Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6AE5D2D83801248B5107A338F343FBF89D50CD39AFF3DAA5AE79EFD79A23EF9F/0/323830333a386564303a3a2f33322d3438203d3e20323734313035.roa
File:                     323830333a386564303a3a2f33322d3438203d3e20323734313035.roa (raw, json)
Hash identifier:          tFfpr5xgRuzUvhHzNi+H6IanFMg+9vDQ2XAGMdJKE94=
Subject key identifier:   2C:1A:B6:24:0B:C5:CF:D1:05:D8:0C:20:BC:36:BC:59:7A:E4:4D:0E
Certificate issuer:       /CN=46C0858AE0F902ECA4BDC8B3B9719707EEDB2009
Certificate serial:       6D6305B207741A34396FF7F204CE3C1780BCE645
Authority key identifier: 46:C0:85:8A:E0:F9:02:EC:A4:BD:C8:B3:B9:71:97:07:EE:DB:20:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46C0858AE0F902ECA4BDC8B3B9719707EEDB2009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6AE5D2D83801248B5107A338F343FBF89D50CD39AFF3DAA5AE79EFD79A23EF9F/0/323830333a386564303a3a2f33322d3438203d3e20323734313035.roa
Signing time:             Thu 17 Sep 2026 03:35:58 +0000
ROA not before:           Thu 17 Sep 2026 03:30:58 +0000
ROA not after:            Thu 16 Sep 2027 03:35:58 +0000
asID:                     274105
IP address blocks:        2803:8ed0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6AE5D2D83801248B5107A338F343FBF89D50CD39AFF3DAA5AE79EFD79A23EF9F/0/46C0858AE0F902ECA4BDC8B3B9719707EEDB2009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6AE5D2D83801248B5107A338F343FBF89D50CD39AFF3DAA5AE79EFD79A23EF9F/0/46C0858AE0F902ECA4BDC8B3B9719707EEDB2009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46C0858AE0F902ECA4BDC8B3B9719707EEDB2009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:63:05:b2:07:74:1a:34:39:6f:f7:f2:04:ce:3c:17:80:bc:e6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46C0858AE0F902ECA4BDC8B3B9719707EEDB2009
        Validity
            Not Before: Sep 17 03:30:58 2026 GMT
            Not After : Sep 16 03:35:58 2027 GMT
        Subject: CN=2C1AB6240BC5CFD105D80C20BC36BC597AE44D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:af:93:43:40:b5:64:89:45:05:a9:fd:d2:9f:
                    2c:ed:28:12:21:d0:ce:8c:e2:a6:88:93:2d:f8:f7:
                    9b:9e:ed:6c:b0:a1:ca:1c:87:99:c3:02:0a:8a:b5:
                    b1:0c:01:f5:08:42:a9:22:fa:92:97:a5:6e:97:8f:
                    50:3b:1c:28:e4:d0:26:57:fa:3f:f7:8e:a2:91:14:
                    34:43:d2:3c:37:b7:ad:fd:c7:af:7a:ae:8f:53:3c:
                    78:73:0e:c0:76:98:b3:67:1f:01:7f:d5:68:fb:eb:
                    d7:ab:ea:00:93:f4:58:25:5e:50:1d:3a:29:d5:71:
                    06:05:2d:48:e2:04:4d:49:0e:86:fb:ee:01:8d:9b:
                    9e:57:02:a8:4d:b2:b4:50:c6:f6:ea:b4:76:16:f4:
                    ad:bf:d1:f0:dc:2c:42:73:84:6b:69:2a:7a:3b:4e:
                    fb:68:a0:5f:13:cc:bb:3f:ff:4e:91:53:62:57:46:
                    d6:e2:85:e2:3f:63:e5:e7:b5:40:06:f1:32:41:69:
                    34:ab:6f:7f:0f:d4:b6:d7:be:fb:ff:3e:9e:86:9f:
                    f3:f2:2a:82:36:09:81:d5:b0:c5:b5:dc:26:bd:bf:
                    a4:fe:03:e2:1b:cf:39:89:a9:fe:a5:b4:00:48:e4:
                    85:d0:84:65:74:37:90:5d:5e:a3:80:2d:bd:7c:d1:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1A:B6:24:0B:C5:CF:D1:05:D8:0C:20:BC:36:BC:59:7A:E4:4D:0E
            X509v3 Authority Key Identifier:
                keyid:46:C0:85:8A:E0:F9:02:EC:A4:BD:C8:B3:B9:71:97:07:EE:DB:20:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6AE5D2D83801248B5107A338F343FBF89D50CD39AFF3DAA5AE79EFD79A23EF9F/0/46C0858AE0F902ECA4BDC8B3B9719707EEDB2009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46C0858AE0F902ECA4BDC8B3B9719707EEDB2009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6AE5D2D83801248B5107A338F343FBF89D50CD39AFF3DAA5AE79EFD79A23EF9F/0/323830333a386564303a3a2f33322d3438203d3e20323734313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8ed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:57:27:70:0a:81:b0:57:4e:52:4c:07:4a:f2:46:1e:92:12:
         f9:4c:fb:9f:34:5f:76:ec:3b:b6:69:36:c0:9d:64:44:5c:03:
         95:20:be:88:ca:49:8c:45:f0:41:d9:1b:74:48:1d:c4:1f:a6:
         b7:6e:6e:44:55:ec:6e:21:7b:ab:57:15:ad:68:6f:24:4d:bf:
         8c:23:4b:5b:57:c7:45:62:4f:a5:92:e6:27:b9:56:87:56:23:
         c3:57:b3:63:38:85:cd:4f:51:37:0c:95:c7:bc:01:e4:9d:c6:
         4b:f8:61:44:07:a8:8a:5f:a8:ec:73:82:a7:ac:fb:c8:6f:2c:
         16:7e:55:ed:aa:76:50:47:75:47:29:ee:a0:ee:c0:27:63:55:
         db:35:f9:3a:46:d5:67:2c:d1:ab:ba:9e:38:48:0b:68:37:ab:
         35:e0:b1:65:c2:4f:e2:32:83:ee:66:75:99:f7:25:79:b2:b1:
         7e:79:6a:b8:c8:49:71:d4:6b:5f:33:23:0b:fc:4c:7c:95:0d:
         1a:0e:da:d7:ba:56:d1:eb:b4:13:4b:eb:cc:d3:78:44:88:c8:
         89:3a:b0:45:c8:a1:a9:89:0c:03:03:79:22:a0:93:ef:20:ac:
         a8:bb:d7:79:bb:e7:2d:3c:94:c2:dd:f3:0d:41:1f:4a:13:76:
         f0:99:06:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:10:36 2026 by rpki-client