Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3330303a3a2f34302d3430203d3e20323634373431.roa
File:                     323830333a373734303a3330303a3a2f34302d3430203d3e20323634373431.roa (raw, json)
Hash identifier:          y+jr/hcq+Nw4o2CmGfqR+I4NZYBQYuF0tPJXvzwMHL8=
Subject key identifier:   FA:AB:C8:99:33:17:40:E6:A6:74:6B:A1:A8:9C:70:C5:3B:C8:BA:9C
Certificate issuer:       /CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
Certificate serial:       3882017BDE437D16E1D97BA04F593B606ECD6B82
Authority key identifier: E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3330303a3a2f34302d3430203d3e20323634373431.roa
Signing time:             Thu 01 Oct 2026 20:55:00 +0000
ROA not before:           Thu 01 Oct 2026 20:50:00 +0000
ROA not after:            Thu 30 Sep 2027 20:55:00 +0000
asID:                     264741
IP address blocks:        2803:7740:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 08:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:82:01:7b:de:43:7d:16:e1:d9:7b:a0:4f:59:3b:60:6e:cd:6b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
        Validity
            Not Before: Oct  1 20:50:00 2026 GMT
            Not After : Sep 30 20:55:00 2027 GMT
        Subject: CN=FAABC899331740E6A6746BA1A89C70C53BC8BA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:bc:db:72:8f:9a:24:3b:6b:96:bf:51:75:
                    46:fb:42:25:d4:5f:9d:ee:a5:fc:27:ab:2d:72:fb:
                    9c:9c:93:06:b4:fa:8c:71:f3:ed:a8:a6:22:fd:0f:
                    b6:6b:a0:09:f5:a5:d0:d9:ae:92:4f:ea:86:84:fe:
                    40:e3:9a:6c:59:a3:13:da:d3:63:22:c5:8e:9a:7c:
                    16:09:a1:67:da:5a:0d:f5:80:3a:97:f8:fa:d3:d8:
                    10:a1:f7:3a:b9:7f:59:14:99:4a:b7:6c:60:e5:d8:
                    1f:8c:cd:55:62:cd:bc:73:b3:bb:77:0d:63:4c:d4:
                    f2:9d:c2:0c:a4:43:8d:50:04:ae:82:12:e2:3d:ec:
                    68:eb:d6:f6:d8:00:49:21:db:34:d1:e4:42:8f:6c:
                    aa:4f:85:7f:0c:3f:1e:b2:d9:71:02:86:66:ec:91:
                    99:05:45:b5:96:dd:5d:4e:27:b7:51:f7:c1:d4:c3:
                    cd:d7:bc:5e:11:52:c7:28:ba:d8:ce:0e:65:a3:05:
                    a9:b0:6d:23:a2:15:f4:43:ea:eb:c5:6c:a7:15:e8:
                    ef:a0:d8:43:9f:74:06:ae:51:58:8f:c1:44:75:4e:
                    52:f4:4d:fa:c8:17:d4:9a:50:9c:08:cd:38:d9:00:
                    e6:e2:6e:f8:c5:56:0b:e3:50:93:a9:f3:82:bb:bc:
                    93:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AB:C8:99:33:17:40:E6:A6:74:6B:A1:A8:9C:70:C5:3B:C8:BA:9C
            X509v3 Authority Key Identifier:
                keyid:E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3330303a3a2f34302d3430203d3e20323634373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7740:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:df:52:27:ec:99:fe:4e:66:6b:9b:21:37:8e:30:2e:a5:0e:
