Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3838303a3a2f34312d3431203d3e20323639373330.roa
File:                     323830333a353136303a3838303a3a2f34312d3431203d3e20323639373330.roa (raw, json)
Hash identifier:          pS4AKFOii2FOBwpfNFRdj96TmWgxb9jcdw+97zwrb9A=
Subject key identifier:   16:BE:65:49:75:E7:7A:71:B1:98:18:FC:16:48:76:3A:30:81:EF:9D
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       35076E590F7C65F45FC4F4AD59146E32F2430B48
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3838303a3a2f34312d3431203d3e20323639373330.roa
Signing time:             Mon 16 Jun 2025 13:20:00 +0000
ROA not before:           Mon 16 Jun 2025 13:15:00 +0000
ROA not after:            Mon 15 Jun 2026 13:20:00 +0000
asID:                     269730
IP address blocks:        2803:5160:880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 21:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:07:6e:59:0f:7c:65:f4:5f:c4:f4:ad:59:14:6e:32:f2:43:0b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jun 16 13:15:00 2025 GMT
            Not After : Jun 15 13:20:00 2026 GMT
        Subject: CN=16BE654975E77A71B19818FC1648763A3081EF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:0f:c5:d3:b9:9e:46:3a:d3:08:86:4d:37:
                    0a:f6:df:80:37:47:45:aa:e0:9a:ef:13:90:fc:ad:
                    52:75:5c:2d:78:ea:4f:91:d0:10:a4:ba:f8:11:31:
                    d3:64:84:9c:ff:5c:2a:7e:82:f1:cd:c8:0b:b4:cd:
                    d8:32:b3:bb:e7:ec:5e:54:3b:c4:51:4d:b2:bf:08:
                    ea:94:16:2c:7d:71:a2:02:db:18:1e:19:9b:ff:f1:
                    5a:50:b3:81:97:53:71:91:ec:4e:c5:9f:0a:24:b3:
                    c3:71:27:c0:cf:fa:31:41:a0:67:03:7c:47:5e:ba:
                    54:2d:15:2b:f9:62:ac:07:c0:62:61:e1:fa:43:d4:
                    8b:55:56:b5:6d:c5:7b:b4:7f:ff:17:f0:db:0a:03:
                    ca:c8:47:15:f5:bb:d1:c5:51:7c:77:1e:f9:52:3f:
                    d2:20:be:de:31:2d:ab:d0:ec:72:bb:05:41:d0:46:
                    ee:ab:b6:55:7e:02:26:46:b9:79:61:59:4f:2e:69:
                    ff:80:61:a4:cb:26:7c:76:e8:db:27:e2:af:de:92:
                    e0:d2:75:cc:30:48:39:b8:9c:7a:d3:06:8a:92:0c:
                    bc:2d:44:e4:21:7e:53:4f:89:83:43:92:c1:93:67:
                    ea:23:b2:d7:35:df:1e:10:d3:55:17:8a:33:4a:d3:
                    80:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BE:65:49:75:E7:7A:71:B1:98:18:FC:16:48:76:3A:30:81:EF:9D
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3838303a3a2f34312d3431203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:880::/41

    Signature Algorithm: sha256WithRSAEncryption
         8c:b9:e2:59:2d:71:c9:61:e4:d2:aa:f5:8d:8c:84:f9:a9:f6:
         8f:60:2b:15:ef:20:cc:7b:de:3a:59:6c:57:9e:5c:c4:85:a6:
         32:bf:01:44:f1:90:bb:1a:d5:f7:5a:65:95:c3:a7:af:8f:75:
         4b:21:99:aa:b5:bd:9c:ee:7d:0a:2a:a6:bb:b1:11:3f:5f:36:
         1e:53:80:68:10:6d:3d:8c:3d:3e:64:9e:32:15:5c:75:22:10:
         b0:32:25:9e:9e:90:db:00:33:a5:47:14:bb:19:09:bc:fa:36:
         da:ad:7e:a2:4f:9f:3e:04:2c:6d:f4:ed:81:e5:1f:b2:ac:c1:
         3c:67:1f:1d:71:43:0f:b4:54:91:ad:f7:d6:68:6c:69:1a:64:
         1f:e2:a9:68:92:5a:30:f5:f8:4a:d9:17:6f:05:c8:73:68:45:
         af:6d:0f:00:ca:64:1b:1b:d2:fe:6f:e3:ca:35:54:c3:a9:33:
         ea:d0:5a:04:25:d7:98:bb:ee:84:72:bf:e5:34:37:a9:22:ba:
         40:98:fc:26:df:b2:52:3d:63:e3:a3:1f:40:3f:1c:cb:fa:ff:
         70:d8:c2:32:a0:55:9e:23:1d:ab:67:fc:77:a8:e1:21:2d:64:
         9d:a3:78:3b:01:b1:d8:3c:6a:23:39:a8:ae:60:ee:8a:45:70:
         9f:19:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:17:19 2025 by rpki-client