Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a653030303a3a2f33362d3336203d3e20323637383332.roa
File:                     323830333a323331303a653030303a3a2f33362d3336203d3e20323637383332.roa (raw, json)
Hash identifier:          zeUeYbyOAEyZBtjfvgll0J6Grn1+9PbG0Jdc8yAGEpI=
Subject key identifier:   22:D3:9D:B9:A9:45:27:37:9F:F9:5F:C0:07:D8:F2:4A:7A:D4:B0:25
Certificate issuer:       /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial:       72F4EE8653AE75F75593F367532A942F0AA559B9
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a653030303a3a2f33362d3336203d3e20323637383332.roa
Signing time:             Fri 09 Oct 2026 15:39:37 +0000
ROA not before:           Fri 09 Oct 2026 15:34:37 +0000
ROA not after:            Fri 08 Oct 2027 15:39:37 +0000
asID:                     267832
IP address blocks:        2803:2310:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f4:ee:86:53:ae:75:f7:55:93:f3:67:53:2a:94:2f:0a:a5:59:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
        Validity
            Not Before: Oct  9 15:34:37 2026 GMT
            Not After : Oct  8 15:39:37 2027 GMT
        Subject: CN=22D39DB9A94527379FF95FC007D8F24A7AD4B025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:12:25:54:f7:9d:97:de:19:10:1e:7d:f8:
                    3f:4d:82:63:50:c5:e4:ae:cb:e4:e4:c7:81:22:88:
                    4a:40:ce:35:98:ba:7f:05:60:e2:06:b0:0d:57:ed:
                    b8:9b:36:dd:06:80:1b:e6:5e:47:06:61:99:98:90:
                    95:ff:42:03:3d:5e:bb:47:ad:7b:9a:75:21:b7:a7:
                    c4:5f:d6:09:31:58:e0:30:2c:3e:ca:89:b3:f2:e6:
                    49:7e:ac:f7:64:7d:ca:cc:24:dd:7e:55:09:c9:b9:
                    d9:e4:60:da:d7:72:da:2f:48:b4:22:1d:58:85:62:
                    79:7e:57:17:04:eb:76:db:5d:bb:4d:bd:d7:d9:e8:
                    c2:98:54:8b:8c:ed:4d:29:70:40:e7:91:bc:d1:ce:
                    1a:42:25:5d:b0:21:c6:61:45:ed:65:45:ac:f0:63:
                    51:48:29:68:b6:e2:05:24:1d:fb:d6:c7:9b:f3:62:
                    bd:0a:28:51:e6:cd:a7:f2:1d:2f:1d:23:42:1a:52:
                    ad:8e:ff:79:61:d0:6c:ce:ef:0d:21:9e:b3:68:e5:
                    96:00:44:21:ef:4b:ba:41:c4:6a:4c:6f:b9:ed:37:
                    08:81:8d:b0:79:fe:ef:66:10:f4:d6:2d:19:29:d6:
                    cc:bf:3a:be:8f:9b:61:85:95:af:1a:6f:5b:e5:ce:
                    d3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D3:9D:B9:A9:45:27:37:9F:F9:5F:C0:07:D8:F2:4A:7A:D4:B0:25
            X509v3 Authority Key Identifier:
                keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a653030303a3a2f33362d3336203d3e20323637383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2310:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c1:2c:30:e1:ea:d0:90:14:f8:b1:52:4a:e6:82:ff:bc:af:0d:
         e2:0e:99:79:5c:58:7f:7c:49:13:7a:89:df:e7:83:33:e2:78:
         ce:52:aa:90:a9:e8:8c:d5:a9:14:23:ae:3a:e2:8f:b4:4b:fa:
         f1:73:ec:df:6a:f4:0f:71:0d:73:e4:dc:83:f6:0a:de:c9:4a:
         93:ea:18:b4:22:28:41:41:8b:2d:fd:30:2f:5b:b6:2d:e2:c6:
         89:60:45:5f:18:68:93:ff:64:75:a0:03:46:82:87:17:b5:04:
         42:bd:71:ae:4a:9d:59:fb:3e:05:1e:39:14:63:3c:b7:62:87:
         d0:55:17:ce:d7:97:64:51:52:d8:ff:56:f0:0d:41:56:cb:d4:
         a2:6e:a5:1a:cb:f5:68:76:54:f0:7b:b4:83:00:c6:39:c9:05:
         89:1d:98:50:46:2a:c8:f5:b6:02:18:97:89:81:13:5c:8c:fe:
         79:c3:92:87:67:0c:d5:9c:31:1e:ee:e0:ae:c4:c9:6b:b9:c6:
         6d:8f:ea:92:3c:bc:9a:86:2f:4e:e0:8d:e8:31:2f:65:e1:e6:
         94:ec:40:a4:9b:ba:78:86:57:ba:14:2d:ed:b9:cd:8e:97:3b:
         b5:f3:8a:41:1e:1c:78:ea:6f:a9:da:03:0a:29:31:57:ea:2d:
         23:90:ea:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Oct 15 04:24:52 2026 by rpki-client