Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653230303a3a2f33392d3339203d3e20323732393337.roa
File:                     323830333a333139303a653230303a3a2f33392d3339203d3e20323732393337.roa (raw, json)
Hash identifier:          ZH7lXQ5l/lAvebAyBKMlhBwiLzPYjpJiZN+Mwm3Qmo0=
Subject key identifier:   DD:AD:F7:8C:87:4E:3E:B5:20:22:86:DD:E3:EF:5A:5E:2A:EA:0F:7C
Certificate issuer:       /CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
Certificate serial:       2D73624DD3147D38C97BBBE3C8CDF8DB1DB9D98C
Authority key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653230303a3a2f33392d3339203d3e20323732393337.roa
Signing time:             Tue 17 Feb 2026 23:10:00 +0000
ROA not before:           Tue 17 Feb 2026 23:05:00 +0000
ROA not after:            Tue 16 Feb 2027 23:10:00 +0000
asID:                     272937
IP address blocks:        2803:3190:e200::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:73:62:4d:d3:14:7d:38:c9:7b:bb:e3:c8:cd:f8:db:1d:b9:d9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
        Validity
            Not Before: Feb 17 23:05:00 2026 GMT
            Not After : Feb 16 23:10:00 2027 GMT
        Subject: CN=DDADF78C874E3EB5202286DDE3EF5A5E2AEA0F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6f:35:e6:2f:91:06:a3:43:84:c6:36:dd:1a:
                    8e:04:d9:2e:34:ba:5d:87:ce:9f:6c:5e:2b:26:13:
                    ca:55:58:eb:65:32:28:45:cf:6f:a3:f2:c5:8f:90:
                    fa:9a:d3:ec:fd:c8:d7:e1:63:4a:56:0a:d1:3c:b6:
                    48:f6:61:e7:4d:cd:b4:9b:cc:4a:81:9f:ec:43:ab:
                    4d:e2:ef:e2:13:e2:18:07:1c:33:7f:85:34:d5:1b:
                    a4:38:6a:f3:14:00:41:54:46:64:f4:95:8d:f3:08:
                    93:56:8a:89:c2:c9:e8:c8:3b:e1:6d:96:b1:e1:09:
                    58:6d:42:2a:96:aa:b9:4f:95:2c:6c:e3:76:0e:76:
                    58:b7:ff:c9:08:49:23:98:39:fd:e0:56:74:08:99:
                    32:74:e8:d6:62:54:df:24:68:bc:c8:56:a1:31:68:
                    6f:02:4c:e4:dd:96:bf:57:fc:de:99:9d:49:b6:9b:
                    1e:4d:07:e6:6c:79:bc:e1:b0:5e:6e:31:d6:90:90:
                    4d:67:8c:51:eb:9e:e1:3c:35:4f:23:83:67:08:d2:
                    28:a5:d5:62:95:f0:e4:25:93:34:ee:38:32:7b:3d:
                    d8:64:2f:30:42:c0:a3:e3:23:0b:61:b0:98:ec:6e:
                    b3:79:4f:35:3c:31:57:28:e6:22:76:41:e0:81:bf:
                    c3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AD:F7:8C:87:4E:3E:B5:20:22:86:DD:E3:EF:5A:5E:2A:EA:0F:7C
            X509v3 Authority Key Identifier:
                keyid:70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653230303a3a2f33392d3339203d3e20323732393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190:e200::/39

    Signature Algorithm: sha256WithRSAEncryption
         07:a9:84:64:5a:bb:5f:71:40:e2:60:25:cb:d5:38:53:e6:31:
         77:7e:76:ae:51:96:f3:0e:b9:7d:00:93:c2:ad:c0:93:df:67:
         68:4f:ec:af:2a:97:c6:8f:56:6c:aa:39:82:b2:8b:bf:a2:67:
         fe:89:71:f5:ce:a2:18:be:95:f1:c8:d9:e8:be:2d:e8:2d:36:
         26:52:e6:eb:0f:da:e3:83:61:df:81:b2:85:80:97:e0:52:ff:
         35:ac:d9:fb:94:d8:18:ed:83:83:f1:0b:09:b6:dd:83:5b:fe:
         34:ab:71:47:6d:9c:53:42:d8:b6:12:88:90:99:73:a7:92:4b:
         f1:97:5f:8b:26:66:f9:6e:55:6d:c9:71:97:be:5f:4d:77:50:
         eb:55:54:10:72:40:75:ae:e1:d2:04:92:8e:75:50:4f:ec:5d:
         46:61:15:0b:35:18:d0:66:4d:18:b2:a2:2a:3a:99:02:6d:fd:
         d7:54:82:4e:2d:ff:ee:c1:78:a0:09:c2:b4:24:88:62:58:68:
         1f:b5:51:bb:96:1c:94:8e:e6:2b:da:5a:e8:bb:33:aa:a2:c1:
         4a:a3:7b:4e:48:e3:ea:97:02:3b:f8:25:8a:d5:35:29:dd:ce:
         e1:87:9e:1c:18:23:58:6d:49:60:17:e4:2d:6a:28:c8:ef:6f:
         48:9f:48:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Mar 3 07:13:36 2026 by rpki-client