Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a653030303a3a2f33362d3336203d3e20323732303736.roa
File:                     323830333a323331303a653030303a3a2f33362d3336203d3e20323732303736.roa (raw, json)
Hash identifier:          yk2jnlhTCAfdoe//MukhMQRUo2MQeZS6Ug8aIJIpeEw=
Subject key identifier:   FC:28:CB:4A:30:D8:16:08:FA:59:BE:76:5E:FD:62:E9:74:6C:1C:5E
Certificate issuer:       /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial:       5E032527DCBA4E23D7BDAD391D0F18B6630C1E26
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a653030303a3a2f33362d3336203d3e20323732303736.roa
Signing time:             Fri 09 Oct 2026 15:39:35 +0000
ROA not before:           Fri 09 Oct 2026 15:34:35 +0000
ROA not after:            Fri 08 Oct 2027 15:39:35 +0000
asID:                     272076
IP address blocks:        2803:2310:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:03:25:27:dc:ba:4e:23:d7:bd:ad:39:1d:0f:18:b6:63:0c:1e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
        Validity
            Not Before: Oct  9 15:34:35 2026 GMT
            Not After : Oct  8 15:39:35 2027 GMT
        Subject: CN=FC28CB4A30D81608FA59BE765EFD62E9746C1C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:bd:c1:c9:0c:63:dd:a1:e7:a6:4f:7b:55:
                    b6:db:d6:f8:0a:8d:8d:1f:49:96:5a:bd:e5:6b:e9:
                    72:24:43:c9:4d:29:1f:c8:0b:8c:b5:ed:f6:6e:3d:
                    37:de:e4:7d:98:6a:98:ad:77:4e:9b:7f:32:bc:b5:
                    8c:f9:45:8b:0f:b3:1c:24:06:34:76:36:c6:e4:45:
                    e8:80:20:79:9f:a9:82:79:22:84:54:80:21:af:48:
                    4e:2c:6f:5d:b8:c2:d0:b8:1a:73:6a:96:5f:6b:49:
                    6c:e5:53:b6:f6:80:a8:b9:92:8f:52:27:03:4a:00:
                    46:c2:63:a7:61:9d:de:01:62:e5:7a:17:da:0d:c9:
                    a3:60:0b:a8:1e:f9:48:b9:e0:10:3a:0c:60:91:49:
                    71:fe:22:a0:4a:fb:3a:f0:99:a3:d0:15:f1:c7:93:
                    df:d1:78:c2:4c:d7:2b:6e:5a:09:d1:fe:a6:3d:60:
                    11:17:6a:dc:e1:5b:b8:dd:82:cd:95:fb:ed:d0:fc:
                    91:5c:f9:8d:42:b0:ba:61:86:59:ee:18:4b:3e:fc:
                    fd:7c:21:d1:ba:bf:e5:44:10:c3:c7:ed:12:f7:a1:
                    c7:c7:80:7c:43:00:f3:28:2a:6b:79:51:b9:e8:a2:
                    c3:50:ec:b2:9e:b7:44:a8:48:d1:0e:5c:5a:89:bc:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:28:CB:4A:30:D8:16:08:FA:59:BE:76:5E:FD:62:E9:74:6C:1C:5E
            X509v3 Authority Key Identifier:
                keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a653030303a3a2f33362d3336203d3e20323732303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2310:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5c:bb:3c:3b:cc:80:cc:87:3c:86:0d:9a:c0:45:ca:27:f9:f0:
         2f:8c:0c:96:69:2c:33:7f:16:93:94:2f:7e:12:47:65:53:89:
         aa:2b:bd:6f:93:fc:1a:de:83:e7:bc:fa:77:d1:7b:75:f5:4b:
         96:cc:f5:4b:7b:25:52:f4:9f:79:af:7c:01:c7:08:f2:e1:f3:
         bc:96:7f:89:31:44:42:ff:a0:b4:52:90:f4:4d:ea:d8:c1:a9:
         da:b6:d7:26:28:e3:2e:43:2b:f5:fc:7e:e4:71:74:82:7b:8b:
         bd:89:bf:dd:5d:2b:53:1c:48:37:b2:65:5e:ac:95:53:92:8a:
         a8:fe:cb:5f:97:e6:21:29:17:40:31:1f:7b:02:5a:ab:21:2f:
         4f:1d:fd:aa:22:25:5f:59:72:3d:65:16:b8:e0:ea:5f:f8:8d:
         c6:6e:21:54:04:99:7c:f3:fb:0a:fb:fb:13:7c:f8:ab:f7:a7:
         74:34:7c:1e:4c:db:a8:5a:8d:ec:34:c1:31:59:e6:99:e3:42:
         61:08:4a:83:67:48:0c:44:ba:7a:4d:50:8b:9e:7d:f8:ec:b2:
         3c:62:fe:ab:39:c4:1c:5d:91:c8:f7:5d:60:59:81:0c:58:25:
         4b:52:41:52:a5:4c:7b:4f:09:9d:98:53:28:e2:49:4f:c7:d6:
         40:2a:31:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 28 20:35:31 2026 by rpki-client