Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653030303a3a2f33392d3438203d3e20323732393337.roa
File:                     323830333a333139303a653030303a3a2f33392d3438203d3e20323732393337.roa (raw, json)
Hash identifier:          DaH3kvL4MgXISy6BvCbPCseH5LXr6438P7/34ZxgWJI=
Subject key identifier:   C3:6C:77:F8:60:4D:93:25:08:9B:3F:B1:A5:1B:03:BC:30:73:73:42
Certificate issuer:       /CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
Certificate serial:       0B569C5D05924F3E5123EE8CBDA059D155006F2D
Authority key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653030303a3a2f33392d3438203d3e20323732393337.roa
Signing time:             Wed 29 Oct 2025 22:51:19 +0000
ROA not before:           Wed 29 Oct 2025 22:46:19 +0000
ROA not after:            Wed 28 Oct 2026 22:51:19 +0000
asID:                     272937
IP address blocks:        2803:3190:e000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:56:9c:5d:05:92:4f:3e:51:23:ee:8c:bd:a0:59:d1:55:00:6f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
        Validity
            Not Before: Oct 29 22:46:19 2025 GMT
            Not After : Oct 28 22:51:19 2026 GMT
        Subject: CN=C36C77F8604D9325089B3FB1A51B03BC30737342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:76:03:b8:7f:49:13:37:cc:45:9a:c7:eb:
                    6d:63:81:df:c9:70:c0:79:50:2b:03:48:0b:ac:a9:
                    4e:aa:63:de:48:0e:0d:0f:b8:a8:1b:f3:e7:bc:02:
                    f7:ac:58:5d:62:09:f3:25:2b:3b:2c:8d:7d:60:65:
                    ac:f4:c7:a9:4b:f6:8a:d0:63:04:f6:4d:e2:01:2d:
                    66:37:93:04:94:56:de:c2:e7:ed:75:21:26:f1:d2:
                    87:ea:94:91:3c:1a:cc:6b:7c:6b:4f:42:d4:ec:4b:
                    e4:af:8d:dd:db:88:cf:39:d4:9e:a5:3f:be:52:52:
                    5c:13:00:c0:24:2b:6c:c4:e1:3d:2f:83:d1:09:a1:
                    7e:61:51:4a:4a:66:56:77:21:e3:1c:98:0f:8d:05:
                    a4:25:fc:a2:72:41:fa:22:cc:f9:4d:d7:31:d9:76:
                    95:9c:a3:07:4d:22:7b:78:f4:9b:f5:57:c5:f0:a2:
                    49:e8:a0:f8:8c:00:af:2a:a9:6c:fd:35:7e:1d:f4:
                    ed:ed:9e:2f:04:40:2f:22:b6:c4:12:1a:86:d9:ad:
                    d5:09:1a:0f:d3:f5:96:07:37:bc:f0:e3:20:85:75:
                    4a:dc:75:7c:59:8e:c2:58:79:fe:5a:1f:c3:95:6a:
                    25:a8:91:41:97:21:4a:f4:37:3f:88:83:17:08:ce:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6C:77:F8:60:4D:93:25:08:9B:3F:B1:A5:1B:03:BC:30:73:73:42
            X509v3 Authority Key Identifier:
                keyid:70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653030303a3a2f33392d3438203d3e20323732393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190:e000::/39

    Signature Algorithm: sha256WithRSAEncryption
         c1:f3:a0:d5:53:8f:33:59:43:49:7b:fc:c4:04:02:ac:16:c6:
         41:f7:aa:e7:95:46:da:c6:ce:9b:55:58:34:b0:dc:42:25:65:
         f9:fa:46:12:2e:30:a5:e6:e6:c3:44:c5:5e:6b:36:0c:17:8b:
         d7:62:36:65:a3:60:7e:0a:19:0c:1a:ee:b9:d7:43:64:9c:3c:
         39:bb:5a:11:52:17:b1:60:a3:85:09:8e:a6:79:10:74:5c:25:
         43:1f:a7:99:81:0d:e8:5c:3a:06:5e:54:ea:8a:df:b7:55:26:
         7f:9c:2a:1f:b8:b0:03:6c:26:23:f4:15:e1:4d:83:56:0c:dc:
         b2:44:da:40:e1:52:9f:cd:8b:3e:28:80:e8:88:60:97:1b:1b:
         39:a2:0d:ad:4e:1a:76:5b:01:dc:5d:6e:1a:38:07:7f:fb:52:
         d3:a0:7e:f3:9a:79:e4:d0:65:4b:fe:13:35:c2:52:2f:b9:68:
         29:ab:83:97:04:82:b1:15:47:7b:dc:cb:30:32:e7:8a:ee:d1:
         4e:5c:9c:99:61:04:3a:bb:3d:da:9d:d2:74:3e:bd:37:b1:97:
         b3:3e:73:ee:6a:b3:68:b4:cf:d2:ca:fc:46:c8:9c:95:21:1f:
         07:64:28:a1:8b:08:77:a7:a5:0a:3d:61:7c:53:3f:7d:e8:f9:
         ce:b2:cd:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:49:47 2025 by rpki-client