Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a3a2f33362d3336203d3e20323637383332.roa
File:                     323830333a323331303a3a2f33362d3336203d3e20323637383332.roa (raw, json)
Hash identifier:          df3vUF+bYQ9yDMJjJkbo5HAC6wdwkOFLIxQsquZbvkY=
Subject key identifier:   CA:F1:AC:5C:C5:7F:3C:1D:AD:CE:0C:42:AF:A6:D3:1E:60:28:97:07
Certificate issuer:       /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial:       16791A48A87782DB93AC7D7676E7013253743601
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a3a2f33362d3336203d3e20323637383332.roa
Signing time:             Fri 09 Oct 2026 15:39:39 +0000
ROA not before:           Fri 09 Oct 2026 15:34:39 +0000
ROA not after:            Fri 08 Oct 2027 15:39:39 +0000
asID:                     267832
IP address blocks:        2803:2310::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:79:1a:48:a8:77:82:db:93:ac:7d:76:76:e7:01:32:53:74:36:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
        Validity
            Not Before: Oct  9 15:34:39 2026 GMT
            Not After : Oct  8 15:39:39 2027 GMT
        Subject: CN=CAF1AC5CC57F3C1DADCE0C42AFA6D31E60289707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:36:65:2d:2f:c7:64:6d:20:61:43:04:ca:
                    fd:4f:ed:30:30:ce:c0:59:d1:84:0e:2a:3a:c6:46:
                    01:c1:2c:41:f6:50:85:ba:29:95:04:8c:54:65:24:
                    83:9d:71:b2:87:55:1e:33:37:eb:6b:38:76:cc:8f:
                    1a:ac:ee:b5:12:43:a5:10:4a:55:a7:bb:aa:14:e9:
                    23:a1:2e:7d:38:06:7e:5f:1f:9f:1d:e7:92:4b:e2:
                    55:b0:76:d0:3c:06:7a:00:13:ee:6b:0d:be:22:fa:
                    9a:a4:08:02:6f:c0:77:44:44:0b:77:b0:87:70:fa:
                    b2:a1:3d:c8:32:e9:49:99:82:13:89:44:75:ef:8f:
                    2b:3c:ec:9f:5f:e8:be:d5:e1:1e:66:94:05:ce:0e:
                    df:7b:9f:5d:c3:ad:07:b8:e7:cc:01:2b:8e:3f:ff:
                    9d:a4:d7:e7:2b:77:59:d8:15:dd:b0:75:67:53:5c:
                    a9:23:b9:87:3e:d5:b2:cc:57:29:5c:14:42:3c:82:
                    06:22:5a:bb:0e:c8:d5:a9:79:90:f3:30:be:99:e8:
                    80:03:33:4e:f4:31:12:65:db:bc:20:07:2e:3c:41:
                    21:ef:0d:5f:66:60:b8:31:00:95:7b:3e:3e:ad:6e:
                    40:5b:93:98:50:8d:70:3b:79:fb:2c:52:ed:7b:bb:
                    a4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F1:AC:5C:C5:7F:3C:1D:AD:CE:0C:42:AF:A6:D3:1E:60:28:97:07
            X509v3 Authority Key Identifier:
                keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a3a2f33362d3336203d3e20323637383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2310::/36

    Signature Algorithm: sha256WithRSAEncryption
         91:85:66:a0:fb:c9:47:18:b7:da:46:f2:0d:ff:28:59:32:3f:
         21:00:22:31:a6:6a:10:26:05:58:0e:90:70:37:c0:1f:e9:40:
         55:ca:2d:fb:e3:0d:46:41:ef:b4:3d:a2:ce:8d:c3:80:8d:1a:
         63:b3:56:3f:9d:17:af:c1:5f:9b:41:4a:98:a3:e7:36:ec:b4:
         bb:3f:9b:3c:a1:7b:c1:58:fb:31:8d:87:78:8c:00:0b:a9:da:
         30:f4:e3:a5:66:0e:93:66:c1:2c:be:12:0f:26:01:62:ea:eb:
         a8:49:14:6f:a5:ab:43:41:8e:42:ba:48:bf:67:04:75:fe:f8:
         6f:06:ac:09:9d:7b:be:46:d2:4b:32:d6:cf:9d:87:e7:b9:ab:
         05:97:9d:9f:00:dd:3d:83:2e:6f:5d:10:b0:5f:fa:5d:67:1c:
         0c:60:51:ed:b0:f7:68:b9:44:1f:76:a8:53:78:80:e0:8d:e7:
         39:90:50:8d:97:af:b5:3a:71:fa:66:bc:a5:a0:bd:2a:cb:73:
         9e:ae:ec:45:95:60:a6:ed:34:d8:73:49:69:bf:a8:6a:a0:0a:
         d2:9c:de:53:2b:57:9b:2d:58:15:24:c0:94:3d:bc:51:2e:bd:
         2c:3e:ec:a9:db:02:9b:51:e0:dd:7f:aa:6e:31:ef:d2:cd:24:
         85:ae:5c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:12:13 2026 by rpki-client