Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a313030303a3a2f33362d3336203d3e20323732303736.roa
File:                     323830333a323331303a313030303a3a2f33362d3336203d3e20323732303736.roa (raw, json)
Hash identifier:          ymmDIH/qUsjQZHXMSDMF6UIj0PZPmdu0FWBxxLFgw5o=
Subject key identifier:   04:EE:1F:54:37:E9:C3:31:BA:FB:EA:9A:B3:C4:FA:F3:E6:4C:CE:A5
Certificate issuer:       /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial:       2CE4B5E04F0F5ADE09D49DBEA5032C850E52548A
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a313030303a3a2f33362d3336203d3e20323732303736.roa
Signing time:             Fri 09 Oct 2026 15:39:34 +0000
ROA not before:           Fri 09 Oct 2026 15:34:34 +0000
ROA not after:            Fri 08 Oct 2027 15:39:34 +0000
asID:                     272076
IP address blocks:        2803:2310:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 18:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e4:b5:e0:4f:0f:5a:de:09:d4:9d:be:a5:03:2c:85:0e:52:54:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
        Validity
            Not Before: Oct  9 15:34:34 2026 GMT
            Not After : Oct  8 15:39:34 2027 GMT
        Subject: CN=04EE1F5437E9C331BAFBEA9AB3C4FAF3E64CCEA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:ec:26:c8:e3:72:41:fc:53:e9:a7:f1:54:
                    c6:f8:ea:60:02:38:d1:47:3a:d5:ad:0d:cc:71:c7:
                    17:d1:d9:d9:6f:76:06:8c:58:71:f9:af:06:9b:cd:
                    df:b7:01:b5:c4:44:d7:d3:cc:9e:62:90:e5:0d:14:
                    bd:64:2d:0b:9f:9c:ee:d9:f7:e3:50:08:93:04:0b:
                    01:a7:1f:d9:d2:ac:fd:5c:62:79:4e:d6:60:62:ff:
                    c5:eb:8e:45:c1:ee:4d:70:5d:02:c4:a0:77:ac:83:
                    c1:2a:42:27:bd:3b:f1:0a:fa:fe:e7:65:df:f1:7b:
                    65:28:1f:9e:59:4c:dd:e5:70:26:9c:90:fe:11:70:
                    8d:a6:e7:96:9a:26:bf:3f:f2:d5:25:e4:fd:63:b2:
                    ff:cd:0c:27:49:31:3a:f5:c7:30:cb:45:37:71:3e:
                    ad:f8:42:c0:8a:52:d4:1e:c3:b4:b3:ff:d3:a5:ac:
                    c4:52:78:ef:88:6f:fa:9a:69:a2:7b:96:7f:33:61:
                    98:33:27:28:d1:bd:87:90:52:84:db:2e:09:44:1d:
                    6a:6a:b4:29:c8:d1:3f:b5:a2:ab:46:1a:f6:d6:2a:
                    02:67:1b:47:96:f8:1d:85:26:cd:84:44:42:73:36:
                    df:87:cb:99:70:d0:bb:7c:77:6b:ef:b9:87:b4:bc:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EE:1F:54:37:E9:C3:31:BA:FB:EA:9A:B3:C4:FA:F3:E6:4C:CE:A5
            X509v3 Authority Key Identifier:
                keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a313030303a3a2f33362d3336203d3e20323732303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2310:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:32:12:fa:74:b4:e1:45:b0:08:9c:21:ea:0f:6a:67:13:7c:
         ab:8b:fe:aa:dc:61:1c:25:27:de:a8:4d:8d:b6:69:88:07:3d:
         69:34:ee:68:4e:17:bb:35:a9:cc:47:71:89:69:73:93:4e:58:
         22:f3:54:5a:ec:59:04:ad:69:4e:81:27:a5:83:e1:54:9a:8e:
         b9:8a:bf:44:59:5c:72:4b:23:a2:20:bd:f5:72:2c:97:b4:1a:
         42:06:d8:df:06:95:a3:27:25:f1:7a:a4:dd:f1:35:fe:a8:8c:
         83:fe:0d:b6:ce:20:e2:06:be:59:92:5c:76:e6:7e:70:71:c5:
         21:95:1d:86:32:96:63:b0:fa:2c:78:e1:cb:e3:74:27:09:2b:
         9a:6d:aa:87:ca:02:5d:49:c1:44:85:7c:91:95:cc:4d:9c:14:
         1f:12:e0:e3:8b:22:81:6d:63:db:ad:dc:0c:47:c7:ed:da:81:
         31:6d:48:6e:14:a5:43:ca:01:55:9a:bd:ca:91:9a:6e:26:d3:
         8b:a9:7a:4e:24:4d:df:72:f1:f5:e4:cb:51:51:47:82:26:33:
         24:5c:33:c5:60:c0:f5:63:06:65:45:8f:f7:00:f8:2e:cc:1a:
         a8:4f:1d:3b:e9:f4:bb:aa:da:02:ea:e9:01:68:0f:22:55:21:
         5b:57:4f:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 02:04:46 2026 by rpki-client