Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6138303a3a2f34312d3431203d3e20323639373330.roa
File:                     323830333a353136303a6138303a3a2f34312d3431203d3e20323639373330.roa (raw, json)
Hash identifier:          wtCWjQSZCaj+3WLCK91c5FPSCG4qXCnNX1GfdDDNuhg=
Subject key identifier:   02:1A:70:B6:DF:C3:1A:A5:96:BE:D9:F8:8A:3B:A0:48:40:1D:A5:72
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       3F7B132231EEBA8FCF4626BD039D265C730FFC62
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6138303a3a2f34312d3431203d3e20323639373330.roa
Signing time:             Mon 18 May 2026 13:42:56 +0000
ROA not before:           Mon 18 May 2026 13:37:56 +0000
ROA not after:            Mon 17 May 2027 13:42:56 +0000
asID:                     269730
IP address blocks:        2803:5160:a80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7b:13:22:31:ee:ba:8f:cf:46:26:bd:03:9d:26:5c:73:0f:fc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: May 18 13:37:56 2026 GMT
            Not After : May 17 13:42:56 2027 GMT
        Subject: CN=021A70B6DFC31AA596BED9F88A3BA048401DA572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:59:da:f8:64:24:41:cc:08:e9:1b:2b:f4:
                    23:ab:87:2f:1f:cb:71:87:86:ea:43:5c:47:50:96:
                    e1:9c:1f:4d:c3:7d:5f:94:16:b1:93:e2:6e:93:b2:
                    ad:3d:7b:79:69:b4:4b:74:2e:30:ef:b1:82:6b:f1:
                    42:5b:c8:3f:27:51:10:2e:2b:93:32:4f:bc:be:40:
                    b1:91:02:ee:93:ec:ff:5e:67:ed:f5:75:32:44:3d:
                    20:9e:e5:6b:c9:66:12:23:80:0b:cf:46:b3:34:e0:
                    c3:7e:10:c0:b7:5e:7c:55:15:cf:85:22:b5:62:ca:
                    40:12:c4:ec:75:81:d9:30:44:e5:33:b1:d7:1b:dd:
                    f5:2e:73:73:ac:26:64:79:df:a3:08:fa:72:f4:ee:
                    d7:49:6e:27:2f:22:fc:21:46:6d:18:ae:ea:e7:75:
                    be:6f:1c:c8:74:7f:27:36:45:54:aa:df:c1:48:66:
                    9d:63:fb:3e:ae:07:25:c4:de:53:82:2b:c1:b1:60:
                    49:83:b1:6a:36:d0:72:74:77:5c:84:b7:7a:8c:9c:
                    72:d5:ce:56:21:c0:0f:f6:28:7c:d3:1c:60:46:82:
                    9a:61:c5:0d:5b:f8:32:c6:0e:9d:53:44:82:e6:7f:
                    b0:4d:4b:8b:dc:cc:3c:fc:8e:e3:66:68:1c:02:9e:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1A:70:B6:DF:C3:1A:A5:96:BE:D9:F8:8A:3B:A0:48:40:1D:A5:72
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6138303a3a2f34312d3431203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:a80::/41

    Signature Algorithm: sha256WithRSAEncryption
         1b:4f:2f:83:09:86:e8:18:9b:2f:dc:93:f2:26:66:01:d3:fd:
         be:a1:3a:a2:55:65:e3:0c:8a:fc:8b:f7:05:ea:fc:4e:66:21:
