Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3730303a3a2f34302d3430203d3e20323634373431.roa
File:                     323830333a373734303a3730303a3a2f34302d3430203d3e20323634373431.roa (raw, json)
Hash identifier:          c91cUuGuljRDR91HCsxE9pXaozv2zBksoT3EGBwFRjc=
Subject key identifier:   60:AA:3A:BD:6B:4E:0D:17:BE:55:6A:1F:4C:4A:56:50:2C:D6:AC:1A
Certificate issuer:       /CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
Certificate serial:       5EBE15835D03B9AD184248CB02471ABA8E79977C
Authority key identifier: E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3730303a3a2f34302d3430203d3e20323634373431.roa
Signing time:             Thu 01 Oct 2026 20:55:01 +0000
ROA not before:           Thu 01 Oct 2026 20:50:01 +0000
ROA not after:            Thu 30 Sep 2027 20:55:01 +0000
asID:                     264741
IP address blocks:        2803:7740:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:be:15:83:5d:03:b9:ad:18:42:48:cb:02:47:1a:ba:8e:79:97:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
        Validity
            Not Before: Oct  1 20:50:01 2026 GMT
            Not After : Sep 30 20:55:01 2027 GMT
        Subject: CN=60AA3ABD6B4E0D17BE556A1F4C4A56502CD6AC1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:a8:22:d0:31:05:12:b4:17:ab:33:00:75:
                    2c:62:ab:f4:7b:6e:52:63:40:e4:d2:45:52:b7:8a:
                    26:8c:12:84:d6:a2:db:c8:2b:62:3a:79:31:ae:7c:
                    fe:d1:ac:d2:ed:0c:39:5a:0f:15:4b:c6:ba:34:f6:
                    bd:bb:26:50:b5:b1:4c:c9:4e:d8:84:cc:9c:6e:16:
                    d3:8d:61:83:18:59:e9:c4:63:b6:16:b0:06:ba:7d:
                    8b:06:16:8f:5e:30:55:2f:93:ec:19:4b:e5:cc:77:
                    ed:e7:3f:27:81:c2:9c:ab:94:e7:d1:88:07:7d:96:
                    7f:ef:21:59:95:bd:f2:ee:99:6e:98:21:65:25:c0:
                    39:37:3b:d1:d3:a0:04:af:61:45:e8:88:fa:24:3f:
                    70:9c:c3:4d:28:c1:8e:3e:4e:0a:33:ac:b8:63:dc:
                    b2:c3:c5:e2:cb:89:ae:8e:2f:13:42:ea:f4:01:20:
                    70:cd:70:db:3f:77:61:3e:d6:6c:28:24:ae:8c:e6:
                    a8:fb:a6:21:d3:6b:f9:49:aa:a3:03:8a:d2:2a:dc:
                    d6:93:d7:4a:20:8e:ed:0f:90:b9:80:99:dc:c9:f6:
                    3a:bf:8b:40:30:a7:3b:06:fd:35:3d:61:32:93:10:
                    f7:02:a6:8c:4f:b7:43:4b:c3:af:e1:f6:cd:eb:f4:
                    6f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AA:3A:BD:6B:4E:0D:17:BE:55:6A:1F:4C:4A:56:50:2C:D6:AC:1A
            X509v3 Authority Key Identifier:
                keyid:E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3730303a3a2f34302d3430203d3e20323634373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7740:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         c5:70:e8:25:2d:70:23:c9:b1:fc:b4:d4:fd:6b:64:e6:1b:04:
         a0:d8:57:fe:31:f4:e3:1e:41:7f:a3:98:2c:96:73:1c:be:8a:
         bf:89:ac:a3:77:d9:fe:5d:cd:ac:1e:08:ba:e2:ad:eb:e8:22:
         57:0d:d0:16:72:89:f8:73:b2:ac:0b:98:38:6c:01:11:06:5d:
         c1:8b:98:6f:84:2b:1a:e5:4b:bf:b9:71:91:89:ab:ad:a8:e6:
         7f:7a:e0:fd:9b:c9:e5:c7:60:f0:6a:f1:4b:46:9b:58:e4:f4:
         89:7e:18:a6:42:aa:9f:7a:53:4a:bf:ec:4e:6c:f8:0d:33:31:
         a2:91:c4:91:fd:4b:97:69:a9:e5:08:8a:1e:e3:22:8c:e7:b6:
         ba:f6:01:81:2a:a6:d3:90:f2:b4:a2:c1:1a:dc:c8:9d:a2:24:
         26:ea:11:21:b2:3e:14:e3:df:7d:a0:a9:02:4e:ef:97:f2:9f:
         98:05:c0:f7:d2:cb:66:77:bd:7a:cb:a6:9b:82:b8:36:f5:0e:
         47:1b:4b:1d:de:9e:b3:5e:09:2e:09:67:d0:80:2f:24:ad:fe:
         83:54:46:46:19:46:6c:6e:60:e3:5c:7d:48:50:9f:db:9b:7d:
         5d:3f:59:86:73:18:84:9d:c0:85:a5:c0:86:d2:12:c9:de:db:
         41:02:e3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:55:40 2026 by rpki-client