Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a3a2f33362d3336203d3e20323730313732.roa
File:                     323030313a313230333a3a2f33362d3336203d3e20323730313732.roa (raw, json)
Hash identifier:          +uEhyHbULhAwFi6aN22alJdMMpxQM9ub/XdKPh3iBNs=
Subject key identifier:   E8:AF:A3:55:08:F4:E4:48:DC:E1:AB:0E:32:A8:F9:E8:03:46:6B:8D
Certificate issuer:       /CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
Certificate serial:       337DA6F644DDA0985FFC4FC01889AB83D099C88E
Authority key identifier: 73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a3a2f33362d3336203d3e20323730313732.roa
Signing time:             Sat 02 May 2026 19:10:00 +0000
ROA not before:           Sat 02 May 2026 19:05:00 +0000
ROA not after:            Sat 01 May 2027 19:10:00 +0000
asID:                     270172
IP address blocks:        2001:1203::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7d:a6:f6:44:dd:a0:98:5f:fc:4f:c0:18:89:ab:83:d0:99:c8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
        Validity
            Not Before: May  2 19:05:00 2026 GMT
            Not After : May  1 19:10:00 2027 GMT
        Subject: CN=E8AFA35508F4E448DCE1AB0E32A8F9E803466B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:d8:cf:d9:8b:91:fa:7e:50:e6:21:03:80:
                    c2:e1:cd:79:63:c3:fe:26:7b:8d:26:77:9f:c3:37:
                    af:17:84:73:60:a0:46:36:5c:08:42:f2:be:28:51:
                    df:b2:fb:b1:7a:b1:09:92:66:48:42:ec:bf:ff:18:
                    58:47:2f:e8:65:be:f4:f5:bf:a5:ff:84:51:4e:28:
                    23:af:bf:76:9c:61:db:9c:7c:a6:1a:cb:a4:6e:b7:
                    43:6e:43:9d:a9:44:71:f1:8e:be:1f:96:f7:6c:48:
                    4e:ee:3f:db:5e:7b:c1:24:03:ed:b0:1f:6a:8b:a6:
                    6a:cb:d6:f9:09:3d:b7:12:98:fc:d5:99:7d:be:cb:
                    79:cf:cf:7d:9f:d2:34:c3:39:99:fe:b5:36:ab:5a:
                    4b:1d:03:d9:4d:e5:2a:98:45:03:c8:21:f7:63:c6:
                    17:ab:62:65:80:77:99:76:12:be:a9:b3:d2:d3:26:
                    5d:f1:1b:ea:df:47:dd:0a:dc:4e:86:50:ae:cb:5b:
                    ad:9e:bb:8e:d9:41:3b:a6:f2:69:03:fa:94:ec:ac:
                    50:79:16:52:0b:dc:b7:78:fe:36:e3:03:4a:60:ae:
                    f0:da:4f:6a:76:f2:d8:ac:2d:4a:bd:81:6b:39:f9:
                    6c:42:3a:da:d8:5c:33:9c:d9:77:22:ef:e5:45:f3:
                    5f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AF:A3:55:08:F4:E4:48:DC:E1:AB:0E:32:A8:F9:E8:03:46:6B:8D
            X509v3 Authority Key Identifier:
                keyid:73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a3a2f33362d3336203d3e20323730313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1203::/36

    Signature Algorithm: sha256WithRSAEncryption
