Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a373030303a3a2f33372d3337203d3e20323639373330.roa
File:                     323830333a353136303a373030303a3a2f33372d3337203d3e20323639373330.roa (raw, json)
Hash identifier:          fBjzHWyJiTe3BTLAv1B+FOU8hqkOqXQHi4j9GLE6SDE=
Subject key identifier:   23:A2:0E:5A:E7:1F:40:6F:29:48:73:B4:D0:AF:8D:BA:03:B7:87:DC
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       096A495A8B99705FAB720F439DB8E4D3605451E0
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a373030303a3a2f33372d3337203d3e20323639373330.roa
Signing time:             Sat 14 Jun 2025 16:05:00 +0000
ROA not before:           Sat 14 Jun 2025 16:00:00 +0000
ROA not after:            Sat 13 Jun 2026 16:05:00 +0000
asID:                     269730
IP address blocks:        2803:5160:7000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 21:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6a:49:5a:8b:99:70:5f:ab:72:0f:43:9d:b8:e4:d3:60:54:51:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jun 14 16:00:00 2025 GMT
            Not After : Jun 13 16:05:00 2026 GMT
        Subject: CN=23A20E5AE71F406F294873B4D0AF8DBA03B787DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f1:a6:b1:f4:9a:4b:a7:9c:84:86:9a:09:16:
                    1b:1d:d7:ee:e6:ad:2b:32:68:30:76:10:e2:93:10:
                    28:92:76:0f:86:f0:8f:3f:84:e0:90:e1:96:a4:9d:
                    3b:3b:f4:9a:a7:32:70:01:3d:6f:8a:6f:59:ca:5b:
                    c9:d8:a9:2c:d7:46:0f:aa:b6:ba:f4:ba:ad:63:f0:
                    65:3c:b4:69:3c:73:54:be:ce:7d:52:a5:9e:cf:da:
                    39:e6:65:6b:d9:56:aa:fb:71:a2:39:9a:83:04:fe:
                    da:23:49:ae:24:e5:e3:2f:e1:2e:d1:13:5e:7a:52:
                    49:ac:38:57:29:67:64:15:af:21:1d:ad:ab:39:d3:
                    61:cf:85:18:8c:61:23:16:2b:28:4d:33:d4:7f:7d:
                    36:94:2a:a0:83:c3:44:66:32:0d:af:88:c9:df:5e:
                    20:c5:c1:48:2b:32:d5:b7:c1:16:d1:c8:1f:0e:2b:
                    f9:39:d9:86:13:a4:24:19:03:cc:e1:71:84:7b:b8:
                    f1:f8:6d:97:ed:bf:fe:e3:d6:b8:3f:6d:2a:0a:3b:
                    0d:f2:8c:06:51:e5:6a:7d:0a:4f:88:1b:22:fb:98:
                    3a:90:3c:6c:10:16:0d:66:5b:7b:a9:62:6b:d0:4a:
                    0b:cc:a3:d9:2a:68:00:08:d7:7d:48:ee:bb:d6:c8:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A2:0E:5A:E7:1F:40:6F:29:48:73:B4:D0:AF:8D:BA:03:B7:87:DC
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a373030303a3a2f33372d3337203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:7000::/37

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:9d:6e:8d:4e:d5:a4:80:d5:70:5e:87:d3:a7:e3:a3:ce:
         bd:a7:31:5d:86:9d:29:da:92:ce:41:5c:36:18:89:01:80:a7:
         ad:cb:d1:74:c0:5a:85:9a:63:37:84:7a:2f:f4:b2:2b:91:7f:
         34:9e:dd:53:6e:e1:46:93:4f:de:79:24:46:4c:f8:3d:19:7a:
         a8:6c:1c:64:17:4d:40:51:26:f2:d7:84:a2:f8:a8:af:c9:47:
         ab:5e:46:71:d5:95:0b:80:09:51:bf:a7:06:33:03:d2:15:c9:
         62:68:80:11:a2:79:b2:7c:19:90:9b:9f:0b:36:29:10:8a:76:
         e2:45:9f:be:aa:53:e3:7c:cf:d1:72:59:19:53:f5:e5:a2:66:
         03:38:41:82:78:ff:5b:1f:7f:21:7e:49:7b:0c:a6:b4:ad:9b:
         ed:92:0f:b6:3c:a4:7a:9f:17:57:ac:58:8a:04:0e:e2:31:91:
         12:40:ce:43:1d:62:54:33:28:f6:85:7f:97:b4:63:bc:18:ca:
         14:19:d4:3c:f3:79:63:f5:5b:ed:ec:8a:5d:3f:88:fe:7d:9d:
         77:be:cc:79:05:e2:d9:80:0a:47:ce:71:1f:b9:32:55:43:5c:
         50:80:97:e9:7f:4e:d0:7f:b2:09:ad:06:e8:85:00:53:2d:84:
         4c:d5:1b:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 21 08:01:24 2025 by rpki-client