Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8B22E8FF001C8588C4C8FD4E8F7C8807A32330D69F8052B14E2F27897C3A38ED/0/323830333a623963303a3a2f33322d3438203d3e20323635373035.roa
File:                     323830333a623963303a3a2f33322d3438203d3e20323635373035.roa (raw, json)
Hash identifier:          NOYvd/r4MhxZNJIvtrgVPYi9V7n5KRALCqyCa+aSGmY=
Subject key identifier:   A4:3E:53:4D:9E:AA:DB:52:C1:48:8C:6D:DD:F8:95:7F:8B:00:CA:94
Certificate issuer:       /CN=60CAB11739DCC0F6CAC397F54287A6B51C2C6187
Certificate serial:       625EE429961CBF9FCD5939B55D88E6C0215B40A2
Authority key identifier: 60:CA:B1:17:39:DC:C0:F6:CA:C3:97:F5:42:87:A6:B5:1C:2C:61:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/60CAB11739DCC0F6CAC397F54287A6B51C2C6187.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B22E8FF001C8588C4C8FD4E8F7C8807A32330D69F8052B14E2F27897C3A38ED/0/323830333a623963303a3a2f33322d3438203d3e20323635373035.roa
Signing time:             Fri 16 Oct 2026 10:40:43 +0000
ROA not before:           Fri 16 Oct 2026 10:35:43 +0000
ROA not after:            Fri 15 Oct 2027 10:40:43 +0000
asID:                     265705
IP address blocks:        2803:b9c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B22E8FF001C8588C4C8FD4E8F7C8807A32330D69F8052B14E2F27897C3A38ED/0/60CAB11739DCC0F6CAC397F54287A6B51C2C6187.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B22E8FF001C8588C4C8FD4E8F7C8807A32330D69F8052B14E2F27897C3A38ED/0/60CAB11739DCC0F6CAC397F54287A6B51C2C6187.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/60CAB11739DCC0F6CAC397F54287A6B51C2C6187.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 21:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5e:e4:29:96:1c:bf:9f:cd:59:39:b5:5d:88:e6:c0:21:5b:40:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60CAB11739DCC0F6CAC397F54287A6B51C2C6187
        Validity
            Not Before: Oct 16 10:35:43 2026 GMT
            Not After : Oct 15 10:40:43 2027 GMT
        Subject: CN=A43E534D9EAADB52C1488C6DDDF8957F8B00CA94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:26:f7:21:70:64:ef:1b:ba:60:b1:a0:40:ac:
                    01:85:1b:6b:51:7f:3e:54:c4:b4:f4:fa:43:0d:00:
                    79:5f:fc:2a:ec:71:01:0c:34:cc:5f:4f:c0:ca:dd:
                    47:1d:3d:59:28:0c:c6:aa:61:74:c5:c8:d0:b0:4a:
                    5c:25:7c:24:4d:62:29:a8:bb:db:57:32:cd:ee:dd:
                    73:66:1d:01:95:52:73:33:36:18:74:7f:35:c8:c2:
                    d4:8c:c8:3c:68:cf:63:08:26:68:06:62:12:fe:c0:
                    c5:0a:05:3b:b2:1c:01:22:8c:07:e4:29:b8:bc:a5:
                    45:95:5c:9a:cc:25:3f:fd:4e:8b:92:37:19:93:37:
                    53:23:7a:92:6e:52:19:a5:98:44:16:b2:d9:59:7c:
                    de:c3:76:22:09:b5:0b:31:ff:ad:5c:eb:0f:27:be:
                    7b:75:61:ab:04:c7:d2:c0:46:e3:c4:38:5d:9e:3c:
                    5c:c8:bf:43:41:01:83:26:68:82:80:03:0d:2a:54:
                    ed:05:86:40:f9:95:42:17:05:2a:d6:a3:c1:7e:5d:
                    41:ab:2b:db:a4:f7:68:e4:c4:78:91:31:1d:d0:ee:
                    f6:71:ad:5d:45:a9:c1:bc:2b:d3:66:c0:a5:b5:27:
                    bd:30:45:87:bd:55:81:dd:d6:b0:04:48:af:a5:46:
                    03:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3E:53:4D:9E:AA:DB:52:C1:48:8C:6D:DD:F8:95:7F:8B:00:CA:94
            X509v3 Authority Key Identifier:
                keyid:60:CA:B1:17:39:DC:C0:F6:CA:C3:97:F5:42:87:A6:B5:1C:2C:61:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B22E8FF001C8588C4C8FD4E8F7C8807A32330D69F8052B14E2F27897C3A38ED/0/60CAB11739DCC0F6CAC397F54287A6B51C2C6187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/60CAB11739DCC0F6CAC397F54287A6B51C2C6187.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B22E8FF001C8588C4C8FD4E8F7C8807A32330D69F8052B14E2F27897C3A38ED/0/323830333a623963303a3a2f33322d3438203d3e20323635373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:70:04:6b:b6:33:35:fd:7d:e5:9f:8a:36:83:d0:9f:21:73:
         a5:05:8a:4e:97:72:27:b7:52:c1:04:f9:df:63:65:00:c5:bb:
         b1:ed:7b:dd:c4:b9:88:e9:cb:67:37:05:97:44:5e:33:2e:72:
         e8:0b:a2:dc:f9:28:34:4e:7a:95:f3:c8:22:5f:8e:b3:4c:50:
         14:c3:41:67:8f:9d:59:02:ef:83:17:da:ec:6b:87:de:3b:07:
         b6:5d:8a:36:13:3e:6b:7f:a4:d6:5d:2c:2e:97:e1:8a:a2:8d:
         68:09:d6:09:1b:eb:7d:a5:f8:e3:73:77:0d:ab:1c:8b:fc:55:
         fa:ab:92:02:6f:21:59:81:f3:cb:55:99:4e:07:8a:00:d8:e9:
         7e:a0:1a:0d:e1:f3:2f:13:b1:ef:c7:fb:8e:6a:79:19:c2:0a:
         b7:a8:8b:43:77:cc:1b:a1:00:75:40:aa:f5:27:f6:5d:ae:87:
         34:90:9e:a7:aa:d1:77:95:45:71:fc:9e:20:50:da:82:34:b9:
         e9:c7:57:e0:90:bd:3b:13:3d:1d:58:93:9c:a5:fd:b0:35:68:
         ef:9b:39:e6:ec:6f:0a:aa:06:10:06:1c:05:6f:31:c2:4c:01:
         8b:38:4c:55:4d:4c:ca:69:88:4d:63:bb:b2:a2:bd:79:5c:25:
         e6:1e:44:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:32:01 2026 by rpki-client