Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/06F4E83DB4C81A9642F6CC88022E38C211CBC04B185520DBA09DD6031AEEF6FE/0/323830333a363731303a3a2f33322d3438203d3e20323732313031.roa
File:                     323830333a363731303a3a2f33322d3438203d3e20323732313031.roa (raw, json)
Hash identifier:          Etlpdu/+W/8be3AiWOctRn9PQcujndezY/JIKeglTQg=
Subject key identifier:   B9:0C:28:3C:DD:54:18:3A:AA:26:0F:C3:02:DF:AD:3C:CD:67:2C:CD
Certificate issuer:       /CN=BC840F3E35D08891C5154292CD13CB45B1DC30E5
Certificate serial:       5FF3045E6955BB75EFF666074DF4EFF74F84B65D
Authority key identifier: BC:84:0F:3E:35:D0:88:91:C5:15:42:92:CD:13:CB:45:B1:DC:30:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC840F3E35D08891C5154292CD13CB45B1DC30E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06F4E83DB4C81A9642F6CC88022E38C211CBC04B185520DBA09DD6031AEEF6FE/0/323830333a363731303a3a2f33322d3438203d3e20323732313031.roa
Signing time:             Thu 15 Oct 2026 02:40:37 +0000
ROA not before:           Thu 15 Oct 2026 02:35:37 +0000
ROA not after:            Thu 14 Oct 2027 02:40:37 +0000
asID:                     272101
IP address blocks:        2803:6710::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06F4E83DB4C81A9642F6CC88022E38C211CBC04B185520DBA09DD6031AEEF6FE/0/BC840F3E35D08891C5154292CD13CB45B1DC30E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06F4E83DB4C81A9642F6CC88022E38C211CBC04B185520DBA09DD6031AEEF6FE/0/BC840F3E35D08891C5154292CD13CB45B1DC30E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC840F3E35D08891C5154292CD13CB45B1DC30E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f3:04:5e:69:55:bb:75:ef:f6:66:07:4d:f4:ef:f7:4f:84:b6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC840F3E35D08891C5154292CD13CB45B1DC30E5
        Validity
            Not Before: Oct 15 02:35:37 2026 GMT
            Not After : Oct 14 02:40:37 2027 GMT
        Subject: CN=B90C283CDD54183AAA260FC302DFAD3CCD672CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:fa:c5:89:9f:99:e9:b0:8c:46:44:8e:41:
                    59:2c:0e:90:f4:8c:5b:52:9e:2b:ad:27:e3:48:b6:
                    7f:3e:03:f0:f7:78:89:c5:3f:55:87:67:34:01:df:
                    ef:19:db:9b:02:21:b0:34:f4:c4:55:38:29:3c:a2:
                    00:56:21:ce:0a:7f:29:d3:f6:4d:b7:d8:21:18:c3:
                    29:f4:5a:90:5d:58:b7:b2:84:35:ba:35:d8:4d:a5:
                    14:c3:63:0c:ae:f8:dd:4d:00:2f:92:c8:5b:e3:b9:
                    89:f4:29:7c:57:30:24:22:02:af:b5:74:12:f4:bf:
                    2f:97:45:ec:c4:4b:99:a9:9f:81:db:83:c1:d2:9b:
                    45:2a:6c:db:f7:c8:bb:f4:88:7b:82:f2:7e:1c:18:
                    1b:f7:11:2b:a1:ae:14:fa:4a:10:62:fa:ee:4d:38:
                    eb:0b:64:30:8d:9b:2b:28:3b:f6:ef:11:0c:13:67:
                    9b:71:68:1b:11:b4:76:89:62:3d:cc:8f:ec:c5:85:
                    b0:2d:93:1a:46:a2:27:5e:d5:85:3e:f8:6d:90:bf:
                    de:0b:c9:22:5b:a6:dd:f7:7e:c7:a5:e1:29:70:2a:
                    a3:97:90:c6:1e:c9:9a:8a:fd:d9:cb:cf:8f:e1:75:
                    3c:de:7a:7e:68:d7:64:82:fd:f3:1a:59:9f:fa:49:
                    3a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0C:28:3C:DD:54:18:3A:AA:26:0F:C3:02:DF:AD:3C:CD:67:2C:CD
            X509v3 Authority Key Identifier:
