Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a663030303a3a2f33362d3336203d3e20323637383332.roa
File:                     323830333a323331303a663030303a3a2f33362d3336203d3e20323637383332.roa (raw, json)
Hash identifier:          PTCWDuhnE2GsPyxFjNgeezljAM0KS1SWwb+4J2xyAIM=
Subject key identifier:   8E:FE:B6:93:96:0A:5E:18:D8:B0:6A:27:02:80:44:45:40:FD:DC:E9
Certificate issuer:       /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial:       232DB8D5396F83A65C2A9A2BB9022513AB287E81
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a663030303a3a2f33362d3336203d3e20323637383332.roa
Signing time:             Fri 09 Oct 2026 15:39:33 +0000
ROA not before:           Fri 09 Oct 2026 15:34:33 +0000
ROA not after:            Fri 08 Oct 2027 15:39:33 +0000
asID:                     267832
IP address blocks:        2803:2310:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 18:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2d:b8:d5:39:6f:83:a6:5c:2a:9a:2b:b9:02:25:13:ab:28:7e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
        Validity
            Not Before: Oct  9 15:34:33 2026 GMT
            Not After : Oct  8 15:39:33 2027 GMT
        Subject: CN=8EFEB693960A5E18D8B06A270280444540FDDCE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:35:65:4d:f5:7c:bf:d3:eb:01:b5:2e:a8:
                    a9:30:e0:8e:fb:d7:d3:82:84:15:a4:d8:f4:5b:00:
                    7d:dd:94:ed:3e:0b:9c:c0:59:c6:f1:36:44:b9:99:
                    1f:ce:7e:4a:3b:e2:78:76:f6:65:cd:80:c3:a9:4c:
                    1f:ff:d9:cb:58:0c:de:f6:c7:07:19:f1:b9:f6:2a:
                    ff:7d:0b:8f:46:17:dd:03:19:b7:2f:e7:f0:fe:cb:
                    e5:08:75:ee:00:ba:b1:bf:07:ec:8b:59:d9:c2:dc:
                    35:5f:81:07:8a:9a:3c:b4:c0:40:84:64:eb:a3:44:
                    fb:6e:48:05:31:ac:fa:14:25:f9:e0:89:af:a3:cf:
                    c0:19:f2:f7:cf:5e:a4:d2:41:ef:5b:35:c0:17:25:
                    50:46:3a:25:d3:7d:1f:27:25:7b:cb:27:fa:46:24:
                    fe:ea:bb:d8:d1:88:52:26:4c:a0:a5:83:e3:db:2b:
                    ea:fc:8d:33:25:9d:50:56:8d:1a:b3:c7:25:ef:c0:
                    ac:f5:04:15:73:b6:71:85:aa:b2:9c:94:63:c5:ff:
                    3e:e5:4e:4b:0f:fd:c3:27:a1:b8:13:ed:a7:6f:cf:
                    df:8d:77:e0:4b:bd:aa:3d:43:32:e5:22:3e:86:33:
                    98:e6:0e:58:c4:76:86:53:e5:6f:d3:c8:d5:3c:95:
                    24:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FE:B6:93:96:0A:5E:18:D8:B0:6A:27:02:80:44:45:40:FD:DC:E9
            X509v3 Authority Key Identifier:
                keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a663030303a3a2f33362d3336203d3e20323637383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2310:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:de:ab:cc:d7:cd:ff:0e:63:43:f2:70:2d:d2:fa:c4:51:52:
         14:0c:f1:b2:6f:8c:75:7d:53:d3:78:c9:bb:22:1c:b3:32:22:
         04:00:ed:82:92:c8:e8:1a:bc:3e:d3:11:9f:65:32:5e:6c:ec:
         d7:a0:19:a4:e4:0e:80:92:09:68:75:47:49:51:ad:9a:e7:73:
         19:7b:39:4f:3c:19:7e:c7:c4:7b:ce:52:3d:43:0f:dc:4a:a8:
         ac:be:c6:cb:ae:e0:c8:68:6f:ba:89:fe:8b:de:b0:0a:3f:1f:
         f4:23:a2:83:1a:c5:07:4a:3d:17:16:bd:a2:73:6d:5f:2b:4f:
         47:42:cc:bd:29:72:fd:f0:12:f2:5f:fb:a9:5b:40:47:92:5d:
         f5:0d:0b:66:cd:b9:44:bc:dd:82:46:7b:be:47:22:75:ee:5a:
         a9:89:81:b6:d5:ea:94:2b:1b:15:a5:91:2d:70:44:7f:36:1b:
         67:f8:4a:5d:88:8b:52:45:6c:ba:45:f7:8e:5e:50:d2:4a:26:
         cc:d1:0e:6e:1d:08:18:33:06:52:4e:77:44:3f:ec:25:ad:8e:
         c5:a4:dc:7d:68:25:92:72:ed:d7:ae:92:0c:72:2d:1d:32:ad:
         1b:f5:4b:d8:f4:7f:63:26:50:9e:f1:96:39:30:ef:b3:38:97:
         b0:41:1f:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 06:50:42 2026 by rpki-client