Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a3a2f33322d3438203d3e20323730313732.roa
File:                     323030313a313230333a3a2f33322d3438203d3e20323730313732.roa (raw, json)
Hash identifier:          r5gmbdf0rqGVUlG+uGP13RFTOFelJIDX5iJDkMv/GuQ=
Subject key identifier:   F1:0D:2F:FE:4D:89:5A:26:7E:EB:A9:1F:64:A7:C7:E8:2F:43:A0:11
Certificate issuer:       /CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
Certificate serial:       2F7B44D94E1A2E231CA9B5AB5F76EAB46759E12B
Authority key identifier: 73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a3a2f33322d3438203d3e20323730313732.roa
Signing time:             Mon 16 Feb 2026 16:30:47 +0000
ROA not before:           Mon 16 Feb 2026 16:25:47 +0000
ROA not after:            Mon 15 Feb 2027 16:30:47 +0000
asID:                     270172
IP address blocks:        2001:1203::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 03:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7b:44:d9:4e:1a:2e:23:1c:a9:b5:ab:5f:76:ea:b4:67:59:e1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
        Validity
            Not Before: Feb 16 16:25:47 2026 GMT
            Not After : Feb 15 16:30:47 2027 GMT
        Subject: CN=F10D2FFE4D895A267EEBA91F64A7C7E82F43A011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:32:30:8f:b7:2d:2e:fe:ea:d1:52:c0:83:
                    66:0e:ae:df:71:f6:93:2d:58:9e:01:dc:ca:50:67:
                    8c:84:4b:2c:60:e7:d1:b6:cb:c3:bc:09:fe:33:99:
                    c9:f7:19:2e:cf:7a:88:02:68:1a:d6:d1:83:49:06:
                    ec:c5:96:73:14:16:c7:10:3a:e1:57:a5:04:29:11:
                    08:9c:4a:54:f9:0c:d1:5b:04:5b:d4:92:23:ac:6e:
                    43:ab:bb:55:e5:ce:61:4d:31:81:35:86:d0:50:6c:
                    38:46:07:95:3b:17:aa:68:51:b7:0d:6a:47:84:37:
                    d5:63:fe:28:22:e9:7b:44:0c:43:17:19:fb:ef:31:
                    94:b9:bd:5e:bb:47:d9:e6:f4:cc:f2:08:dd:ed:70:
                    7e:72:11:b3:dc:0b:ca:5c:c0:c5:04:48:ec:77:db:
                    86:a1:2c:f1:10:5f:37:61:2b:9f:12:e2:39:3e:b8:
                    da:41:3e:2c:b5:8b:bd:f3:ee:bf:62:f9:e3:a4:77:
                    a2:ce:ba:c6:60:ff:38:9c:67:b2:08:44:f6:99:d5:
                    b5:3a:89:c5:2e:c7:3d:b5:85:bf:39:d6:27:aa:eb:
                    02:2d:05:6d:8d:8a:72:ca:c5:6e:e9:2b:95:33:f1:
                    d7:c5:13:76:40:65:87:4a:3d:6e:f7:fb:15:73:83:
                    81:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0D:2F:FE:4D:89:5A:26:7E:EB:A9:1F:64:A7:C7:E8:2F:43:A0:11
            X509v3 Authority Key Identifier:
                keyid:73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a3a2f33322d3438203d3e20323730313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1203::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:68:f4:d7:2c:dc:17:a0:71:95:77:50:59:ff:06:12:f2:90:
         f8:bc:77:0d:18:12:4d:e8:c8:3e:f1:44:f0:4f:36:1b:11:a0:
         73:5f:00:01:6a:93:c4:9f:7f:71:2b:f7:21:ae:78:56:e7:3f:
         f7:b8:20:07:de:66:ea:06:1a:f5:75:46:8f:2f:1f:01:d6:9e:
         83:f6:ae:a3:3a:c0:72:04:a6:43:65:81:f2:e5:f4:d4:01:df:
         89:b7:f0:55:99:be:53:e0:74:9a:cd:41:3c:c1:d6:93:5b:90:
         fa:b8:3a:5f:23:13:7b:44:95:80:1c:2b:4e:1d:77:67:86:86:
         16:5e:08:a4:0b:b4:c0:80:0f:ec:3f:72:bd:9b:cd:cd:67:27:
         fe:3c:e3:ef:ca:7c:6c:bb:3d:71:4d:f5:f8:10:b3:1d:bc:32:
         d1:3d:35:84:d6:a3:db:66:e8:60:c6:c0:a6:ae:95:84:29:4e:
         44:5a:73:6c:fc:de:73:ac:e2:7e:ef:94:e1:62:4b:a0:27:61:
         e3:d9:bc:23:cf:a2:6b:9d:8d:ec:06:4d:2d:43:85:34:b1:4b:
         44:04:48:a8:0e:00:79:fc:05:7c:90:44:d0:13:db:b6:9b:47:
         52:63:64:f4:bf:ea:dc:a1:db:34:ed:14:be:4b:4d:ea:67:40:
         aa:fb:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:04:33 2026 by rpki-client