Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a3a2f33352d3335203d3e20323732393337.roa
File:                     323830333a333139303a3a2f33352d3335203d3e20323732393337.roa (raw, json)
Hash identifier:          uGrsIxQw29vUwpqQECJhzctX/l9ehltBBJRPpSzQTII=
Subject key identifier:   35:23:87:12:08:E8:DD:CD:B6:FA:85:3E:9A:CF:7A:4E:4D:AC:03:88
Certificate issuer:       /CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
Certificate serial:       50A98623D0E5060BEA6068982C4B169975B89719
Authority key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a3a2f33352d3335203d3e20323732393337.roa
Signing time:             Mon 14 Sep 2026 22:45:00 +0000
ROA not before:           Mon 14 Sep 2026 22:40:00 +0000
ROA not after:            Mon 13 Sep 2027 22:45:00 +0000
asID:                     272937
IP address blocks:        2803:3190::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Sep 2026 02:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a9:86:23:d0:e5:06:0b:ea:60:68:98:2c:4b:16:99:75:b8:97:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
        Validity
            Not Before: Sep 14 22:40:00 2026 GMT
            Not After : Sep 13 22:45:00 2027 GMT
        Subject: CN=3523871208E8DDCDB6FA853E9ACF7A4E4DAC0388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:c3:92:c1:2e:e4:4c:b9:4b:17:be:ab:60:
                    c0:a0:d5:98:0b:6d:7c:24:26:14:30:7b:5f:f9:1e:
                    4e:02:ec:84:3e:ce:e8:19:e4:ba:75:a4:0e:e5:31:
                    16:4c:57:ec:15:ea:2a:3a:76:fe:84:3e:f5:b9:fc:
                    86:93:f9:e4:98:2e:f6:61:b2:bf:65:58:24:f2:09:
                    74:4e:ad:4d:63:12:6e:8e:59:d2:28:24:1d:f1:56:
                    3e:e5:e9:c6:0a:01:ab:91:5c:f4:5f:11:3f:dc:87:
                    fe:67:8d:b7:36:b1:12:b8:2b:ef:41:62:f6:3e:09:
                    00:53:a1:66:02:53:a6:b0:8f:e2:c7:18:f5:91:26:
                    ff:58:e2:37:7b:d8:d8:e1:5b:96:b9:88:df:4e:c0:
                    b3:b4:21:59:9f:a4:02:59:f7:da:dd:8e:9e:16:df:
                    1a:10:8a:7e:bd:aa:d0:ab:aa:36:be:ec:da:5f:bd:
                    69:41:7f:85:6c:c1:ce:bc:ca:4e:ce:2e:cb:3a:cd:
                    40:7c:8f:f6:c1:a4:36:08:1a:20:fb:86:fb:a6:2e:
                    af:50:c8:81:a3:43:64:61:27:e7:59:af:bd:94:e6:
                    ba:eb:ad:c5:e0:9f:8f:a7:e9:2a:06:f9:b0:f3:d9:
                    75:cc:35:83:cc:b1:cc:92:3b:24:37:e7:60:de:f9:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:23:87:12:08:E8:DD:CD:B6:FA:85:3E:9A:CF:7A:4E:4D:AC:03:88
            X509v3 Authority Key Identifier:
                keyid:70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a3a2f33352d3335203d3e20323732393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190::/35

    Signature Algorithm: sha256WithRSAEncryption
         50:38:d1:23:0a:9e:67:eb:f8:3d:4b:49:37:a6:28:51:5c:74:
         04:07:e7:14:78:3a:4b:a7:3b:70:5c:46:1a:1f:e6:40:c8:23:
         45:1c:69:c6:d6:32:02:7a:f8:59:1e:7c:31:a8:b1:09:6f:e4:
         05:83:d4:b9:43:c7:74:e3:f4:4a:09:dc:1d:89:2a:36:1c:8f:
         53:0d:3e:f5:69:6e:7d:08:34:ef:ae:c4:cc:43:e5:f0:63:7c:
         c2:84:dd:18:c8:93:84:dc:52:15:12:88:5e:80:5e:54:da:42:
         16:28:c9:95:fd:40:a2:ba:1a:c8:ef:9f:30:d1:84:6c:24:60:
         33:e7:34:d3:bf:53:bc:99:65:62:fa:0b:00:13:29:8f:51:68:
         cb:58:d9:e1:6b:09:f0:dd:be:6d:43:d0:34:bf:1f:b4:87:86:
         7e:1b:69:8b:cb:07:f4:72:b1:86:34:d6:0b:84:9f:0a:38:4d:
         93:21:80:d7:fd:23:1f:b6:e4:cb:94:18:de:2d:b3:66:76:ed:
         f4:a2:a6:5c:2a:b7:3a:86:68:5f:65:f7:5a:0e:26:f4:7f:66:
         31:d7:76:db:85:f9:07:79:fc:63:a5:f9:fb:3d:e9:93:4f:9a:
         d6:6b:07:b3:f6:fa:d7:98:0c:a9:28:e0:b6:31:42:d2:20:85:
         04:0c:15:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 23:01:37 2026 by rpki-client