Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a313030303a3a2f33362d3336203d3e20323636383039.roa
File:                     323830333a363061303a313030303a3a2f33362d3336203d3e20323636383039.roa (raw, json)
Hash identifier:          QtUfQqNHUq4kLW1TAtOfC4RWf8KRuOhJU9BaXOxOdAo=
Subject key identifier:   80:E5:C9:E9:D1:42:A2:37:D9:95:8A:02:D3:9B:5F:0A:6F:08:C1:FA
Certificate issuer:       /CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
Certificate serial:       03FD99F444BFF2765D9E5468EA1671E6BE905E58
Authority key identifier: 22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a313030303a3a2f33362d3336203d3e20323636383039.roa
Signing time:             Mon 12 Oct 2026 14:39:58 +0000
ROA not before:           Mon 12 Oct 2026 14:34:58 +0000
ROA not after:            Mon 11 Oct 2027 14:39:58 +0000
asID:                     266809
IP address blocks:        2803:60a0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 03:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fd:99:f4:44:bf:f2:76:5d:9e:54:68:ea:16:71:e6:be:90:5e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
        Validity
            Not Before: Oct 12 14:34:58 2026 GMT
            Not After : Oct 11 14:39:58 2027 GMT
        Subject: CN=80E5C9E9D142A237D9958A02D39B5F0A6F08C1FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:1f:d9:cd:c6:53:50:4b:fb:14:4c:61:b9:
                    ba:7e:ba:9d:1d:c3:16:13:c6:cb:56:f8:77:87:61:
                    07:ed:3c:2d:f6:4a:c0:7e:1a:a2:af:78:0c:de:d8:
                    74:f7:8f:ef:32:d4:3b:6f:06:10:f9:46:33:7c:c1:
                    08:92:ee:b1:e3:9e:5b:94:f8:d9:c7:48:bf:1f:34:
                    79:61:dd:42:51:ee:44:b0:f0:80:ff:5d:b6:d8:ff:
                    e7:8a:63:db:70:cf:6f:96:07:b9:4d:1a:a9:5a:3d:
                    d8:20:c1:58:2c:bb:2c:0a:c9:d6:b4:63:c1:ed:29:
                    47:03:08:4d:8a:97:5f:a9:f3:61:07:ff:75:d9:f3:
                    c1:c8:a1:e0:d8:8e:96:3b:80:fa:73:95:a8:c6:1f:
                    4e:2b:cd:48:26:92:0c:d1:e1:fc:ad:8a:12:f2:9f:
                    31:86:47:77:c0:c3:bc:b7:64:d0:62:0f:6f:d4:b6:
                    b2:25:5c:24:e8:73:a7:aa:81:96:c9:3e:a2:6f:49:
                    6a:e1:3e:b2:2b:9f:bb:61:a8:85:8e:7d:ee:a4:56:
                    41:a7:7e:1f:71:2d:65:27:65:bd:9e:91:2e:5b:33:
                    b7:b3:85:4a:22:dc:5e:1a:89:bf:c3:d2:17:0a:07:
                    51:e2:9a:c4:cb:6e:15:cb:a8:b4:a2:37:79:a9:8a:
                    7b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E5:C9:E9:D1:42:A2:37:D9:95:8A:02:D3:9B:5F:0A:6F:08:C1:FA
            X509v3 Authority Key Identifier:
                keyid:22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a313030303a3a2f33362d3336203d3e20323636383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:60a0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b1:cc:62:e6:00:4a:1c:be:1b:72:5a:10:e3:b7:57:90:47:8a:
         d5:10:f0:61:35:be:16:d8:d4:74:34:6b:02:2e:d7:94:b6:9d:
         8b:dd:81:31:c5:09:7b:fd:53:09:49:21:f1:fb:26:a4:b8:8a:
         4d:85:31:82:62:89:47:13:02:43:11:d9:f7:f1:e0:7a:87:48:
         f6:36:c2:f7:a4:aa:5f:79:de:73:bd:17:e6:67:ae:bf:78:43:
         c4:ba:14:b4:b7:c8:16:8e:de:d0:b4:10:b8:2b:04:bf:24:c9:
         24:ea:be:ac:b1:6f:f4:15:6a:6d:e4:ef:fa:c6:e5:50:59:1f:
         e6:96:c5:50:e2:7f:13:1b:e5:c8:c3:0c:e2:36:f3:93:c2:94:
         46:55:2f:16:26:27:40:b2:7e:70:c2:3b:21:71:3a:ec:82:6a:
         77:53:54:21:69:75:c0:8b:a7:32:b6:a7:ff:f5:70:9e:1e:e6:
         de:ba:a0:68:3a:ac:a0:42:b2:01:96:7d:08:89:7c:22:1e:55:
         49:de:22:23:aa:91:2b:f2:37:2e:da:d1:06:d0:d8:29:cd:38:
         a3:e0:1e:f7:f4:a9:13:28:c8:4b:fd:c6:60:be:59:f3:f3:2c:
         f9:b7:6a:3f:7b:8c:12:01:4c:6d:61:fc:55:be:3d:6e:dd:2e:
         74:f9:a6:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 13 07:32:33 2026 by rpki-client