Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a613630303a3a2f34302d3430203d3e20323730313732.roa
File:                     323030313a313230333a613630303a3a2f34302d3430203d3e20323730313732.roa (raw, json)
Hash identifier:          rwJo/txQ5/bXXzLPe4MxkbqS3fGerPaZLeidLaY5BHc=
Subject key identifier:   E9:01:F1:95:A8:AF:A4:3E:2D:23:3B:FA:50:6D:2A:A5:D9:00:54:0C
Certificate issuer:       /CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
Certificate serial:       5D20DA282264FBEE009AE4589139B3E3A4A836BB
Authority key identifier: 73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a613630303a3a2f34302d3430203d3e20323730313732.roa
Signing time:             Sat 02 May 2026 19:10:02 +0000
ROA not before:           Sat 02 May 2026 19:05:02 +0000
ROA not after:            Sat 01 May 2027 19:10:02 +0000
asID:                     270172
IP address blocks:        2001:1203:a600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:20:da:28:22:64:fb:ee:00:9a:e4:58:91:39:b3:e3:a4:a8:36:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
        Validity
            Not Before: May  2 19:05:02 2026 GMT
            Not After : May  1 19:10:02 2027 GMT
        Subject: CN=E901F195A8AFA43E2D233BFA506D2AA5D900540C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f5:82:9e:14:6c:33:09:85:87:d6:c2:e5:dc:
                    25:ef:9c:56:f7:da:89:93:29:07:4d:92:12:28:a7:
                    6e:df:86:2a:46:d0:0f:ff:d7:1f:03:57:cf:a9:cb:
                    e5:27:87:28:41:96:67:b6:ec:f4:cc:36:e6:37:0b:
                    ad:1b:bd:5a:03:8f:d4:c1:5d:f6:e4:c4:ff:57:ef:
                    24:c4:49:30:7d:80:26:0c:23:52:ad:bc:25:37:a1:
                    cd:f2:8e:60:10:c8:8b:f8:6d:9c:fa:74:32:e3:cc:
                    d4:0d:1c:32:bd:31:8d:46:cc:b3:a7:0b:8c:ef:e5:
                    e1:19:75:37:97:31:60:8e:03:c7:28:16:f8:f9:5b:
                    dc:be:f6:fc:bd:7a:df:50:d4:62:7f:8e:6e:b2:1e:
                    0f:9e:bb:ec:ed:bd:a7:a6:66:9d:3e:ab:e9:9b:36:
                    25:d1:2d:d0:23:7d:0d:bb:35:df:60:5b:e9:f2:c5:
                    66:d8:76:65:17:17:02:48:8e:cd:39:b9:93:bb:88:
                    e3:dd:37:55:55:eb:53:2d:85:88:05:01:13:3a:1d:
                    11:a4:71:95:bf:25:1f:ef:a2:9e:31:6b:98:7a:2e:
                    ec:aa:7f:12:76:94:f6:de:52:41:21:c6:4a:11:f7:
                    2f:f0:e1:46:d9:fa:7c:3b:a4:f2:e1:a4:ce:b0:90:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:01:F1:95:A8:AF:A4:3E:2D:23:3B:FA:50:6D:2A:A5:D9:00:54:0C
            X509v3 Authority Key Identifier:
                keyid:73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a613630303a3a2f34302d3430203d3e20323730313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1203:a600::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:a7:48:61:95:20:c9:53:11:67:0b:b3:e3:7f:9f:f8:3c:33:
         85:6b:4c:12:7b:9b:bb:e8:38:7e:a1:44:7e:2f:d9:76:d9:09:
         d7:5d:25:60:1d:27:5d:16:43:2d:27:90:8b:20:be:37:78:12:
         3f:5f:57:c7:13:24:02:fc:04:9b:bc:82:6d:94:f6:63:4b:ee:
         dc:db:13:3f:89:4e:81:bd:c2:25:33:bd:8b:91:88:f5:18:09:
         f9:b5:10:44:26:98:f0:db:df:ae:87:b6:c7:4f:0d:50:0a:b6:
         d9:0a:ae:b8:31:1f:bd:51:8d:57:b0:9c:a3:7b:73:f4:f3:91:
         f3:cc:72:f1:e7:e3:d6:94:e5:de:b0:21:69:91:1b:cf:a6:a3:
         71:8e:67:2a:56:91:b7:e7:bd:17:a3:18:3d:63:a4:9a:35:29:
         98:43:17:c2:3f:98:44:99:5a:62:04:14:ce:71:fb:4d:72:e3:
         e9:a7:a3:b4:17:af:59:1b:d8:06:bf:a7:3f:ec:0c:53:97:2c:
         b6:b2:bd:d8:52:07:13:06:55:3f:85:6e:12:ee:4f:5f:cd:20:
         4e:f5:43:c4:00:1d:59:83:6d:75:05:f6:1a:98:bd:fe:42:3b:
         f8:f5:fd:be:66:49:c2:43:10:42:84:b5:65:ee:e0:c6:76:db:
         a0:e1:1f:db
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:36:49 2026 by rpki-client