Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653430303a3a2f33382d3338203d3e20323732393337.roa
File:                     323830333a333139303a653430303a3a2f33382d3338203d3e20323732393337.roa (raw, json)
Hash identifier:          O73C/vWEvS28EQ91bFsRai+n9tlBE9FbUoKn7/koH98=
Subject key identifier:   D8:ED:38:F9:D3:A8:3A:B9:CA:E9:2B:C6:69:B3:23:B8:52:E7:E6:BE
Certificate issuer:       /CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
Certificate serial:       3961AFB0CE55E4891768E4D20D2CCA87ADDF51A9
Authority key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653430303a3a2f33382d3338203d3e20323732393337.roa
Signing time:             Tue 18 Aug 2026 13:50:00 +0000
ROA not before:           Tue 18 Aug 2026 13:45:00 +0000
ROA not after:            Tue 17 Aug 2027 13:50:00 +0000
asID:                     272937
IP address blocks:        2803:3190:e400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Sep 2026 02:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:61:af:b0:ce:55:e4:89:17:68:e4:d2:0d:2c:ca:87:ad:df:51:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
        Validity
            Not Before: Aug 18 13:45:00 2026 GMT
            Not After : Aug 17 13:50:00 2027 GMT
        Subject: CN=D8ED38F9D3A83AB9CAE92BC669B323B852E7E6BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:44:30:4f:87:f3:7e:42:52:e7:ed:38:c3:
                    3d:23:3a:c0:38:2f:f7:68:65:08:ee:3f:88:a1:55:
                    93:49:99:ec:1b:0a:80:13:85:c0:3e:ce:49:af:27:
                    11:31:90:49:d3:b7:bb:db:08:af:92:53:80:7a:ee:
                    48:76:ba:ea:22:c3:93:9c:87:24:41:5e:31:8f:d3:
                    37:ee:cc:b8:6e:e9:4c:10:22:1a:56:78:b7:68:f9:
                    89:89:a9:35:3d:ea:b1:c4:06:91:29:2d:63:42:d0:
                    22:68:bf:b9:ad:aa:9e:58:d3:ac:38:11:71:ff:c2:
                    11:a4:3c:c6:44:9c:34:cc:1d:e2:b7:c6:b3:8f:41:
                    17:cb:37:01:39:ea:69:9d:58:02:c5:36:35:55:c4:
                    08:34:e4:85:cf:b8:b2:61:01:bc:0c:2e:77:9f:9e:
                    c8:e3:52:0a:15:f8:24:33:bd:a1:c5:41:81:11:1e:
                    e1:83:ca:0c:9b:3a:9c:93:5f:d1:19:78:7b:c0:d4:
                    c3:4a:77:29:0f:c6:19:ca:39:27:b7:f2:db:fe:77:
                    00:38:0a:06:7f:72:30:6f:10:5c:90:66:eb:10:cf:
                    a7:c9:ef:36:46:22:3f:ef:3d:59:01:c7:8f:48:32:
                    f5:fb:5b:28:48:72:a0:03:01:30:5a:fc:57:2f:ec:
                    38:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:ED:38:F9:D3:A8:3A:B9:CA:E9:2B:C6:69:B3:23:B8:52:E7:E6:BE
            X509v3 Authority Key Identifier:
                keyid:70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653430303a3a2f33382d3338203d3e20323732393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190:e400::/38

    Signature Algorithm: sha256WithRSAEncryption
         14:c8:d7:9c:ee:48:73:e9:0d:2b:80:70:35:af:c2:50:98:92:
         38:8d:c9:3f:7f:7c:e4:11:3d:56:32:03:13:fd:5d:f0:31:b9:
         74:16:e5:47:3c:53:53:60:e9:0c:01:ec:da:fe:98:b1:6d:2a:
         68:fe:b3:f8:51:ea:4b:89:67:82:29:5f:3d:ab:d8:84:77:a2:
         be:23:08:f9:ac:4e:92:49:c1:3a:5d:9f:47:69:c0:d3:ae:e2:
         fa:9e:05:f2:c0:68:25:51:04:fe:3e:ff:fc:d1:99:f7:ac:f1:
         3f:7d:50:d3:ac:71:ab:1d:9d:bd:9f:3c:09:5e:42:0a:ad:25:
         e6:0c:77:a1:0c:d7:b2:fa:5c:95:95:6b:96:de:97:83:bc:61:
         85:5b:5b:ef:8f:20:78:d8:db:34:f2:66:d8:ee:e3:1f:49:e1:
         5d:d4:dd:17:79:a7:9c:ff:29:cc:ab:b5:3c:3b:b0:1a:2f:d3:
         1f:08:88:4a:58:26:bd:c9:58:12:7f:20:a6:7b:fc:5b:5f:6a:
         f9:eb:42:70:c2:0d:05:42:82:34:df:fe:a5:2e:6a:79:77:35:
         35:40:bc:12:6c:94:3c:01:d9:a8:b1:e2:35:19:73:67:03:cd:
         22:e5:cb:aa:10:aa:a3:91:18:42:5f:dd:e3:e1:01:aa:45:9b:
         a0:6b:56:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 16 23:02:00 2026 by rpki-client