzMDNhNjEz
MDMwM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIwMzIzNjM5MzczMzMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcHKANRYAoAMA0GCSqGSIb3DQEBCwUAA4IBAQAgGfglBE2MuvfETFhSjBadpimG
1y+wQBhS03GHllfgSt6CiqtvGgPBbDYShEmFY825hqsqtcan4qQbRgMtVv0ABk+Y
V72QJElMtbfPW8iRohGyAKe8LmUrI3ufQaBjRT7sOLYGSZuMJqqutx9LaAT/DNxY
qBMYSw9e5AuWVDyH/mx+Tb2yePu/4lPnxKfe1DeT+lc5F8hJUbffbpYZ/qDNmSiE
0LQN/YseKFrUfoSIyU1HRTbiBPlZT4g8H4OVPb+QCNpcbwJD17jBmjnIt0TWEk4L
MSCe5hRjV89QZuKjiN/nxDFSLQw4vjEBm2z+3cn0tueoRFNnfeyKvRta7APp
-----END CERTIFICATE-----
Generated at Sat Jun 13 01:07:34 2026 by rpki-client