Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3830303a3a2f34302d3430203d3e20323634373431.roa
File:                     323830333a373734303a3830303a3a2f34302d3430203d3e20323634373431.roa (raw, json)
Hash identifier:          7UXfeAhv0l9en3k7hT0pPaJF6k83mibpH1Se2zZkvzk=
Subject key identifier:   26:E8:67:8B:9F:38:4A:31:57:9B:48:B8:8B:3D:57:FE:FE:D7:21:2E
Certificate issuer:       /CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
Certificate serial:       77D6BA01D091179D535A4D9C2313452FD91C7221
Authority key identifier: E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3830303a3a2f34302d3430203d3e20323634373431.roa
Signing time:             Thu 01 Oct 2026 20:55:00 +0000
ROA not before:           Thu 01 Oct 2026 20:50:00 +0000
ROA not after:            Thu 30 Sep 2027 20:55:00 +0000
asID:                     264741
IP address blocks:        2803:7740:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 08:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d6:ba:01:d0:91:17:9d:53:5a:4d:9c:23:13:45:2f:d9:1c:72:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
        Validity
            Not Before: Oct  1 20:50:00 2026 GMT
            Not After : Sep 30 20:55:00 2027 GMT
        Subject: CN=26E8678B9F384A31579B48B88B3D57FEFED7212E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6f:42:8d:53:f2:0d:60:9a:56:a0:26:cc:34:
                    b7:36:36:77:19:d3:65:05:c1:87:5b:11:84:9a:b7:
                    45:34:b1:18:b9:2d:8f:f0:5b:e0:4b:ad:ea:54:65:
                    f4:5a:fe:88:d6:e2:33:2b:5a:9b:ce:c2:85:05:35:
                    91:4c:f0:c9:18:ad:c3:00:1e:fd:af:e2:11:f7:4f:
                    0e:f8:42:b6:8a:95:d7:c5:b9:12:7f:5d:e6:81:0f:
                    83:fa:e6:30:87:68:5f:0d:31:6c:12:fe:27:20:e0:
                    ec:27:d6:1c:70:8c:93:93:6b:ac:fd:0c:05:67:7d:
                    b1:c9:92:4c:f5:76:a8:53:0c:3b:ae:0a:a0:8c:6d:
                    de:6b:e7:f4:dd:12:b4:92:37:96:a5:ea:6c:87:bc:
                    b8:86:3a:3e:a7:58:61:a0:79:fe:21:7d:e2:b3:9e:
                    80:97:4e:84:f9:3c:ee:d9:1f:31:02:cc:1e:69:df:
                    18:38:8c:92:a3:f8:b2:cd:29:3b:44:4c:3e:82:5d:
                    1d:65:ae:c6:f6:28:ec:a9:38:84:c4:42:81:65:aa:
                    47:8b:c8:4e:68:d2:0c:b3:f8:01:c9:49:92:6e:30:
                    16:6c:dd:51:ee:8f:36:e4:ef:04:b6:da:04:57:b8:
                    0d:89:de:7a:44:2d:a3:68:24:b7:e4:f0:70:ab:c3:
                    a7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E8:67:8B:9F:38:4A:31:57:9B:48:B8:8B:3D:57:FE:FE:D7:21:2E
            X509v3 Authority Key Identifier:
                keyid:E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3830303a3a2f34302d3430203d3e20323634373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7740:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         ca:e1:69:c7:2f:ee:e5:17:f2:e0:e9:1a:17:64:58:2c:d4:cb:
         57:d6:b0:e6:f3:8d:0a:96:ac:77:84:0b:f9:a9:8a:77:88:1b:
         f1:6f:2a:60:8c:c7:88:7b:03:68:ac:a9:20:1b:81:85:53:74:
         8e:78:cf:e8:97:10:e0:31:55:ca:eb:fe:04:59:f5:28:15:71:
         d6:2a:4d:e6:d6:6d:cd:23:9a:b4:4f:7d:01:7c:2a:85:83:60:
         cf:7e:79:a6:d9:c0:8f:74:8b:19:1a:78:3a:7d:ef:2b:9c:91:
         27:5a:1b:ef:fe:81:38:fe:5e:e3:b0:5d:60:76:f5:50:62:b2:
         11:a7:77:3e:1d:af:39:e1:99:32:17:8f:64:45:c4:a6:01:0a:
         ac:2a:3b:58:10:8c:8d:e4:72:71:15:6e:c9:4d:7a:3b:a8:e0:
         ff:e1:44:b3:5d:6a:3b:c0:6c:a7:98:2f:b8:de:f2:0f:d2:15:
         d1:4b:78:39:1f:6b:b6:15:ca:43:60:1c:e7:a0:94:09:1e:94:
         73:9b:53:41:10:76:27:24:76:c8:01:cd:0c:97:72:ac:b1:99:
         03:e1:7d:d8:df:33:04:14:64:46:bf:38:23:68:55:69:9c:02:
         52:68:11:c9:2c:ca:7a:20:5a:e9:24:f3:bb:ed:ff:0f:3a:1c:
         e4:dd:3e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:43:54 2026 by rpki-client