Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a613030303a3a2f34302d3430203d3e20323730313732.roa
File:                     323030313a313230333a613030303a3a2f34302d3430203d3e20323730313732.roa (raw, json)
Hash identifier:          YuMUIDFRTvJrAP4C4L3Nd67iNRPx1HtFGSB10phqD1k=
Subject key identifier:   7A:53:F9:18:71:FE:A5:30:53:0F:F9:54:80:13:15:FC:1B:D1:B4:A9
Certificate issuer:       /CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
Certificate serial:       5DFE3F7B02F76FBFA076DF66E4052A9DEB5EFF3A
Authority key identifier: 73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a613030303a3a2f34302d3430203d3e20323730313732.roa
Signing time:             Sat 02 May 2026 19:10:02 +0000
ROA not before:           Sat 02 May 2026 19:05:02 +0000
ROA not after:            Sat 01 May 2027 19:10:02 +0000
asID:                     270172
IP address blocks:        2001:1203:a000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fe:3f:7b:02:f7:6f:bf:a0:76:df:66:e4:05:2a:9d:eb:5e:ff:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
        Validity
            Not Before: May  2 19:05:02 2026 GMT
            Not After : May  1 19:10:02 2027 GMT
        Subject: CN=7A53F91871FEA530530FF954801315FC1BD1B4A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:42:0a:66:c7:a6:3e:9a:33:c6:8c:50:e9:
                    b0:6b:04:e3:ff:14:b3:af:93:ab:ff:d9:95:c8:8e:
                    80:3b:c0:8e:19:2e:a0:c6:6a:8c:d5:f1:bd:8e:25:
                    72:ea:63:ab:33:3e:0b:27:36:63:1a:3d:f4:9b:f0:
                    d6:80:5f:ad:59:c1:11:33:06:04:a7:95:2e:06:51:
                    fa:1f:74:f6:cd:ad:ec:24:c9:94:2e:0e:e2:41:5b:
                    6c:db:28:49:b3:0f:cf:bc:e3:2a:bf:9d:24:bf:f4:
                    d7:03:c6:c3:e5:4f:53:24:bc:92:a5:48:e1:f0:b1:
                    76:7b:00:77:9c:4b:22:01:5b:c2:b9:8f:e8:58:ec:
                    3b:3d:ec:71:da:83:1b:77:6e:85:9e:d1:de:f4:85:
                    50:c6:1c:2c:15:97:2b:fa:a8:1d:ad:64:59:69:c6:
                    28:bb:f7:33:c2:2c:ce:1b:1f:7d:a7:e7:78:37:c9:
                    d6:4d:f3:dd:68:9f:13:7e:77:4e:73:72:41:c7:a4:
                    90:4a:3d:69:30:80:a2:37:db:03:62:f4:d2:d4:01:
                    30:c2:27:03:52:e2:0d:cc:79:08:08:f8:18:99:24:
                    36:db:c0:21:33:98:94:c3:99:3c:c8:bc:6e:4c:8a:
                    00:c3:67:70:b7:21:16:b1:71:48:af:3d:dc:dd:9d:
                    1c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:53:F9:18:71:FE:A5:30:53:0F:F9:54:80:13:15:FC:1B:D1:B4:A9
            X509v3 Authority Key Identifier:
                keyid:73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a613030303a3a2f34302d3430203d3e20323730313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1203:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:7a:c1:0e:73:7f:d9:26:58:04:b9:9d:f8:6a:04:5d:a4:fb:
         3d:fa:71:dd:33:c5:49:9b:c4:33:90:2c:1d:6c:8c:e8:60:71:
         b3:b2:e7:78:d6:91:a4:28:8d:8a:d3:3d:f3:74:4b:01:c4:3c:
         06:d9:97:a5:cb:20:71:e1:f2:c9:b1:7b:94:6d:f7:d5:0e:56:
         99:56:5f:2d:08:f9:24:08:e4:2d:ce:17:42:0c:cd:69:f9:ac:
         83:30:34:25:50:b7:40:78:63:0b:7f:21:02:b1:6c:95:d7:73:
         7e:1f:58:47:02:a7:f5:63:e0:d1:a2:04:9b:4e:20:fc:67:35:
         94:b6:13:07:59:cb:87:b5:2c:9a:3c:a6:b9:a5:31:76:7b:8a:
         e5:e8:6d:89:3f:b2:f6:b4:5d:41:8e:03:a3:50:44:e2:a3:6e:
         f4:c2:24:80:e7:82:65:66:bc:63:27:e1:3f:7f:0f:55:62:db:
         16:ef:e9:72:76:ef:8a:87:c3:42:7c:44:9b:ad:f8:79:b4:0c:
         7b:42:ee:8f:26:6e:17:81:b2:fc:f8:76:78:ed:ac:f0:b7:e0:
         1b:98:94:bf:c5:b6:28:7c:e5:76:91:76:54:e3:83:12:c3:a2:
         93:96:e4:3d:f8:e4:ee:5e:54:d2:68:06:11:dd:84:21:71:1a:
         43:8f:f5:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:20:08 2026 by rpki-client