         8c:25:45:2e:0a:b0:ad:2c:30:da:d5:d7:9b:78:b0:72:b1:d6:
         2f:f3:97:18:4a:3a:d3:9c:70:54:5d:41:ad:55:f6:30:5e:8e:
         bf:80:8c:83:70:f2:05:53:fa:b2:09:e9:7d:25:a5:51:b3:15:
         c8:06:11:a4:fe:46:5c:2d:e2:b3:96:2c:26:88:05:ac:c8:a0:
         e4:a4:13:1d:ea:6e:ea:50:a2:31:30:21:d0:96:41:a7:6b:fb:
         f0:c4:1e:8a:81:fe:fe:98:06:46:7b:79:83:7e:62:98:a3:f8:
         22:37:e9:c3:38:82:8d:28:d5:12:be:0f:a4:41:62:10:d5:fe:
         bb:4f:38:94:28:31:4d:83:95:f1:b8:b3:f9:50:2f:0a:ac:ec:
         4c:87:95:eb:02:f2:c9:5d:c3:e9:36:4a:b3:6c:68:20:a8:79:
         00:dc:54:d5:4f:ff:56:3d:2a:25:7b:de:6e:70:04:fa:4a:62:
         ec:1b:00:6e:e0:3e:28:ea:70:b9:c7:82:a6:01:1e:e3:c8:0e:
         4e:5c:ae:e6:b1:55:5f:25:1f:6d:21:ab:3d:f8:0f:ad:5f:79:
         a2:c5:ce:02:4b:c7:15:c5:36:1c:3f:c4:ca:01:17:38:54:db:
         33:09:69:91:ea:7d:69:a1:80:e9:ec:bf:9c:41:ed:ec:4f:2e:
         5d:c9:b9:96
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUM32m9kTdoJhf/E/AGImrg9CZyI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNBQThGQ0U0MDNBQzZCMDgzQkUyODJCMDNERkI0MEUy
RTZDREZBMDAeFw0yNjA1MDIxOTA1MDBaFw0yNzA1MDExOTEwMDBaMDMxMTAvBgNV
BAMTKEU4QUZBMzU1MDhGNEU0NDhEQ0UxQUIwRTMyQThGOUU4MDM0NjZCOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0tjP2YuR+n5Q5iEDgMLhzXlj
w/4me40md5/DN68XhHNgoEY2XAhC8r4oUd+y+7F6sQmSZkhC7L//GFhHL+hlvvT1
v6X/hFFOKCOvv3acYducfKYay6Rut0NuQ52pRHHxjr4flvdsSE7uP9tee8EkA+2w
H2qLpmrL1vkJPbcSmPzVmX2+y3nPz32f0jTDOZn+tTarWksdA9lN5SqYRQPIIfdj
xherYmWAd5l2Er6ps9LTJl3xG+rfR90K3E6GUK7LW62eu47ZQTum8mkD+pTsrFB5
FlIL3Ld4/jbjA0pgrvDaT2p28tisLUq9gWs5+WxCOtrYXDOc2Xci7+VF8197AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU6K+jVQj05Ejc4asOMqj56ANGa40wHwYDVR0j
BBgwFoAUc6qPzkA6xrCDvigrA9+0Di5s36AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDU5MDk5OTNBMEY5MEU4RUY4MjhDMDBCNjU5NzRBOUQ5
ODk1NTlERUNGMThEQTc3ODQxNERDNzZBNTU0MzkzLzAvNzNBQThGQ0U0MDNBQzZC
MDgzQkUyODJCMDNERkI0MEUyRTZDREZBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83M0FBOEZDRTQwM0FDNkIwODNC
RTI4MkIwM0RGQjQwRTJFNkNERkEwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ1OTA5OTkzQTBGOTBFOEVGODI4QzAwQjY1OTc0QTlEOTg5NTU5REVD
RjE4REE3Nzg0MTREQzc2QTU1NDM5My8wLzMyMzAzMDMxM2EzMTMyMzAzMzNhM2Ey
ZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzczMDMxMzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABEgMA
MA0GCSqGSIb3DQEBCwUAA4IBAQCMJUUuCrCtLDDa1debeLBysdYv85cYSjrTnHBU
XUGtVfYwXo6/gIyDcPIFU/qyCel9JaVRsxXIBhGk/kZcLeKzliwmiAWsyKDkpBMd
6m7qUKIxMCHQlkGna/vwxB6Kgf7+mAZGe3mDfmKYo/giN+nDOIKNKNUSvg+kQWIQ
1f67TziUKDFNg5XxuLP5UC8KrOxMh5XrAvLJXcPpNkqzbGggqHkA3FTVT/9WPSol
e95ucAT6SmLsGwBu4D4o6nC5x4KmAR7jyA5OXK7msVVfJR9tIas9+A+tX3mixc4C
S8cVxTYcP8TKARc4VNszCWmR6n1poYDp7L+cQe3sTy5dybmW
-----END CERTIFICATE-----
Generated at Wed May 13 16:05:35 2026 by rpki-client