Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653030303a3a2f33392d3339203d3e20323732393337.roa
File:                     323830333a333139303a653030303a3a2f33392d3339203d3e20323732393337.roa (raw, json)
Hash identifier:          VVV/5EOp4lg3SCWVM23fnSqPhA2Zos0l5TNoYWxnWsE=
Subject key identifier:   BE:CF:65:F5:F3:41:61:53:15:54:45:1E:0E:F5:89:FB:D8:34:FA:3D
Certificate issuer:       /CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
Certificate serial:       140BFF517ECF5F799D80F218910BC61AB562B660
Authority key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653030303a3a2f33392d3339203d3e20323732393337.roa
Signing time:             Mon 14 Sep 2026 22:45:00 +0000
ROA not before:           Mon 14 Sep 2026 22:40:00 +0000
ROA not after:            Mon 13 Sep 2027 22:45:00 +0000
asID:                     272937
IP address blocks:        2803:3190:e000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Sep 2026 02:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0b:ff:51:7e:cf:5f:79:9d:80:f2:18:91:0b:c6:1a:b5:62:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
        Validity
            Not Before: Sep 14 22:40:00 2026 GMT
            Not After : Sep 13 22:45:00 2027 GMT
        Subject: CN=BECF65F5F34161531554451E0EF589FBD834FA3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1e:92:ea:60:5b:97:11:21:ee:4d:c3:7f:ad:
                    69:1e:7e:51:69:29:1e:7f:27:fb:13:c9:b5:10:91:
                    04:9c:14:df:5e:63:69:18:2e:a1:e8:46:d1:a6:b7:
                    e8:99:0b:c1:e4:d4:b4:99:04:d2:b3:91:6b:9d:24:
                    f6:30:83:f6:9c:63:ce:b2:8b:d1:3a:2b:ea:1f:d6:
                    80:88:05:25:8a:33:3c:e4:36:d6:17:90:fa:71:2e:
                    c9:80:1d:86:94:5f:e1:96:0e:cb:b5:20:36:32:74:
                    0c:81:13:eb:ff:9c:dd:5f:b4:6c:8d:ac:1b:53:61:
                    86:96:8f:40:8b:53:24:ed:16:1b:f3:ad:2e:61:6c:
                    47:89:7a:0f:f4:d0:9c:4a:6a:15:92:9c:09:5f:c3:
                    42:9a:26:7c:a6:69:12:3b:6c:32:f5:0c:07:3f:1a:
                    f2:aa:bc:79:e0:c3:0b:99:a8:32:68:82:89:88:a0:
                    ad:a6:42:f2:59:6f:fa:f1:c7:bc:38:d7:50:50:9e:
                    21:d1:bb:d1:2e:0c:2f:20:d4:e5:87:9b:2e:a1:0d:
                    ab:db:22:0d:87:81:44:83:c7:94:72:f0:31:ab:d2:
                    37:a0:79:10:dd:80:a1:64:0d:2d:ce:1c:3f:b5:3a:
                    0d:d6:cc:0a:32:ec:b0:6f:b7:a2:0b:06:27:aa:5c:
                    80:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CF:65:F5:F3:41:61:53:15:54:45:1E:0E:F5:89:FB:D8:34:FA:3D
            X509v3 Authority Key Identifier:
                keyid:70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653030303a3a2f33392d3339203d3e20323732393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190:e000::/39

    Signature Algorithm: sha256WithRSAEncryption
         a6:49:c3:20:11:eb:29:5e:84:37:02:b4:56:0c:ab:e1:93:16:
         dc:5c:a1:e0:88:06:96:14:8b:02:bf:aa:bb:ac:ce:80:3c:fc:
         88:97:78:d5:e0:4a:32:50:4c:d7:70:74:f7:bb:87:eb:5a:a5:
         b4:9a:cf:e5:1a:f8:61:ad:c7:8d:7d:d7:68:4d:7a:d0:c5:4e:
         ed:0d:56:37:2f:a7:f2:de:70:6c:22:95:a7:63:c1:60:04:fe:
         2f:15:7a:ae:df:30:11:ff:9b:37:16:07:8c:89:99:74:54:c4:
         77:e2:47:b4:06:b5:a4:e2:8d:b7:52:97:dd:e5:9f:dc:e4:a3:
         2c:4b:de:b7:92:77:00:46:88:03:a4:5b:2b:75:23:96:3a:00:
         f0:f4:c2:d7:5d:bf:22:37:ce:93:c1:c9:b6:a0:b8:5a:6c:5e:
         a2:ca:14:29:0b:29:4e:0d:eb:4b:33:a3:9d:f7:82:79:41:ab:
         78:9c:4c:88:df:95:c3:a0:3b:3b:13:ca:7e:e0:92:dd:47:d0:
         82:6a:28:6c:6a:1b:53:d1:85:20:62:d8:35:e9:a1:92:0f:93:
         68:11:d2:61:c8:e3:d8:c6:af:a4:c4:43:40:74:f4:53:43:82:
         10:f2:62:1b:da:4a:96:46:01:3e:39:90:48:da:34:a9:81:f7:
         92:61:c3:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 16 23:05:26 2026 by rpki-client