Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a32303a3a2f34342d3434203d3e20323637393139.roa
File:                     323830333a656536303a32303a3a2f34342d3434203d3e20323637393139.roa (raw, json)
Hash identifier:          /jf9KixBKpw64nshDRXK0orDlcFt+qbGaq1MYB1Xhu4=
Subject key identifier:   CC:EE:18:FE:B4:88:EA:AF:5D:92:64:66:9E:D7:16:E4:FA:BB:40:D4
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       2C6C7E5E5D57B9C9E9B1397E1C0BE635872AD90C
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a32303a3a2f34342d3434203d3e20323637393139.roa
Signing time:             Thu 23 Jul 2026 13:27:00 +0000
ROA not before:           Thu 23 Jul 2026 13:22:00 +0000
ROA not after:            Thu 22 Jul 2027 13:27:00 +0000
asID:                     267919
IP address blocks:        2803:ee60:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6c:7e:5e:5d:57:b9:c9:e9:b1:39:7e:1c:0b:e6:35:87:2a:d9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Jul 23 13:22:00 2026 GMT
            Not After : Jul 22 13:27:00 2027 GMT
        Subject: CN=CCEE18FEB488EAAF5D9264669ED716E4FABB40D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:87:78:ed:e7:40:f0:ae:56:4e:f6:9e:e3:77:
                    91:c7:09:cd:cd:93:6b:be:14:19:ff:d6:42:b1:2e:
                    59:44:95:37:5c:9e:de:5f:fa:01:bd:1b:97:e2:0d:
                    1c:88:4f:ee:e5:81:04:37:7b:ff:f8:4f:c9:dd:44:
                    4a:36:d6:8c:8f:d0:f8:40:7b:b5:33:55:26:39:26:
                    be:f4:2d:d8:03:1b:e6:bc:5c:b2:74:f8:62:47:e7:
                    84:ab:9b:04:aa:1c:76:76:f7:7d:f3:b6:5e:68:45:
                    3e:0a:2b:6e:a2:02:0a:de:b1:b0:82:4d:26:18:ac:
                    66:cf:1b:55:57:f9:26:d3:39:97:6c:82:6b:61:4c:
                    bc:49:4c:3f:b6:12:87:87:eb:31:e0:96:b6:9a:4e:
                    05:55:69:d9:cf:c6:f9:96:4e:9b:48:da:bb:14:8f:
                    c7:f7:51:7c:e9:b5:27:d3:6d:58:29:77:3d:38:b7:
                    cf:a6:91:00:e5:f7:7b:f6:57:f4:6a:52:82:7f:80:
                    48:f6:e8:d5:c4:65:e4:34:2a:04:8a:81:7f:ae:26:
                    43:a3:5b:b1:5e:a6:ba:73:a9:15:c7:56:23:f8:45:
                    ca:9d:b6:69:b2:bb:06:d8:78:50:54:b1:dd:25:29:
                    1d:99:7d:10:1a:ba:c4:50:b5:de:1f:f7:ed:83:94:
                    ec:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EE:18:FE:B4:88:EA:AF:5D:92:64:66:9E:D7:16:E4:FA:BB:40:D4
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a32303a3a2f34342d3434203d3e20323637393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:4f:a0:f7:9c:89:40:d1:1c:c9:1e:0e:aa:c8:49:2b:2d:99:
         28:b9:6c:bd:a7:e0:fc:a9:9a:a1:cb:fb:fc:e9:77:b3:a6:00:
         ba:8e:6b:6b:2c:f2:2e:9e:c8:0b:ad:fd:7e:3d:f0:74:a3:f4:
         6f:4c:50:27:b0:de:d6:c4:1c:fa:51:8b:8d:34:dd:86:3a:42:
         68:11:5c:ba:62:88:96:17:30:56:dc:4f:c8:4a:72:28:66:0b:
         d8:78:29:b6:2c:7a:ed:c2:87:45:6d:47:68:fa:aa:ce:79:81:
         cb:2d:2f:d3:92:bf:17:8e:04:3b:68:cb:76:eb:01:78:99:d7:
         28:8c:24:40:14:2c:62:c8:f5:7b:f6:18:43:10:51:f6:b8:66:
         ca:6d:0b:6a:ed:be:63:62:cd:19:1e:4e:2c:d3:79:99:20:eb:
         0c:bf:30:2c:0e:37:08:14:61:2f:04:f1:ee:1b:37:77:e4:d0:
         7b:94:75:10:15:70:4e:df:e5:df:d5:8b:fb:ba:cc:2e:5c:8a:
         c1:1a:86:43:b8:23:40:df:cf:ef:e2:e5:37:d1:dc:45:c2:d1:
         9e:a6:68:83:fe:97:f9:8b:68:c8:34:da:cf:07:13:6b:6f:ad:
         76:71:02:dd:3a:94:a4:bf:3e:39:9d:57:a1:10:71:87:99:0f:
         76:e2:61:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:32:09 2026 by rpki-client