         6b:19:5c:9a:81:b8:76:4c:0a:0d:c6:c3:c2:03:02:f2:a8:46:
         a2:31:1d:11:79:75:0a:a3:cd:08:86:fb:ee:d8:7b:b7:e1:02:
         2b:c6:b0:a8:17:eb:6a:24:4f:33:93:33:93:82:c7:b6:06:20:
         db:12:8e:6a:d4:6d:61:90:82:af:a5:45:6c:4d:da:99:ae:da:
         b8:52:95:d5:e7:41:d4:e7:f5:7e:62:c5:68:3d:5b:e3:a7:72:
         d2:c1:1e:3e:df:8d:56:63:11:0d:89:74:b6:ba:05:da:0d:28:
         1b:a9:5d:18:bd:54:f7:6d:c4:4c:4d:0b:64:00:43:f6:a4:90:
         5a:8f:45:5d:84:5a:7b:1f:2e:15:d3:88:ef:f0:c5:74:2c:f6:
         8e:26:4a:11:06:2a:fd:4f:88:f5:ce:2f:85:9e:e4:a1:56:c7:
         a2:d4:24:3a:9b:c0:1c:c6:08:7b:ba:53:d6:04:66:bb:fd:af:
         ea:ae:16:c5:ca:da:d9:d2:a0:09:c8:95:8f:85:9c:50:a2:60:
         8d:a7:85:c0:05:84:04:89:7f:29:ed:78:ec:37:0c:69:91:5c:
         21:46:1b:39:66:a7:ac:5d:4f:ce:1e:c7:af:58:86:91:4a:51:
         a2:e2:05:58
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUOIIBe95DfRbh2XugT1k7YG7Na4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJBRDAzNkYzQjhBQ0U1MzFFMUEwOTVGQUMxRTEzQjJD
NzMyNDQzMDAeFw0yNjEwMDEyMDUwMDBaFw0yNzA5MzAyMDU1MDBaMDMxMTAvBgNV
BAMTKEZBQUJDODk5MzMxNzQwRTZBNjc0NkJBMUE4OUM3MEM1M0JDOEJBOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcrzbco+aJDtrlr9RdUb7QiXU
X53upfwnqy1y+5yckwa0+oxx8+2opiL9D7ZroAn1pdDZrpJP6oaE/kDjmmxZoxPa
02MixY6afBYJoWfaWg31gDqX+PrT2BCh9zq5f1kUmUq3bGDl2B+MzVVizbxzs7t3
DWNM1PKdwgykQ41QBK6CEuI97Gjr1vbYAEkh2zTR5EKPbKpPhX8MPx6y2XEChmbs
kZkFRbWW3V1OJ7dR98HUw83XvF4RUscoutjODmWjBamwbSOiFfRD6uvFbKcV6O+g
2EOfdAauUViPwUR1TlL0TfrIF9SaUJwIzTjZAObibvjFVgvjUJOp84K7vJOvAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU+qvImTMXQOamdGuhqJxwxTvIupwwHwYDVR0j
BBgwFoAU4q0DbzuKzlMeGglfrB4TsscyRDAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QkVGQzM5MkYyMzgxRTc5N0REQTBDMDU4M0JDMzYxRTI5
Q0IxOEVDRUI3ODIyMUI2RTg4NzQ5RTJGMjA1QzNFLzAvRTJBRDAzNkYzQjhBQ0U1
MzFFMUEwOTVGQUMxRTEzQjJDNzMyNDQzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMkFEMDM2RjNCOEFDRTUzMUUx
QTA5NUZBQzFFMTNCMkM3MzI0NDMwLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkJFRkMzOTJGMjM4MUU3OTdEREEwQzA1ODNCQzM2MUUyOUNCMThFQ0VC
NzgyMjFCNkU4ODc0OUUyRjIwNUMzRS8wLzMyMzgzMDMzM2EzNzM3MzQzMDNhMzMz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM0MzczNDMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAN3QAMwDQYJKoZIhvcNAQELBQADggEBAKDfUifsmf5OZmubITeOMC6lDmsZ
XJqBuHZMCg3Gw8IDAvKoRqIxHRF5dQqjzQiG++7Ye7fhAivGsKgX62okTzOTM5OC
x7YGINsSjmrUbWGQgq+lRWxN2pmu2rhSldXnQdTn9X5ixWg9W+OnctLBHj7fjVZj
EQ2JdLa6BdoNKBupXRi9VPdtxExNC2QAQ/akkFqPRV2EWnsfLhXTiO/wxXQs9o4m
ShEGKv1PiPXOL4We5KFWx6LUJDqbwBzGCHu6U9YEZrv9r+quFsXK2tnSoAnIlY+F
nFCiYI2nhcAFhASJfynteOw3DGmRXCFGGzlmp6xdT84ex69YhpFKUaLiBVg=
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:45:10 2026 by rpki-client