Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a343030303a3a2f33362d3336203d3e20323637383332.roa
File:                     323830333a323331303a343030303a3a2f33362d3336203d3e20323637383332.roa (raw, json)
Hash identifier:          GPdN37SkAaN7LDgPc7oBYZzYsLirGqOicTiY9r+oYWo=
Subject key identifier:   03:C7:A0:9E:07:B9:85:52:6D:95:F5:11:7F:1E:F0:0E:36:AA:5F:D5
Certificate issuer:       /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial:       71125B602910FC881C4FD8A5940DA8E11BDD99CA
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a343030303a3a2f33362d3336203d3e20323637383332.roa
Signing time:             Fri 09 Oct 2026 15:39:32 +0000
ROA not before:           Fri 09 Oct 2026 15:34:32 +0000
ROA not after:            Fri 08 Oct 2027 15:39:32 +0000
asID:                     267832
IP address blocks:        2803:2310:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 04:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:12:5b:60:29:10:fc:88:1c:4f:d8:a5:94:0d:a8:e1:1b:dd:99:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
        Validity
            Not Before: Oct  9 15:34:32 2026 GMT
            Not After : Oct  8 15:39:32 2027 GMT
        Subject: CN=03C7A09E07B985526D95F5117F1EF00E36AA5FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:3e:c7:ce:45:49:b7:4a:09:fd:0d:05:34:
                    2a:91:55:40:23:59:8f:63:af:12:9a:bb:42:3a:3c:
                    1c:26:61:a7:f0:64:91:16:0f:24:a4:ae:fb:17:aa:
                    62:47:ae:90:aa:5e:d3:e0:75:6e:ea:a1:5b:f3:af:
                    4c:d6:12:61:7f:2b:c4:18:89:76:b9:39:82:45:5a:
                    eb:cf:d2:5e:56:84:a6:13:0e:8e:36:da:11:3a:80:
                    00:a4:dd:14:3f:53:5a:70:11:49:5c:eb:40:f6:79:
                    b4:54:29:ca:ae:ee:6c:dc:35:c2:4e:15:b5:9f:b3:
                    7c:1f:05:6f:27:6a:9d:0c:63:73:3c:f1:fa:c6:56:
                    a9:de:38:24:94:f8:6f:22:e8:f8:9f:c9:ea:cb:3b:
                    7c:51:c9:3a:74:c8:9f:51:f3:42:c2:1b:18:f5:22:
                    ec:f5:bf:f6:28:1c:58:2e:6b:10:43:0d:f5:10:49:
                    e5:9d:d2:be:63:66:fe:f0:23:70:2b:72:42:77:07:
                    f3:37:5a:22:5d:72:f7:58:f4:f4:0a:67:be:3c:26:
                    e6:eb:2c:77:5b:b3:f0:31:87:38:7c:e5:4b:07:6c:
                    2a:81:de:8d:d9:7d:58:e1:fb:24:78:a5:31:c7:b4:
                    73:35:56:a0:95:aa:7c:3c:3e:9b:fa:31:38:25:65:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C7:A0:9E:07:B9:85:52:6D:95:F5:11:7F:1E:F0:0E:36:AA:5F:D5
            X509v3 Authority Key Identifier:
                keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a343030303a3a2f33362d3336203d3e20323637383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2310:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         be:98:78:32:dd:fa:c8:43:00:f8:1d:74:37:c6:da:ba:ce:f3:
         fa:e8:bc:76:1e:d8:c4:4c:67:30:e3:41:87:66:d4:93:2b:cc:
         a4:5e:5d:bd:71:60:b1:6f:00:09:5c:67:e9:1c:ef:a2:8a:18:
         1f:43:0a:3a:61:67:9c:28:47:21:95:0b:6f:03:fe:87:5e:8f:
         e1:53:8b:c1:4b:a9:22:4f:bf:2d:47:f8:d1:b1:07:f8:ab:20:
         aa:d9:e1:33:1a:32:c2:de:5c:a5:be:32:00:86:03:55:c2:04:
         f2:cc:d5:08:c5:a1:36:db:06:e8:c8:9d:2b:4f:e9:69:6b:ec:
         5b:d9:df:7f:ba:d9:a1:a0:22:dc:94:30:13:15:26:69:79:b6:
         a6:9e:79:9e:82:6a:7c:02:bd:a9:ac:2e:ba:6d:7b:22:85:da:
         7f:b1:17:83:fb:9f:f2:13:bb:23:63:2c:74:ae:a7:ae:6f:e1:
         4e:e1:33:32:8a:52:74:ed:6a:50:93:32:dd:8e:83:54:1b:88:
         01:f6:a2:8e:31:c2:f4:2e:60:7c:61:8c:dc:54:c3:67:83:fd:
         80:f1:f0:eb:3d:03:73:66:b2:69:7b:1d:9b:cf:f3:1d:85:9f:
         c8:2c:38:c4:a7:8e:eb:64:a4:bb:75:93:f1:89:2a:3d:0e:4e:
         a0:bf:0b:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:30:20 2026 by rpki-client