Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a313030303a3a2f34302d3430203d3e20323637383233.roa
File:                     323830333a313836303a313030303a3a2f34302d3430203d3e20323637383233.roa (raw, json)
Hash identifier:          LpaGHdZCVI/IyiwVXkbxZNesg/6IKdUxr6MBlHJCAck=
Subject key identifier:   E2:0C:36:18:AD:B5:DC:3E:2D:4E:10:4F:7E:8F:53:13:66:81:2F:34
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       77EF449E1A3B786E075BDDC2A9B07DB5C7473BA1
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a313030303a3a2f34302d3430203d3e20323637383233.roa
Signing time:             Tue 12 Aug 2025 06:30:01 +0000
ROA not before:           Tue 12 Aug 2025 06:25:01 +0000
ROA not after:            Tue 11 Aug 2026 06:30:01 +0000
asID:                     267823
IP address blocks:        2803:1860:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ef:44:9e:1a:3b:78:6e:07:5b:dd:c2:a9:b0:7d:b5:c7:47:3b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Aug 12 06:25:01 2025 GMT
            Not After : Aug 11 06:30:01 2026 GMT
        Subject: CN=E20C3618ADB5DC3E2D4E104F7E8F531366812F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:91:b8:01:78:f7:35:b6:00:3d:89:3b:d2:21:
                    fd:07:8b:01:2a:21:73:88:ff:00:20:69:a5:63:8d:
                    f7:01:b0:c4:15:95:15:f8:c4:98:0b:98:14:d0:f5:
                    7c:61:11:2f:7b:6a:8d:f3:99:9b:78:88:d8:a9:36:
                    6f:b6:d0:f8:9d:b4:8d:d1:c6:eb:21:fc:32:38:43:
                    fc:11:3c:3f:00:09:18:21:55:47:ad:f5:d7:1d:35:
                    c6:10:ef:68:19:60:26:91:fb:58:57:c5:ab:99:f5:
                    4e:78:69:72:e3:53:41:31:28:d8:ce:97:dc:52:33:
                    9b:e7:89:3b:eb:ce:76:5f:6b:ef:98:37:8c:6e:f3:
                    77:ed:e6:9e:ce:ee:75:9d:fc:c1:70:12:0b:61:f8:
                    f3:aa:08:e0:09:22:be:02:a0:97:78:64:f7:33:d3:
                    99:4c:ba:cc:9c:73:86:6e:58:c0:9a:aa:d6:06:5d:
                    e3:56:07:f2:21:c0:be:e8:cb:b9:76:19:9d:ea:25:
                    34:92:4c:b8:a3:d1:58:2d:30:fa:88:66:6c:e8:b9:
                    cf:c2:ad:9e:e4:ed:50:d3:e5:6f:fd:7f:b4:0d:3c:
                    41:4f:da:6c:02:9b:c5:34:9c:9c:28:2b:5f:e8:e9:
                    b5:31:4e:d7:75:27:c2:8d:fe:d0:f4:5f:f6:77:65:
                    ea:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0C:36:18:AD:B5:DC:3E:2D:4E:10:4F:7E:8F:53:13:66:81:2F:34
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a313030303a3a2f34302d3430203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:53:02:da:93:8e:9e:d0:57:15:3f:66:1f:c7:7d:ff:d8:e7:
         81:9a:63:30:2c:d2:b8:3a:d7:5e:b4:6a:75:05:c3:fa:cb:1e:
         20:89:c3:e5:6e:79:91:96:27:1f:f2:dc:7a:5e:52:15:69:54:
         2e:60:e0:7b:cd:5e:9a:81:58:3a:aa:fd:9e:fb:fe:9d:f1:54:
         5a:49:5a:79:0e:e1:bf:97:c2:64:71:49:7a:96:3c:83:5c:0a:
         cd:cf:bd:11:48:a2:17:6f:9c:d3:ff:e8:db:39:c9:11:47:15:
         67:69:71:d9:1a:6a:05:54:b0:02:57:98:83:e1:a6:c5:a9:68:
         aa:dd:ad:a4:2a:12:75:5c:1e:2a:4b:80:02:31:4b:94:64:cc:
         0a:b8:79:90:d2:22:89:d2:d8:98:6d:9a:cd:38:f4:69:1b:c6:
         18:79:d1:26:ed:fe:01:11:6f:b9:76:ae:31:af:2f:03:fb:66:
         27:e5:1e:65:bd:01:22:d5:d4:83:59:74:8f:34:b5:ac:9e:b8:
         c0:c4:e7:da:70:bf:fa:c2:f2:91:7b:b9:28:df:49:3d:62:d9:
         b6:62:a4:57:2e:48:50:97:e7:66:b9:1c:f8:b8:ea:ca:53:a1:
         11:f9:75:b9:0c:65:cc:bc:e6:41:0b:60:da:11:51:01:b1:1e:
         5b:ae:b3:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:45:54 2025 by rpki-client