Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a623030303a3a2f33362d3438203d3e203634313330.roa
File:                     323830333a623065303a623030303a3a2f33362d3438203d3e203634313330.roa (raw, json)
Hash identifier:          3WRjEiQHznKG3WuPIHgLfqgfCdXp/wKO5b+edla8cfo=
Subject key identifier:   13:3C:8B:5D:A8:8B:ED:98:B2:F9:58:FE:56:D2:3B:F0:0A:AF:F6:5C
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       543432AD4BFA185A959F5F0477902E07789D406E
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a623030303a3a2f33362d3438203d3e203634313330.roa
Signing time:             Thu 01 Oct 2026 20:37:42 +0000
ROA not before:           Thu 01 Oct 2026 20:32:42 +0000
ROA not after:            Thu 30 Sep 2027 20:37:42 +0000
asID:                     64130
IP address blocks:        2803:b0e0:b000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:34:32:ad:4b:fa:18:5a:95:9f:5f:04:77:90:2e:07:78:9d:40:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Oct  1 20:32:42 2026 GMT
            Not After : Sep 30 20:37:42 2027 GMT
        Subject: CN=133C8B5DA88BED98B2F958FE56D23BF00AAFF65C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b3:7c:2d:35:1b:49:60:56:7f:7d:6c:e6:fd:
                    f0:85:c1:c8:3d:eb:78:87:fd:fc:6b:7b:09:ce:e0:
                    39:a0:d6:95:f3:ba:63:e4:be:3a:6b:5d:12:3b:fc:
                    e6:50:ac:6c:c2:5b:29:f8:aa:44:5b:34:3c:c7:a6:
                    55:23:57:b2:65:47:89:05:3f:0e:6e:54:90:15:33:
                    17:f5:32:22:da:ae:69:06:2b:12:6f:18:b2:4d:fb:
                    0b:b2:85:90:ae:2a:21:68:01:84:2a:35:44:e8:01:
                    80:95:96:28:15:57:82:19:de:1f:50:e2:a0:de:bf:
                    9a:78:75:17:a5:cb:fe:34:bc:a5:65:39:71:41:ac:
                    79:e5:4a:90:c7:c3:75:7e:ea:23:b8:d6:2e:d3:25:
                    2f:85:f4:24:4d:3c:d0:ef:97:d9:d0:78:08:a6:a0:
                    96:b7:06:ef:30:9c:66:ef:d2:4e:22:51:90:bc:62:
                    63:e2:49:17:5e:af:60:f7:65:67:bf:d7:60:9a:55:
                    63:8d:43:0b:5a:a9:58:6d:b2:27:3e:e1:40:05:b8:
                    fe:4b:19:c9:21:9a:20:59:48:e6:e7:e1:79:b2:ed:
                    1f:c1:59:f6:3e:9f:12:ca:fb:d8:87:f1:65:e4:62:
                    f5:7f:e9:95:85:b0:7a:4b:78:9e:5e:ef:bb:b8:94:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3C:8B:5D:A8:8B:ED:98:B2:F9:58:FE:56:D2:3B:F0:0A:AF:F6:5C
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a623030303a3a2f33362d3438203d3e203634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ac:47:9c:83:ef:ed:31:a7:66:6d:0d:8e:62:8c:79:2a:e9:ec:
         59:e6:2d:2f:21:d9:ce:84:c6:9e:83:c2:eb:76:95:f3:f5:d4:
         af:b4:b4:db:bd:78:86:4d:f9:e5:92:dc:a7:a9:5d:58:71:81:
         b3:dc:d0:c1:56:8a:e6:bc:c0:aa:de:a3:8d:20:21:81:74:87:
         ba:02:59:59:97:b2:a4:80:04:ad:6d:e9:ea:5b:df:7f:c6:a2:
         2c:74:30:ef:00:c8:dc:32:0e:b8:1e:d1:2b:7c:38:10:09:75:
         70:13:5a:3e:16:ee:56:36:f8:0b:db:80:35:38:3d:b7:f1:77:
         d1:08:3a:5a:cd:34:f0:0c:1c:20:bc:54:bd:ff:3b:dc:24:60:
         43:25:e4:46:77:e6:50:c0:14:87:60:69:fc:15:00:e3:25:c9:
         f9:8c:70:da:bb:6b:31:bd:57:1b:25:49:af:88:11:b3:41:36:
         5b:1f:ea:91:c4:e9:d4:b0:c9:c4:7c:b0:b4:ac:52:f1:db:64:
         31:4a:61:31:7b:6a:8c:4f:72:9a:d4:d6:e0:dd:99:65:a4:f9:
         d2:d8:3d:14:8f:aa:db:aa:88:39:bc:63:9f:3c:dc:69:59:b2:
         79:4b:43:3b:00:97:06:c7:db:ca:2f:ef:87:6f:81:c2:8e:d5:
         72:25:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:53:01 2026 by rpki-client