Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a356630343a3a2f34362d3438203d3e20323733313530.roa
File:                     323830333a636436303a356630343a3a2f34362d3438203d3e20323733313530.roa (raw, json)
Hash identifier:          xH0Amw93Vwb5Y7HuFa5/EjI3pURLxOI+zpyz3LEBoiY=
Subject key identifier:   C4:E9:BE:F2:FE:E7:6E:AF:26:69:65:CB:4A:A9:7E:66:56:1E:3D:90
Certificate issuer:       /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
Certificate serial:       140643BB2F8624F85B1D1A73D2A4AABE3FEDBE41
Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a356630343a3a2f34362d3438203d3e20323733313530.roa
Signing time:             Thu 08 Oct 2026 15:39:19 +0000
ROA not before:           Thu 08 Oct 2026 15:34:19 +0000
ROA not after:            Thu 07 Oct 2027 15:39:19 +0000
asID:                     273150
IP address blocks:        2803:cd60:5f04::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:06:43:bb:2f:86:24:f8:5b:1d:1a:73:d2:a4:aa:be:3f:ed:be:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
        Validity
            Not Before: Oct  8 15:34:19 2026 GMT
            Not After : Oct  7 15:39:19 2027 GMT
        Subject: CN=C4E9BEF2FEE76EAF266965CB4AA97E66561E3D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:84:08:18:ca:41:b0:05:00:97:2e:b2:71:
                    43:7f:ea:da:ff:90:13:31:fe:0e:1c:c8:ad:b1:1d:
                    83:9a:8b:28:a5:68:56:db:a5:a4:ce:96:38:fd:21:
                    c6:35:12:f0:0c:35:21:9d:fa:74:29:96:1f:58:09:
                    18:fa:32:4c:de:72:1d:a1:32:24:11:5c:8e:91:e5:
                    82:53:64:64:28:9a:6b:71:f8:30:96:db:8a:28:65:
                    57:f5:08:b2:6b:a3:ce:88:66:1c:4c:59:47:9d:80:
                    57:3f:54:97:53:f2:b7:69:e3:de:99:ca:9d:9c:8f:
                    f8:4b:a3:1a:6d:66:98:a1:4b:f0:8d:b9:eb:a7:ae:
                    5b:af:0c:ae:07:3f:08:e7:41:98:07:f1:84:02:45:
                    0c:ea:fe:a4:1c:55:56:1c:f1:83:ab:60:76:0c:e2:
                    15:6d:6e:a0:da:dd:53:c1:e8:ef:0c:84:da:bb:c9:
                    94:12:a1:98:76:b9:b9:38:8b:76:61:a7:68:0c:e6:
                    ed:fe:7b:f5:fe:bc:fa:a8:80:9f:2e:0d:ff:3a:a6:
                    ae:e4:47:f9:a5:cf:76:fe:0a:5f:d0:ff:ac:86:3f:
                    69:60:46:67:84:d5:5d:07:d6:a2:e7:ef:e6:ed:7c:
                    18:e4:ec:c3:43:04:04:32:fd:c0:a0:92:0e:0d:aa:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E9:BE:F2:FE:E7:6E:AF:26:69:65:CB:4A:A9:7E:66:56:1E:3D:90
            X509v3 Authority Key Identifier:
                keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a356630343a3a2f34362d3438203d3e20323733313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd60:5f04::/46

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:5d:ab:72:72:cd:2d:05:95:c2:be:4f:ef:50:4f:17:14:
         0d:30:2d:86:df:68:0e:5c:54:aa:69:d6:32:03:99:ff:77:54:
         ad:d5:8d:3d:b7:f1:4d:9b:96:a5:f3:de:af:e6:17:1e:f8:60:
         6a:46:e8:9e:6d:01:e5:ef:ae:04:db:f4:98:33:ab:3e:75:52:
         85:2e:d5:c6:55:b4:da:4f:05:fd:7e:51:30:4e:f9:ee:74:4d:
         ed:e8:ec:5a:7b:94:76:cf:d6:40:91:d9:7d:d2:d9:12:81:cf:
         fa:df:67:44:31:dc:3b:e9:6d:fd:65:89:67:a5:af:fd:bb:28:
         0d:89:6d:fa:a8:ea:14:05:32:bd:e7:1e:bd:80:01:f2:0c:79:
         b8:61:f0:ae:81:54:cd:e1:1a:64:62:ba:d1:f1:4a:7f:72:a5:
         a3:55:89:5b:de:d7:60:6e:6a:36:ea:d1:82:f2:fc:a0:c1:5b:
         c7:34:35:61:5d:9b:6b:fc:62:48:db:f8:db:66:11:1e:b8:33:
         75:7e:f2:61:97:d2:9c:c7:f6:dd:a2:6b:60:f1:3a:4c:0a:79:
         63:6f:1c:93:6a:8b:8e:a7:12:a3:ca:d0:3a:f8:77:5f:a7:dd:
         d1:56:74:ce:38:81:77:30:0e:7f:27:60:fb:f4:13:a3:5c:ad:
         c2:b8:2d:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 29 15:11:18 2026 by rpki-client