Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a313230303a3a2f34302d3430203d3e20323637383233.roa
File:                     323830333a313836303a313230303a3a2f34302d3430203d3e20323637383233.roa (raw, json)
Hash identifier:          RyzvLD0SH99enaGZ/bUSbMWt+4rL+fi8ROiZwMpYdD8=
Subject key identifier:   1D:67:B9:C7:66:7B:0A:72:13:7D:2E:94:5D:2E:3E:89:6B:89:ED:C3
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       3CA8C529157BFF97C99B47730703A89E69712F69
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a313230303a3a2f34302d3430203d3e20323637383233.roa
Signing time:             Tue 12 Aug 2025 06:30:05 +0000
ROA not before:           Tue 12 Aug 2025 06:25:05 +0000
ROA not after:            Tue 11 Aug 2026 06:30:05 +0000
asID:                     267823
IP address blocks:        2803:1860:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a8:c5:29:15:7b:ff:97:c9:9b:47:73:07:03:a8:9e:69:71:2f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Aug 12 06:25:05 2025 GMT
            Not After : Aug 11 06:30:05 2026 GMT
        Subject: CN=1D67B9C7667B0A72137D2E945D2E3E896B89EDC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:47:bb:3d:0f:62:dc:29:d5:84:69:62:d0:
                    9f:8a:96:ae:e2:74:38:b5:1f:cb:3f:2e:a6:2c:c3:
                    c9:94:8c:6c:e1:fd:43:35:94:6d:03:d0:14:70:df:
                    71:2e:dd:79:f9:23:12:5d:c1:81:48:69:3d:d0:4d:
                    c2:3e:dc:89:fd:e2:7b:8f:aa:04:2b:bf:25:63:96:
                    38:fb:39:9d:fe:93:b5:d5:46:3d:29:90:cf:5f:22:
                    fd:81:62:f3:15:1f:55:bb:3b:39:61:a0:52:64:aa:
                    bf:15:80:34:b9:7f:b7:1d:a0:9c:9a:77:92:05:23:
                    c1:00:24:52:b4:c1:c5:af:7c:1b:ca:e7:ff:93:6e:
                    01:72:2c:b1:a5:cf:18:36:d6:1f:62:76:e6:ae:6a:
                    13:9f:c5:e6:fd:b0:f7:ac:94:22:e9:ec:81:b0:da:
                    86:51:5c:fb:96:34:18:0d:19:a4:ed:2f:f0:c5:78:
                    0b:b6:4d:e7:98:b9:a7:35:a6:c6:18:3b:15:5e:f6:
                    f1:63:19:0b:60:e6:05:87:31:f6:55:b8:68:c0:2e:
                    11:99:20:81:6d:97:c3:a8:8f:92:b0:be:60:03:49:
                    c9:e4:7e:61:ca:5f:51:df:df:e5:95:72:12:a5:2a:
                    bf:7c:d8:6a:b0:ad:e1:74:45:7d:58:bb:46:cd:03:
                    19:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:67:B9:C7:66:7B:0A:72:13:7D:2E:94:5D:2E:3E:89:6B:89:ED:C3
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a313230303a3a2f34302d3430203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:a9:02:d6:0d:bf:c9:de:ca:57:c2:d5:8c:07:f6:2f:a4:13:
         7c:d3:b1:16:a6:89:76:c9:78:0d:f5:06:c7:61:fc:f5:a6:31:
         7a:fb:f4:0e:01:5c:61:e0:15:77:c2:0f:1a:fa:fc:49:f3:30:
         5b:ed:05:01:1a:22:cc:c1:04:a3:3a:b1:6f:cf:8c:78:46:83:
         75:6e:37:02:d1:ea:59:90:31:24:5c:4c:ad:a5:12:71:8a:03:
         84:41:4e:35:73:be:8b:1f:0d:e8:ca:24:f9:4a:3d:72:bb:82:
         50:72:58:45:9f:2d:e2:4b:92:cc:e1:a3:6c:a9:45:b3:e2:a9:
         66:c3:fe:b1:80:8c:d2:6b:8f:f7:4e:7a:b4:f7:42:81:9f:f8:
         1d:70:2b:3b:bf:ba:3a:ed:78:37:c1:4a:be:ee:61:09:dd:b1:
         d8:76:32:f1:3f:ed:20:f4:b0:05:ea:9f:78:b1:35:0e:ea:c8:
         ca:c7:9d:83:c5:e9:61:d4:7f:e7:df:ef:f4:33:08:19:fe:e3:
         9e:a4:c4:91:09:24:3a:8e:d8:33:a3:e8:11:aa:ce:ba:ae:53:
         41:2b:1c:79:f1:75:59:6e:e3:94:11:ab:73:4e:14:a8:56:07:
         02:e5:55:66:99:8a:6d:9c:25:3d:40:27:13:d7:b6:38:9e:6a:
         6a:55:61:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:39:59 2025 by rpki-client