Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/323830333a393035303a3a2f33322d3438203d3e20323733303937.roa
File:                     323830333a393035303a3a2f33322d3438203d3e20323733303937.roa (raw, json)
Hash identifier:          7MecdzfGbbalbdP6lgCBtnOs5pFzKsaEO7/ermvgbVs=
Subject key identifier:   DE:CC:94:E3:F9:54:9A:54:77:37:93:0C:11:C8:1B:03:5F:95:21:40
Certificate issuer:       /CN=06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5
Certificate serial:       54813A574907EDE4E60195D4FCE7105BF009CE24
Authority key identifier: 06:ED:0E:D7:32:E4:FA:6F:FD:CF:29:5D:97:0E:E3:0A:A4:C6:F0:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/323830333a393035303a3a2f33322d3438203d3e20323733303937.roa
Signing time:             Mon 12 Oct 2026 17:40:04 +0000
ROA not before:           Mon 12 Oct 2026 17:35:04 +0000
ROA not after:            Mon 11 Oct 2027 17:40:04 +0000
asID:                     273097
IP address blocks:        2803:9050::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 23:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:81:3a:57:49:07:ed:e4:e6:01:95:d4:fc:e7:10:5b:f0:09:ce:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5
        Validity
            Not Before: Oct 12 17:35:04 2026 GMT
            Not After : Oct 11 17:40:04 2027 GMT
        Subject: CN=DECC94E3F9549A547737930C11C81B035F952140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:76:e4:cf:1c:bd:50:d0:34:86:4b:e8:99:
                    94:b3:b0:f9:b4:12:c3:58:6c:ec:2c:cb:79:7c:cb:
                    9c:4a:d8:81:2d:be:cc:09:09:2c:3f:16:43:5c:f5:
                    17:bb:3b:aa:60:3c:a3:44:c8:e8:d4:75:8f:2e:42:
                    1d:b2:38:20:65:a7:d4:67:ac:2e:eb:3e:41:70:0c:
                    35:6b:b1:fa:cb:32:4a:66:55:82:f1:91:96:ad:80:
                    e1:99:24:25:0e:70:54:19:5d:c6:80:d1:81:7e:12:
                    48:8b:bd:b2:7c:a9:1a:94:5e:cd:ab:ce:73:78:7d:
                    ce:9a:b2:87:b6:b1:cc:45:bc:4b:d4:c0:b4:11:85:
                    f0:05:2a:ba:c9:f7:14:1c:cc:47:87:93:c7:3c:8a:
                    f5:9d:eb:1d:a7:81:f2:8f:a9:76:7a:8c:89:ae:0a:
                    f1:9b:d7:8b:bd:de:a7:5c:ea:a9:8c:56:68:37:78:
                    69:74:79:4f:84:c2:aa:a6:79:2b:9d:b9:f8:87:10:
                    fa:cb:eb:9d:cf:82:ee:45:77:f9:a5:3d:84:e1:06:
                    ce:c0:55:f1:c2:b7:a8:da:b1:05:fb:3b:42:dc:cc:
                    ba:ba:68:61:c6:c9:db:6f:6d:51:c8:f2:44:52:12:
                    0b:5f:cf:26:32:d9:78:d7:bb:e0:98:a4:95:76:5c:
                    98:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CC:94:E3:F9:54:9A:54:77:37:93:0C:11:C8:1B:03:5F:95:21:40
            X509v3 Authority Key Identifier:
                keyid:06:ED:0E:D7:32:E4:FA:6F:FD:CF:29:5D:97:0E:E3:0A:A4:C6:F0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/323830333a393035303a3a2f33322d3438203d3e20323733303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9050::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:b6:56:92:b9:97:f8:81:ed:03:6a:2d:88:eb:1d:d8:68:e5:
         a9:f8:a4:93:e0:ab:f0:46:ff:fd:62:b0:f9:fe:2b:a9:c3:1b:
         4e:85:fe:35:43:a4:45:fa:cd:aa:7c:6d:70:33:b9:d6:be:38:
         a4:45:b8:45:66:b1:7f:85:46:1b:4b:bc:b7:2d:b7:84:38:00:
         ff:4f:81:83:73:85:9d:dc:a8:91:f8:3a:02:06:ba:f0:f4:71:
         f1:0a:ba:f5:cc:ab:42:ec:a6:51:2c:48:d5:68:81:66:24:6a:
         ff:2e:31:4e:13:f6:fa:7a:bd:0a:49:8b:3f:eb:9c:31:3f:a6:
         f8:e0:db:d4:12:72:c8:62:56:96:85:60:21:5c:9b:0e:e1:13:
         2c:50:4c:17:25:38:14:1c:b5:8d:17:c8:19:e7:86:ea:64:c2:
         1f:28:fe:42:3e:d0:86:88:fc:61:7a:60:f3:a9:a1:3b:04:df:
         b7:5d:29:7a:44:c9:93:26:7f:e6:46:9e:42:30:f9:42:db:f8:
         39:b7:22:f1:51:01:1d:bf:89:48:6e:57:1f:53:3c:be:2e:fc:
         83:51:41:12:94:c5:bc:86:4e:20:31:78:e2:d5:9d:c5:10:8a:
         95:ab:2a:c2:33:12:ed:47:b9:16:e0:7d:17:32:c0:76:d6:f9:
         7d:89:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:42:05 2026 by rpki-client