Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a353030303a3a2f33362d3336203d3e20323732303736.roa
File:                     323830333a323331303a353030303a3a2f33362d3336203d3e20323732303736.roa (raw, json)
Hash identifier:          0DvY4w17DkwQYSmSH820FxKFl/L8iBb1mReBbX2WeRs=
Subject key identifier:   C9:14:AB:92:42:15:CE:E7:18:0A:31:90:05:0B:A0:52:2A:03:19:E8
Certificate issuer:       /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial:       71B6AF29754FB97EBC68735E277FD6A6B2E7F566
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a353030303a3a2f33362d3336203d3e20323732303736.roa
Signing time:             Fri 09 Oct 2026 15:39:37 +0000
ROA not before:           Fri 09 Oct 2026 15:34:37 +0000
ROA not after:            Fri 08 Oct 2027 15:39:37 +0000
asID:                     272076
IP address blocks:        2803:2310:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 00:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b6:af:29:75:4f:b9:7e:bc:68:73:5e:27:7f:d6:a6:b2:e7:f5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
        Validity
            Not Before: Oct  9 15:34:37 2026 GMT
            Not After : Oct  8 15:39:37 2027 GMT
        Subject: CN=C914AB924215CEE7180A3190050BA0522A0319E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:ce:dc:c7:8e:8f:b7:f1:d6:9f:4a:3d:c0:
                    d7:4d:f8:0c:b1:bf:44:43:4b:98:3b:a1:a1:b6:6c:
                    98:9b:20:89:ff:f5:c1:12:e0:3a:a2:8a:06:04:4c:
                    8b:79:ba:8d:47:cd:a2:80:dc:c0:d6:16:d1:ec:dc:
                    fb:5a:36:1d:ce:3a:a9:e5:f9:b0:31:73:fa:0d:de:
                    2f:1a:68:73:da:5b:6c:4b:6b:d3:76:80:6b:22:a1:
                    d9:bf:f6:05:06:36:cd:68:b3:52:87:f2:a7:a1:34:
                    99:c6:ff:ff:b4:a8:b7:c9:a3:88:cd:7f:e0:ab:ef:
                    c5:3b:4e:28:f6:fa:65:29:0f:2c:9b:40:fc:f2:2b:
                    ed:3b:8f:63:bb:2b:74:2d:f4:ed:73:31:9a:f4:2e:
                    75:0c:80:11:20:ef:1a:83:19:b9:45:d2:c5:ef:d9:
                    f7:3b:03:a3:b0:b0:12:a4:bc:d6:3e:5a:c9:54:30:
                    93:38:96:e1:a3:d0:16:9d:d2:7c:a0:82:fc:13:92:
                    fc:b7:90:c5:e8:6e:e0:49:69:3d:16:18:db:da:db:
                    52:23:64:71:60:c2:8a:db:4b:54:78:b7:3d:2f:2d:
                    d9:f9:ba:62:0e:36:c5:b1:b9:59:b9:6e:be:ea:c8:
                    d2:5a:ac:0e:cb:5b:75:ae:75:3d:9d:d6:7e:4b:a9:
                    ff:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:14:AB:92:42:15:CE:E7:18:0A:31:90:05:0B:A0:52:2A:03:19:E8
            X509v3 Authority Key Identifier:
                keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a353030303a3a2f33362d3336203d3e20323732303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2310:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:2d:fe:dd:ae:fd:5a:c2:35:ca:bb:1f:01:40:b6:67:e5:49:
         cd:ce:97:21:58:87:6c:e6:e8:a8:0c:09:2a:a8:95:99:a0:cb:
         1f:fb:87:70:04:6f:30:ca:cf:dc:e6:56:74:b3:72:ba:62:7f:
         63:56:b9:85:40:02:18:68:c1:2b:f5:e0:01:f2:0f:ac:d4:8a:
         84:1e:34:5a:10:27:6c:e5:2f:bc:c6:c4:b2:29:8a:a6:83:b2:
         1f:7d:17:42:6b:63:64:99:f6:f6:fd:d9:f2:9b:f4:31:47:c7:
         73:ec:f0:49:27:11:45:4c:37:9f:08:9b:37:96:3e:2d:d4:ed:
         c6:75:15:c8:c4:4d:ec:79:10:a0:3b:b4:8a:9f:16:09:3a:aa:
         cc:36:d7:3b:54:19:91:73:6d:f3:05:a4:7c:a5:ed:a9:ba:66:
         c4:82:78:ca:61:ba:5b:f3:3b:44:38:7d:d2:e6:93:26:e6:42:
         90:cf:c8:01:c9:80:9f:5b:7b:ae:73:fa:d8:c7:fd:64:be:33:
         a3:1e:de:0a:c0:42:47:bd:00:ca:e3:35:e4:37:c1:70:97:de:
         d0:0d:f2:67:c6:92:31:c1:29:f4:a5:5d:62:29:12:56:18:0e:
         a9:11:ff:6d:1d:4a:81:f1:d3:90:40:c5:af:2a:2a:15:91:75:
         37:af:10:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 25 21:15:25 2026 by rpki-client