Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a663030303a3a2f33362d3336203d3e20323732303736.roa
File:                     323830333a323331303a663030303a3a2f33362d3336203d3e20323732303736.roa (raw, json)
Hash identifier:          dWlwAgzEg3WAdATwAfFXekcDYMeovcuSqn1087WahuI=
Subject key identifier:   E1:D8:E8:E9:A9:50:52:18:0C:61:7E:5F:8A:8F:3C:D8:6D:60:93:95
Certificate issuer:       /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial:       402A1211BD294221F05297AB7E389395A49FFBDE
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a663030303a3a2f33362d3336203d3e20323732303736.roa
Signing time:             Fri 09 Oct 2026 15:39:32 +0000
ROA not before:           Fri 09 Oct 2026 15:34:32 +0000
ROA not after:            Fri 08 Oct 2027 15:39:32 +0000
asID:                     272076
IP address blocks:        2803:2310:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2a:12:11:bd:29:42:21:f0:52:97:ab:7e:38:93:95:a4:9f:fb:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
        Validity
            Not Before: Oct  9 15:34:32 2026 GMT
            Not After : Oct  8 15:39:32 2027 GMT
        Subject: CN=E1D8E8E9A95052180C617E5F8A8F3CD86D609395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:22:f7:25:e8:b7:24:9c:08:cf:3d:77:b6:
                    eb:8c:9f:6b:e8:96:f1:79:e1:73:f2:90:81:59:cd:
                    d3:f1:3b:34:87:fa:5e:94:29:7e:49:a6:ec:1d:c1:
                    a8:cc:85:57:e0:a2:48:cc:e7:ca:15:6a:85:c0:d0:
                    4c:93:be:df:be:12:19:03:bd:a4:b9:91:28:fe:34:
                    80:a3:85:69:51:38:d0:ff:28:45:6f:db:41:b4:b5:
                    4a:aa:2d:78:58:ed:40:33:6c:1e:00:2d:67:6a:e2:
                    f6:1e:b4:ed:f5:50:b6:cf:cf:00:45:97:5e:22:4c:
                    e9:39:c6:2f:19:52:e7:fe:27:a7:37:13:d3:87:73:
                    c9:bf:be:b6:f3:f7:87:51:5d:7a:9b:89:02:0d:61:
                    68:78:c3:d3:19:d7:59:57:80:27:b2:ec:f9:65:dc:
                    5c:8e:c9:0d:88:57:e9:48:17:27:bc:31:9f:bf:87:
                    34:8e:c4:21:4d:bb:24:e0:82:04:90:97:08:bf:c0:
                    ef:30:cd:fe:d9:62:9a:12:48:2c:48:d0:cd:2c:c3:
                    5c:5f:59:4e:14:4f:21:3e:cb:c1:57:ca:03:65:66:
                    44:d8:39:cc:82:33:bd:56:c0:4b:1d:fc:9f:63:91:
                    e9:84:dd:89:f6:03:77:c2:e9:a1:87:39:7a:06:b8:
                    f3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D8:E8:E9:A9:50:52:18:0C:61:7E:5F:8A:8F:3C:D8:6D:60:93:95
            X509v3 Authority Key Identifier:
                keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a663030303a3a2f33362d3336203d3e20323732303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2310:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:a6:5f:80:a1:18:08:d7:d1:d5:67:ff:f6:bf:8b:5e:45:c4:
         5f:6b:ea:95:75:81:21:dd:2c:8b:a4:db:dc:a4:60:68:70:be:
         93:08:82:36:97:d2:0e:bb:a8:24:f2:b7:c4:da:ad:bb:28:19:
         09:b4:8b:83:77:f7:9e:90:5d:7d:45:ea:4e:7f:53:f2:5f:54:
         1b:b8:d4:a8:ab:c5:38:21:ae:63:f6:7f:66:26:0f:5a:d8:92:
         ba:4a:de:a1:e3:a2:c8:4a:f5:54:4e:a2:1f:9f:43:39:85:1d:
         4b:8d:dd:34:27:ea:fd:b3:67:38:93:6d:f4:61:31:e6:f5:90:
         46:39:5e:2f:62:73:24:ab:6c:36:d5:f8:da:bd:27:4c:98:2d:
         1a:1d:14:58:23:ef:bb:14:66:c1:8c:85:5e:3c:6c:6f:80:f6:
         16:c1:1c:4c:09:a1:66:e8:7a:98:71:33:a7:c8:49:3f:4e:e2:
         54:b1:3d:a8:74:79:46:cc:a9:f8:f2:32:af:2e:a9:9a:2e:5d:
         4d:e4:89:99:db:0e:59:70:a2:21:80:70:52:35:74:3f:54:bf:
         b0:d2:fb:d6:08:c0:76:63:74:db:0f:6d:8d:ea:e1:35:65:b8:
         bd:36:ba:a9:a3:b9:bd:2a:ad:20:92:17:8b:fa:08:a3:d3:65:
         05:7b:4e:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 20 19:30:43 2026 by rpki-client