Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a323030303a3a2f33362d3336203d3e20323730313732.roa
File:                     323030313a313230333a323030303a3a2f33362d3336203d3e20323730313732.roa (raw, json)
Hash identifier:          x2HId23T8FS/iYQ6w1I7KD7GxKNzwTndjaMYcMdKfaM=
Subject key identifier:   A0:AB:21:2B:15:9E:3E:64:C2:A6:E2:58:83:15:70:F3:83:85:91:87
Certificate issuer:       /CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
Certificate serial:       19AFFB6D813A0ABB2A47CA576F8F7C28AEC3641D
Authority key identifier: 73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a323030303a3a2f33362d3336203d3e20323730313732.roa
Signing time:             Sat 02 May 2026 19:10:00 +0000
ROA not before:           Sat 02 May 2026 19:05:00 +0000
ROA not after:            Sat 01 May 2027 19:10:00 +0000
asID:                     270172
IP address blocks:        2001:1203:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:af:fb:6d:81:3a:0a:bb:2a:47:ca:57:6f:8f:7c:28:ae:c3:64:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
        Validity
            Not Before: May  2 19:05:00 2026 GMT
            Not After : May  1 19:10:00 2027 GMT
        Subject: CN=A0AB212B159E3E64C2A6E258831570F383859187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:3a:a6:c0:bc:74:e3:7a:d5:85:2e:77:ed:
                    57:39:15:4a:04:9c:a1:cb:71:eb:ab:ad:a4:07:78:
                    13:5b:b9:b8:bc:c7:a9:1c:cb:66:29:9c:6b:7c:78:
                    fe:e6:d4:be:06:87:6a:79:04:27:19:a6:3e:b2:66:
                    22:01:b5:d0:d3:37:93:33:85:34:5f:3f:d8:e8:5a:
                    33:69:68:27:1c:36:d5:11:4d:f9:0b:c5:85:4b:a6:
                    dc:7f:e9:8c:c0:72:07:6e:54:4b:08:6f:b1:c5:93:
                    29:08:7d:5e:1b:64:c9:08:ae:80:9c:c8:ff:03:3d:
                    e7:b8:c6:27:85:19:47:67:36:5b:e9:94:6f:64:53:
                    a1:e4:1b:bf:14:04:04:9a:ba:5e:d6:99:38:dd:c6:
                    ed:ec:37:40:15:a6:4f:cf:52:9d:05:2e:91:8f:aa:
                    55:5b:14:73:56:ae:1c:0d:1f:5f:77:a1:cd:35:72:
                    e1:f3:3f:c2:f1:60:6e:5d:47:f7:21:82:46:b1:6e:
                    e5:3a:0c:9f:a7:87:f6:27:98:10:00:0e:3e:ee:06:
                    3e:f3:7c:0d:61:fc:25:83:38:2a:ae:c7:24:55:8a:
                    d8:fb:13:e6:aa:eb:c0:4a:f6:04:da:1e:cf:6e:7b:
                    5e:e3:8c:7d:d0:0e:cf:2e:b5:5f:a7:1b:4b:8c:b1:
                    c6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AB:21:2B:15:9E:3E:64:C2:A6:E2:58:83:15:70:F3:83:85:91:87
            X509v3 Authority Key Identifier:
                keyid:73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a323030303a3a2f33362d3336203d3e20323730313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1203:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ac:6a:9d:12:a0:cd:ca:32:34:26:d9:f9:06:da:ce:05:24:83:
         97:99:80:ab:50:9a:9e:ae:29:e6:d3:02:2f:fd:c4:fe:d6:12:
         d8:fb:f4:c6:7b:20:64:5a:4f:1d:1f:6a:a4:91:d5:4f:21:12:
         d6:3d:84:6f:22:86:b8:e3:20:d3:e9:04:d1:1d:6c:0b:33:1e:
         eb:0a:83:96:de:a2:40:8a:8f:a1:42:c2:a1:51:dc:39:40:4a:
         51:9d:e6:a0:11:30:ee:2b:a9:a0:4e:f9:3f:e8:a2:c6:74:2c:
         51:f4:b8:3d:a7:ce:ce:ef:71:c7:7c:8a:64:0f:22:91:44:02:
         a6:8b:35:be:72:a8:74:6e:83:f4:bd:dc:ea:7e:c2:98:24:6e:
         3f:33:1a:e9:78:39:e1:84:24:e1:28:ae:93:18:5a:6d:7c:44:
         61:b8:26:31:17:6e:f3:85:e6:9c:e0:45:25:76:4b:68:a6:0a:
         fa:86:c8:a2:27:59:1b:ce:e2:d3:66:38:a8:01:1a:9c:10:a6:
         d8:58:14:e2:1a:1b:4d:ca:7a:89:12:a4:6a:dc:08:96:73:6b:
         90:1a:f0:e4:d3:ba:88:2c:0e:97:4c:c1:1e:ee:b5:2a:59:52:
         cd:3c:ad:2a:d5:c9:61:fc:7c:ef:0d:74:fc:14:38:4d:50:30:
         21:2c:2a:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:37:00 2026 by rpki-client