Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a3a2f33322d3332203d3e20323732303736.roa
File:                     323830333a323331303a3a2f33322d3332203d3e20323732303736.roa (raw, json)
Hash identifier:          Q2PfHoSDxyXHtelbo9vy3dXCRJzU1Jickb39czVhL8U=
Subject key identifier:   D3:B4:A6:19:68:AA:8B:16:63:67:8F:51:A3:F4:F5:B8:E4:9D:67:2A
Certificate issuer:       /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial:       4A63C5C85D975205797AB6DE39CECDBBDA44CADD
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a3a2f33322d3332203d3e20323732303736.roa
Signing time:             Fri 09 Oct 2026 15:39:33 +0000
ROA not before:           Fri 09 Oct 2026 15:34:33 +0000
ROA not after:            Fri 08 Oct 2027 15:39:33 +0000
asID:                     272076
IP address blocks:        2803:2310::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 11:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:63:c5:c8:5d:97:52:05:79:7a:b6:de:39:ce:cd:bb:da:44:ca:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
        Validity
            Not Before: Oct  9 15:34:33 2026 GMT
            Not After : Oct  8 15:39:33 2027 GMT
        Subject: CN=D3B4A61968AA8B1663678F51A3F4F5B8E49D672A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:c8:fe:f1:d1:a5:32:ba:8b:74:dd:7e:7e:
                    c5:6a:c9:f7:a0:b7:5c:69:b2:02:fa:fb:ea:46:aa:
                    ec:78:ea:3b:9a:30:11:b0:ff:0b:ff:10:05:1d:fb:
                    df:69:9a:e1:b1:a1:96:db:86:ea:b7:e8:2d:dd:04:
                    8e:2f:9a:c6:6c:5e:f8:ce:66:c6:b3:b0:e1:6b:c7:
                    e4:3c:a2:bd:6f:a9:87:33:69:47:ba:41:76:0c:89:
                    55:f5:3f:95:64:1e:2a:36:1e:ab:b7:7b:5a:e0:de:
                    19:05:19:c3:6b:bf:91:14:ab:a5:86:97:5e:e8:9d:
                    4a:ba:0b:09:07:88:fb:2a:0a:64:77:b7:bc:76:e9:
                    2f:9b:be:1c:95:af:34:5e:f6:ee:58:1b:3a:dc:e0:
                    d2:11:d9:1b:88:aa:fb:7b:fa:1e:45:53:d5:80:f5:
                    81:d7:0f:58:c6:e8:c2:aa:63:c9:ec:b9:65:2b:83:
                    58:49:d7:1b:5b:a4:2e:76:63:83:5c:df:cb:c6:f7:
                    e0:8d:93:bb:74:4f:dc:93:c0:10:af:5c:79:d5:99:
                    cc:db:b0:7d:9e:70:74:71:69:57:95:52:99:78:3e:
                    a1:7d:fb:9b:fb:2b:57:30:08:87:4b:86:2a:f8:b3:
                    67:aa:a0:6d:0c:21:a9:07:8f:19:df:fa:ac:07:d4:
                    17:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B4:A6:19:68:AA:8B:16:63:67:8F:51:A3:F4:F5:B8:E4:9D:67:2A
            X509v3 Authority Key Identifier:
                keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a3a2f33322d3332203d3e20323732303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2310::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:09:9a:2e:99:a5:43:99:cd:81:b1:92:8d:6c:09:d3:79:30:
         be:5a:c8:27:7d:57:6f:9a:a3:21:08:45:75:ce:12:3e:9b:bf:
         36:ca:ff:52:b5:db:85:db:82:a3:b8:9d:2d:5f:56:b9:6c:80:
         84:26:f7:10:cc:f6:28:e1:06:34:b3:19:6e:a5:f0:b1:0e:b2:
         89:6c:b9:57:2d:67:c1:65:05:3d:dd:4d:f0:18:2e:85:89:9c:
         ad:6a:9f:f1:52:d0:cf:2d:ca:a6:88:0f:4c:9c:62:87:32:8d:
         53:b6:a7:79:1f:85:1e:b1:9b:72:19:83:93:1e:ce:d8:2f:76:
         e6:9e:12:fd:4e:40:35:2d:55:fe:67:4e:21:f2:71:b8:9e:01:
         4c:0f:59:ba:a8:84:d5:96:6b:30:91:c6:ea:8f:81:32:4e:1a:
         c3:73:d7:a4:48:f4:a5:df:76:86:ab:96:12:99:81:d3:62:78:
         b9:53:fb:3f:77:96:21:82:94:47:8a:57:27:3d:2c:06:21:68:
         9b:09:93:d5:11:5b:e8:4c:0a:b4:2d:b6:2d:a8:4e:1a:bf:f1:
         de:98:f6:43:d1:7c:26:67:68:00:3c:46:fd:a8:af:1a:a8:30:
         db:0c:57:12:77:f7:d2:1c:a3:44:c3:de:3a:af:7f:37:92:ed:
         3d:e0:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:27:29 2026 by rpki-client