Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a373030303a3a2f33362d3336203d3e20323732303736.roa
File:                     323830333a323331303a373030303a3a2f33362d3336203d3e20323732303736.roa (raw, json)
Hash identifier:          Ej/clzB3KDpy9Y2AZMpvdaLhyoIUq6b+pcTNM7uSyrE=
Subject key identifier:   09:11:F4:A1:6E:A2:F5:27:3C:2A:80:CF:A4:FA:F8:2E:9A:D4:D1:8C
Certificate issuer:       /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial:       093F81352A36F311224E6C8335C3C1DAFC5D78D9
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a373030303a3a2f33362d3336203d3e20323732303736.roa
Signing time:             Fri 09 Oct 2026 15:39:33 +0000
ROA not before:           Fri 09 Oct 2026 15:34:33 +0000
ROA not after:            Fri 08 Oct 2027 15:39:33 +0000
asID:                     272076
IP address blocks:        2803:2310:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Nov 2026 04:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3f:81:35:2a:36:f3:11:22:4e:6c:83:35:c3:c1:da:fc:5d:78:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
        Validity
            Not Before: Oct  9 15:34:33 2026 GMT
            Not After : Oct  8 15:39:33 2027 GMT
        Subject: CN=0911F4A16EA2F5273C2A80CFA4FAF82E9AD4D18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:88:ed:ee:63:dd:09:a8:06:18:6a:52:78:d1:
                    59:11:67:03:04:e8:e1:51:4a:2d:ff:fe:7b:a4:d4:
                    7d:6c:98:31:16:c7:78:0a:37:6f:2e:3e:9f:9f:ed:
                    89:0b:bb:c7:26:d3:b7:fe:92:0e:cc:7a:22:91:a4:
                    08:06:29:40:f7:1f:b3:c2:8b:00:d5:01:ce:c7:61:
                    2c:3d:b1:89:9d:ad:05:fd:8d:41:47:b2:84:90:8c:
                    12:f2:72:51:e6:4f:b9:b2:70:71:93:3e:86:eb:63:
                    dc:79:eb:a1:bf:50:5c:48:30:13:be:e6:51:00:9c:
                    e3:5c:13:f0:58:02:50:3d:bb:00:41:a9:75:7b:2c:
                    55:df:be:90:59:12:f7:3e:3d:b2:89:e9:c4:c1:c7:
                    9d:af:1f:91:01:27:0c:b5:ba:ce:f0:21:c2:3f:a8:
                    a9:ed:72:fa:41:0d:d0:3d:ac:3d:eb:ee:dd:7f:25:
                    1f:2f:1e:fd:b4:93:e8:35:a6:00:09:ef:ee:88:0b:
                    8b:82:29:0e:20:b4:16:19:82:0e:ab:c4:44:37:3c:
                    59:03:a4:bd:ab:4b:fd:5e:59:d0:37:73:43:99:b1:
                    b7:0e:a7:f0:f2:17:04:92:c0:4c:43:e1:74:af:1e:
                    7e:a4:2f:38:18:dd:f4:31:8c:ce:de:b2:d0:36:a2:
                    1c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:11:F4:A1:6E:A2:F5:27:3C:2A:80:CF:A4:FA:F8:2E:9A:D4:D1:8C
            X509v3 Authority Key Identifier:
                keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a373030303a3a2f33362d3336203d3e20323732303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2310:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c4:6d:86:24:03:16:5b:9d:e5:a7:98:02:9c:7c:7b:b3:e3:3d:
         55:95:b5:07:1f:62:21:5f:f7:cb:16:1e:69:3a:33:f5:65:c7:
         66:ca:55:fa:12:ef:69:d0:16:13:b8:12:39:ed:a1:38:59:b2:
         b6:39:ff:24:4a:40:f4:0c:29:1d:0b:d1:27:cb:0f:b9:5f:49:
         22:69:14:f9:55:7b:02:85:c8:fb:82:bd:3d:9f:98:3f:03:95:
         a5:98:d7:bb:f8:6f:99:b4:5f:5c:6d:b0:a1:58:45:72:28:53:
         8e:f3:6b:51:45:4d:39:ad:3a:5c:b1:8f:13:8a:5e:d4:db:8a:
         54:52:ef:af:07:e6:34:09:db:25:93:f2:12:46:08:28:73:bd:
         d7:9b:52:60:96:64:57:13:02:35:83:1c:0f:7d:4e:26:51:7c:
         3b:60:c1:57:8b:28:bb:64:74:57:36:ec:ce:31:52:52:92:6f:
         1f:7b:95:e1:fe:ac:d4:f6:16:9c:5d:4d:4f:33:f3:4a:d0:3b:
         06:c6:7e:92:74:49:7b:70:a8:be:4d:bc:63:e6:60:85:2f:99:
         f5:3a:fd:63:e5:f9:be:50:ef:66:a1:b2:13:58:ab:99:ca:19:
         9e:0e:5e:fa:87:f9:30:e2:72:4d:ba:99:2e:72:9d:3e:4b:48:
         10:8c:bb:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 3 08:54:14 2026 by rpki-client