                keyid:BC:84:0F:3E:35:D0:88:91:C5:15:42:92:CD:13:CB:45:B1:DC:30:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06F4E83DB4C81A9642F6CC88022E38C211CBC04B185520DBA09DD6031AEEF6FE/0/BC840F3E35D08891C5154292CD13CB45B1DC30E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC840F3E35D08891C5154292CD13CB45B1DC30E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06F4E83DB4C81A9642F6CC88022E38C211CBC04B185520DBA09DD6031AEEF6FE/0/323830333a363731303a3a2f33322d3438203d3e20323732313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6710::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:78:9b:31:9f:b1:a7:bc:66:1d:33:37:b6:ae:66:ba:a3:c6:
         34:dc:cd:06:85:e5:2a:a7:56:d2:d6:71:ec:69:db:84:1a:8a:
         fa:62:11:66:9e:44:16:62:13:83:48:6c:45:a3:11:fa:e2:33:
         3f:a6:99:47:98:80:66:b1:a1:87:54:1f:a5:06:85:4e:c2:df:
         a7:1a:df:a8:fb:42:1d:6b:e6:c7:e0:53:d1:18:a7:27:df:b2:
         86:0b:a4:88:7e:7f:c1:f2:5b:d5:89:7e:1c:3e:80:fc:10:9d:
         b9:74:7f:a5:93:00:7c:69:0d:02:84:f9:f2:14:98:de:2c:21:
         7d:08:f3:cd:8d:a4:86:bd:fe:d6:29:65:0f:7a:34:b2:e0:5b:
         7b:d5:fb:d8:6f:8a:38:35:94:d2:53:39:c7:c1:74:9e:7f:68:
         2b:37:00:2c:94:d6:6c:82:9c:41:3d:85:c4:33:f1:f4:52:8e:
         ea:1f:68:79:38:15:8d:ff:0f:bd:33:52:0f:dc:62:5b:1c:f0:
         b4:fc:d8:18:0a:f2:67:30:0e:a6:08:74:c0:30:fb:ec:b6:57:
         d1:21:0e:f9:7f:9c:38:6c:54:87:6b:a0:ba:bc:cf:c2:f8:b6:
         95:ea:91:34:1d:98:bb:4e:af:04:9d:00:5b:63:f2:11:0d:45:
         6b:87:a0:55
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUX/MEXmlVu3Xv9mYHTfTv90+Etl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM4NDBGM0UzNUQwODg5MUM1MTU0MjkyQ0QxM0NCNDVC
MURDMzBFNTAeFw0yNjEwMTUwMjM1MzdaFw0yNzEwMTQwMjQwMzdaMDMxMTAvBgNV
BAMTKEI5MEMyODNDREQ1NDE4M0FBQTI2MEZDMzAyREZBRDNDQ0Q2NzJDQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdNfrFiZ+Z6bCMRkSOQVksDpD0
jFtSniutJ+NItn8+A/D3eInFP1WHZzQB3+8Z25sCIbA09MRVOCk8ogBWIc4KfynT
9k232CEYwyn0WpBdWLeyhDW6NdhNpRTDYwyu+N1NAC+SyFvjuYn0KXxXMCQiAq+1
dBL0vy+XRezES5mpn4Hbg8HSm0UqbNv3yLv0iHuC8n4cGBv3ESuhrhT6ShBi+u5N
OOsLZDCNmysoO/bvEQwTZ5txaBsRtHaJYj3Mj+zFhbAtkxpGoide1YU++G2Qv94L
ySJbpt33fsel4SlwKqOXkMYeyZqK/dnLz4/hdTzeen5o12SC/fMaWZ/6STrRAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUuQwoPN1UGDqqJg/DAt+tPM1nLM0wHwYDVR0j
BBgwFoAUvIQPPjXQiJHFFUKSzRPLRbHcMOUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNkY0RTgzREI0QzgxQTk2NDJGNkNDODgwMjJFMzhDMjEx
Q0JDMDRCMTg1NTIwREJBMDlERDYwMzFBRUVGNkZFLzAvQkM4NDBGM0UzNUQwODg5
MUM1MTU0MjkyQ0QxM0NCNDVCMURDMzBFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzg0MEYzRTM1RDA4ODkxQzUx
NTQyOTJDRDEzQ0I0NUIxREMzMEU1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDZGNEU4M0RCNEM4MUE5NjQyRjZDQzg4MDIyRTM4QzIxMUNCQzA0QjE4
NTUyMERCQTA5REQ2MDMxQUVFRjZGRS8wLzMyMzgzMDMzM2EzNjM3MzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjMxMzAzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDZxAw
DQYJKoZIhvcNAQELBQADggEBAAx4mzGfsae8Zh0zN7auZrqjxjTczQaF5SqnVtLW
cexp24QaivpiEWaeRBZiE4NIbEWjEfriMz+mmUeYgGaxoYdUH6UGhU7C36ca36j7
Qh1r5sfgU9EYpyffsoYLpIh+f8HyW9WJfhw+gPwQnbl0f6WTAHxpDQKE+fIUmN4s
IX0I882NpIa9/tYpZQ96NLLgW3vV+9hvijg1lNJTOcfBdJ5/aCs3ACyU1myCnEE9
hcQz8fRSjuofaHk4FY3/D70zUg/cYlsc8LT82BgK8mcwDqYIdMAw++y2V9EhDvl/
nDhsVIdroLq8z8L4tpXqkTQdmLtOrwSdAFtj8hENRWuHoFU=
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:04:20 2026 by rpki-client