         65:84:02:7e:6d:94:2c:80:76:8a:c1:d6:5b:d0:4a:d2:fb:48:
         f7:a8:9e:f8:95:5d:65:da:3e:06:46:11:23:79:f5:4a:a4:4a:
         af:16:07:d8:7e:80:43:ca:dc:f3:24:09:d6:f6:6b:37:e2:43:
         d9:05:3a:04:34:4a:9c:1b:57:fa:6e:b2:dc:54:fe:4a:d2:8c:
         5d:d1:96:4e:62:ac:14:e1:5b:36:f9:92:44:b3:ed:50:08:4a:
         55:51:9b:28:8d:d6:3a:fa:e7:61:af:86:10:ac:99:db:fc:63:
         ec:bc:e6:8a:b3:9b:c9:fa:a7:90:05:27:e5:af:ec:46:bc:05:
         d1:56:03:ec:cd:c5:0a:89:5e:d6:f8:14:32:72:5b:85:b3:48:
         66:a4:4d:61:bd:ac:3f:cb:4b:ba:d5:13:1c:b4:27:c9:12:e6:
         d2:83:b7:c3:e2:b0:fd:b9:4e:79:3a:a7:2a:bf:81:27:6f:77:
         02:ed:8b:46:9c:63:39:98:ce:3c:fe:31:ac:26:6c:d0:c7:79:
         f5:07:a3:2b:bd:5b:7f:eb:9f:33:aa:92:1f:3e:ee:d1:18:04:
         20:60:83:eb
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUP3sTIjHuuo/PRia9A50mXHMP/GIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU5MjlCQjU5QzBDNzIzQzk3MjQ1QkYwRENGODY2Nzcy
RjQ3OUI3MzAeFw0yNjA1MTgxMzM3NTZaFw0yNzA1MTcxMzQyNTZaMDMxMTAvBgNV
BAMTKDAyMUE3MEI2REZDMzFBQTU5NkJFRDlGODhBM0JBMDQ4NDAxREE1NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CFna+GQkQcwI6Rsr9COrhy8f
y3GHhupDXEdQluGcH03DfV+UFrGT4m6Tsq09e3lptEt0LjDvsYJr8UJbyD8nURAu
K5MyT7y+QLGRAu6T7P9eZ+31dTJEPSCe5WvJZhIjgAvPRrM04MN+EMC3XnxVFc+F
IrViykASxOx1gdkwROUzsdcb3fUuc3OsJmR536MI+nL07tdJbicvIvwhRm0Yrurn
db5vHMh0fyc2RVSq38FIZp1j+z6uByXE3lOCK8GxYEmDsWo20HJ0d1yEt3qMnHLV
zlYhwA/2KHzTHGBGgpphxQ1b+DLGDp1TRILmf7BNS4vczDz8juNmaBwCnvvbAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUAhpwtt/DGqWWvtn4ijugSEAdpXIwHwYDVR0j
BBgwFoAU5ZKbtZwMcjyXJFvw3Phmdy9Hm3MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEFBMEE2NkMxQzAyRDJGMDY2N0JERjZEQUZERDY3QzJB
ODEzRkVGQkVENkQwRjQ2Mzk1MUEwNDI4ODQwNzdDLzAvRTU5MjlCQjU5QzBDNzIz
Qzk3MjQ1QkYwRENGODY2NzcyRjQ3OUI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTkyOUJCNTlDMEM3MjNDOTcy
NDVCRjBEQ0Y4NjY3NzJGNDc5QjczLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBBQTBBNjZDMUMwMkQyRjA2NjdCREY2REFGREQ2N0MyQTgxM0ZFRkJF
RDZEMEY0NjM5NTFBMDQyODg0MDc3Qy8wLzMyMzgzMDMzM2EzNTMxMzYzMDNhNjEz
ODMwM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIwMzIzNjM5MzczMzMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcHKANRYAqAMA0GCSqGSIb3DQEBCwUAA4IBAQAbTy+DCYboGJsv3JPyJmYB0/2+
oTqiVWXjDIr8i/cF6vxOZiFlhAJ+bZQsgHaKwdZb0ErS+0j3qJ74lV1l2j4GRhEj
efVKpEqvFgfYfoBDytzzJAnW9ms34kPZBToENEqcG1f6brLcVP5K0oxd0ZZOYqwU
4Vs2+ZJEs+1QCEpVUZsojdY6+udhr4YQrJnb/GPsvOaKs5vJ+qeQBSflr+xGvAXR
VgPszcUKiV7W+BQycluFs0hmpE1hvaw/y0u61RMctCfJEubSg7fD4rD9uU55Oqcq
v4Enb3cC7YtGnGM5mM48/jGsJmzQx3n1B6MrvVt/658zqpIfPu7RGAQgYIPr
-----END CERTIFICATE-----
Generated at Sat Jun 13 01:08:26 2026 by rpki-client