Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/323830333a313963303a3a2f33322d313238203d3e20323634363035.roa
File:                     323830333a313963303a3a2f33322d313238203d3e20323634363035.roa (raw, json)
Hash identifier:          KxYHZpFL9+iljo0eUzjBeEHjnQXrbab7YjyQy9HPo6Y=
Subject key identifier:   6D:C9:1D:78:1D:C0:F1:C2:39:97:B6:A1:67:BA:50:14:97:47:4A:74
Certificate issuer:       /CN=B8196866E8E404DE886895D0DF5004CF22D49297
Certificate serial:       59D546E0BEC3FFDDBC01702842C8958BF747E814
Authority key identifier: B8:19:68:66:E8:E4:04:DE:88:68:95:D0:DF:50:04:CF:22:D4:92:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/323830333a313963303a3a2f33322d313238203d3e20323634363035.roa
Signing time:             Thu 13 Aug 2026 16:25:14 +0000
ROA not before:           Thu 13 Aug 2026 16:20:14 +0000
ROA not after:            Thu 12 Aug 2027 16:25:14 +0000
asID:                     264605
IP address blocks:        2803:19c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 09:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d5:46:e0:be:c3:ff:dd:bc:01:70:28:42:c8:95:8b:f7:47:e8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8196866E8E404DE886895D0DF5004CF22D49297
        Validity
            Not Before: Aug 13 16:20:14 2026 GMT
            Not After : Aug 12 16:25:14 2027 GMT
        Subject: CN=6DC91D781DC0F1C23997B6A167BA501497474A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:37:38:44:e6:e2:6b:39:9a:73:a6:4f:5c:
                    e6:27:57:d2:36:a4:ef:67:43:fd:93:a8:77:9b:73:
                    9f:48:01:a7:0d:74:a9:89:f7:b1:0f:94:a8:62:a8:
                    6c:60:22:46:79:fc:8d:32:71:4a:8e:f5:a4:f2:25:
                    54:8b:f0:ce:a6:3f:c2:26:d6:18:86:81:f7:af:87:
                    e1:fd:de:b5:88:17:32:f1:b6:d4:92:c8:77:8d:44:
                    7a:fe:28:ff:37:c1:2c:ff:f0:cf:33:57:37:b3:c6:
                    9c:de:13:50:4e:53:71:25:f3:01:d6:8b:43:5c:27:
                    dc:3e:eb:29:42:67:62:83:3a:2e:17:e0:f4:90:11:
                    87:98:9a:ca:a2:53:0d:30:db:d1:cb:94:7e:c7:09:
                    48:93:6b:6c:39:7d:80:d7:f6:ae:94:d2:fe:75:87:
                    58:15:3d:58:9b:04:0d:9e:47:f8:1b:40:c2:1e:1d:
                    f7:8f:73:8b:5d:b0:34:fc:38:69:45:3a:51:0f:90:
                    dd:00:a7:e5:e3:6b:a1:25:a1:e0:70:f2:7a:12:36:
                    d5:0d:2f:ec:18:bb:c5:93:01:b2:b9:56:45:7f:9e:
                    72:42:9a:e6:62:3f:be:89:32:61:16:09:58:2d:9f:
                    e7:db:df:af:4e:43:6b:49:5a:a7:89:88:79:b6:b0:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C9:1D:78:1D:C0:F1:C2:39:97:B6:A1:67:BA:50:14:97:47:4A:74
            X509v3 Authority Key Identifier:
                keyid:B8:19:68:66:E8:E4:04:DE:88:68:95:D0:DF:50:04:CF:22:D4:92:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/323830333a313963303a3a2f33322d313238203d3e20323634363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:19c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:c0:13:41:3d:c6:4d:07:1b:e8:a9:40:c8:60:87:5d:b1:c6:
         b2:2d:18:9c:18:3d:6f:0c:41:02:16:5e:11:53:1b:b9:e7:48:
         5b:13:a0:3f:8f:24:bc:1d:c2:8b:43:44:a2:28:fe:33:bb:19:
         db:92:43:f7:ae:a5:a5:51:28:b2:2b:3f:5d:47:d7:81:f3:ff:
         96:4f:f2:39:5d:35:75:b7:f4:5c:37:d6:80:78:d9:45:ca:d0:
         de:a2:9e:97:5c:98:c6:ce:38:c5:5a:ea:33:33:a2:c4:26:c3:
         3c:ed:e5:5a:44:d8:cb:75:43:7c:c8:33:36:c0:d4:ab:a2:a7:
         4f:01:e0:f8:9c:d1:74:fe:e3:8b:2f:03:77:b7:b7:c0:07:ef:
         d9:ca:9d:86:14:6f:08:b0:f1:e4:b5:55:1e:b6:cb:73:64:6e:
         c7:69:53:28:f5:b0:18:91:c1:68:e8:40:30:5a:57:df:0a:15:
         b9:59:d3:e4:1e:53:19:ba:c4:9d:ed:9e:76:11:4b:e5:b6:9c:
         c3:12:1c:91:7b:2a:77:63:e3:ea:45:f5:63:48:90:dd:29:1b:
         7a:83:9a:14:e4:ad:20:7f:4d:ac:ea:7d:76:4a:28:60:6d:e5:
         27:5d:65:00:42:62:1e:4a:42:b9:c2:ee:b3:94:be:bf:17:79:
         17:67:f8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:53:30 2026 by rpki-client