Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a343030303a3a2f34302d3634203d3e20323733303930.roa
File:                     323830333a383035303a343030303a3a2f34302d3634203d3e20323733303930.roa (raw, json)
Hash identifier:          MWmK+Yx+llqST8gXlXf3s6PguKQdvT9IaxKQYiQUW1c=
Subject key identifier:   B7:84:8F:59:03:6B:E6:D0:67:AC:29:DA:D0:D4:3D:3F:77:29:39:EE
Certificate issuer:       /CN=83FF6BF78A661262789ABB6D53B59E4B553F45BC
Certificate serial:       13928549405CBD224521F2025432B4779CADB05B
Authority key identifier: 83:FF:6B:F7:8A:66:12:62:78:9A:BB:6D:53:B5:9E:4B:55:3F:45:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a343030303a3a2f34302d3634203d3e20323733303930.roa
Signing time:             Tue 20 Oct 2026 01:42:04 +0000
ROA not before:           Tue 20 Oct 2026 01:37:04 +0000
ROA not after:            Tue 19 Oct 2027 01:42:04 +0000
asID:                     273090
IP address blocks:        2803:8050:4000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 18:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:92:85:49:40:5c:bd:22:45:21:f2:02:54:32:b4:77:9c:ad:b0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83FF6BF78A661262789ABB6D53B59E4B553F45BC
        Validity
            Not Before: Oct 20 01:37:04 2026 GMT
            Not After : Oct 19 01:42:04 2027 GMT
        Subject: CN=B7848F59036BE6D067AC29DAD0D43D3F772939EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:29:0d:56:d3:66:2f:96:7f:80:f3:34:4e:
                    5f:2d:dc:d3:d3:5c:b4:2f:41:6e:ad:2e:52:27:99:
                    c7:14:42:92:42:72:7a:51:84:ef:9f:28:5d:b0:23:
                    37:1b:04:71:49:98:13:56:03:7a:5c:22:84:1c:67:
                    3a:fb:3d:71:93:08:2b:f1:d6:9e:dc:3b:4e:07:14:
                    24:7e:1a:80:7d:db:43:17:b4:61:68:b5:59:34:72:
                    1f:4c:7c:67:3b:f3:80:8a:db:a1:20:c7:f4:a2:4a:
                    48:fc:0b:56:be:8e:27:7b:2c:1a:a2:d2:f6:a2:94:
                    f4:16:09:73:f3:6a:99:a3:df:f7:f1:69:b5:6a:b7:
                    68:16:6d:eb:51:d2:3d:3a:e0:b1:ac:ca:09:4c:e4:
                    e0:f0:3c:fc:be:2d:53:5e:da:61:9d:21:f8:c4:69:
                    ac:6d:04:e8:de:76:71:f1:8f:89:23:c8:68:bf:cb:
                    c9:4b:61:81:f0:e6:2b:83:af:8b:3e:21:61:df:62:
                    91:22:20:71:14:13:08:5a:60:0f:48:fc:6a:d5:83:
                    40:a5:9c:30:38:52:a6:9b:b5:ca:56:6d:48:f7:e9:
                    6e:1d:c1:b6:3e:4b:1f:c8:1f:ba:2f:57:22:62:80:
                    cb:a3:95:21:eb:2b:52:27:ca:6a:c3:d6:3d:21:fb:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:84:8F:59:03:6B:E6:D0:67:AC:29:DA:D0:D4:3D:3F:77:29:39:EE
            X509v3 Authority Key Identifier:
                keyid:83:FF:6B:F7:8A:66:12:62:78:9A:BB:6D:53:B5:9E:4B:55:3F:45:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a343030303a3a2f34302d3634203d3e20323733303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8050:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:e8:2c:06:01:4f:5c:3c:b7:73:c7:fd:59:e8:4d:f8:1b:56:
         8a:14:9a:5b:be:46:b8:06:18:94:f6:1c:be:60:69:da:0b:ad:
         8f:cb:bc:81:4c:39:5b:b0:23:07:2d:c3:8c:27:68:8f:3f:9d:
         55:e6:f3:d6:f5:69:74:54:2f:d9:53:0b:5b:61:33:35:1e:e2:
         4e:90:65:d1:9d:f0:e9:30:9d:4d:e2:b1:97:63:db:3f:25:bc:
         bc:76:a8:9a:a7:aa:1d:1d:bb:aa:78:48:e4:3b:00:aa:94:e5:
         19:7d:17:84:69:9c:7e:20:b5:55:50:61:00:a8:44:b9:06:9b:
         28:4b:45:cc:8b:69:c6:0d:0f:f9:a6:67:e8:0a:b8:59:5b:14:
         d5:a7:2f:27:9f:b6:f5:f5:f5:cf:fc:62:c5:e9:da:f5:13:74:
         37:7e:e8:32:1c:cd:ee:00:2f:48:80:0e:76:53:8a:52:52:45:
         01:8e:63:4d:33:a7:b2:77:43:c9:70:ad:3e:a3:6f:41:02:c5:
         b3:e8:2f:84:43:a4:c6:46:95:ad:e6:62:10:59:41:2b:00:79:
         02:b8:e3:a8:a4:d3:30:86:a3:ed:af:98:f6:e8:81:c0:87:9d:
         df:49:0e:16:0a:1c:0f:ad:2f:31:39:aa:36:71:e6:de:4d:e5:
         90:1d:76:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 04:24:44 2026 by rpki-client