Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030333a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323030333a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          xxtvXO+9X1OcYjD9AXbNKSHQVfbq54zzSCXqt+DV5FE=
Subject key identifier:   63:6C:45:76:36:91:F6:EE:9B:01:DB:3E:AB:00:B1:77:6A:94:29:40
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       3CD905E4CC47C0DDFDE578E44742A301BA59518B
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030333a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Tue 03 Mar 2026 16:25:07 +0000
ROA not before:           Tue 03 Mar 2026 16:20:07 +0000
ROA not after:            Tue 02 Mar 2027 16:25:07 +0000
asID:                     267823
IP address blocks:        2803:1860:2003::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d9:05:e4:cc:47:c0:dd:fd:e5:78:e4:47:42:a3:01:ba:59:51:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  3 16:20:07 2026 GMT
            Not After : Mar  2 16:25:07 2027 GMT
        Subject: CN=636C45763691F6EE9B01DB3EAB00B1776A942940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:4c:1e:10:21:ad:01:91:32:a9:0b:1d:6b:
                    eb:0f:dd:eb:b9:ea:7e:8e:59:d4:44:33:ff:00:29:
                    e6:5a:71:d7:fc:e2:fa:7d:f4:5c:50:27:66:e1:a0:
                    c2:80:32:ab:4c:ee:d9:f4:0c:7f:47:e7:c4:ba:f8:
                    0c:3d:00:25:cb:46:4b:73:eb:eb:c4:48:40:8b:b4:
                    81:ca:1c:12:e1:20:4c:94:43:d6:b1:5e:cb:0e:c7:
                    c4:fc:a5:d6:2a:f6:92:f5:18:d2:04:6d:23:b3:37:
                    53:f0:82:6b:f2:5e:d9:da:e5:3a:ed:f4:54:26:ff:
                    ff:5f:74:42:f1:ff:e3:ff:46:85:b2:cb:60:18:51:
                    4b:de:40:2c:12:d3:0b:58:9c:c8:60:93:2e:5e:8e:
                    d6:64:05:08:09:67:9c:bf:a1:ab:bd:1b:07:2d:85:
                    c8:81:7a:0d:e0:30:bc:e1:6c:9f:e6:78:87:0e:f8:
                    22:fa:7a:4c:b5:60:e8:0c:29:1a:65:a4:10:43:c0:
                    d4:b8:3a:70:46:ce:57:08:99:76:c0:6f:e2:60:22:
                    5c:3c:2f:2d:09:ed:ac:d9:7a:b6:7a:fc:91:0c:e8:
                    51:b5:7b:6e:97:ee:ce:fc:aa:99:1d:8d:fd:a0:c0:
                    ec:49:ff:33:c4:bf:43:58:03:fa:7b:b8:6f:ff:83:
                    d4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6C:45:76:36:91:F6:EE:9B:01:DB:3E:AB:00:B1:77:6A:94:29:40
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030333a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2003::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:64:b4:21:63:ab:ef:3f:25:f2:0d:35:c8:c2:90:50:15:54:
         31:d3:59:53:de:14:6c:1d:f6:6d:9d:d0:3e:8d:e3:af:69:16:
         16:d6:dd:14:2a:ce:1e:b5:ab:fc:b3:34:56:6c:53:77:9b:9f:
         ef:c0:71:77:94:91:46:11:42:6b:56:d7:ba:31:7a:e8:13:dd:
         1f:a9:24:54:ed:82:15:11:07:ff:c8:cb:b4:63:71:96:48:c8:
         15:9a:e4:72:ee:b5:02:f2:33:4c:07:26:30:d8:c4:8f:3d:d4:
         69:68:0b:21:6c:93:64:73:41:53:81:12:87:0a:63:da:2a:43:
         44:a3:08:6a:82:e2:a9:f1:d7:65:88:d5:83:54:f5:7f:76:6c:
         ed:8c:6a:dd:e8:68:0d:e6:a2:78:08:f5:1c:6f:76:b8:5a:3f:
         05:78:63:79:2b:ba:9c:9a:3b:0b:05:12:ad:b6:18:30:c8:4a:
         ce:2b:f5:bc:36:88:95:29:d7:25:f1:7c:a4:54:dc:28:36:91:
         a3:8b:b5:6e:bd:87:54:2d:4e:a4:83:dd:83:9a:f5:9a:61:70:
         09:52:32:b0:11:00:09:ff:e1:3c:06:03:80:59:f3:b1:42:2a:
         30:23:e6:4c:c0:6b:a0:c7:2b:9a:14:a6:11:14:dc:1e:a2:85:
         13:be:9b:4f
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUPNkF5MxHwN395XjkR0KjAbpZUYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB
QzREQzlFOTAeFw0yNjAzMDMxNjIwMDdaFw0yNzAzMDIxNjI1MDdaMDMxMTAvBgNV
BAMTKDYzNkM0NTc2MzY5MUY2RUU5QjAxREIzRUFCMDBCMTc3NkE5NDI5NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnyEweECGtAZEyqQsda+sP3eu5
6n6OWdREM/8AKeZacdf84vp99FxQJ2bhoMKAMqtM7tn0DH9H58S6+Aw9ACXLRktz
6+vESECLtIHKHBLhIEyUQ9axXssOx8T8pdYq9pL1GNIEbSOzN1PwgmvyXtna5Trt
9FQm//9fdELx/+P/RoWyy2AYUUveQCwS0wtYnMhgky5ejtZkBQgJZ5y/oau9Gwct
hciBeg3gMLzhbJ/meIcO+CL6eky1YOgMKRplpBBDwNS4OnBGzlcImXbAb+JgIlw8
Ly0J7azZerZ6/JEM6FG1e26X7s78qpkdjf2gwOxJ/zPEv0NYA/p7uG//g9S5AgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUY2xFdjaR9u6bAds+qwCxd2qUKUAwHwYDVR0j
BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5
ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2
MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC
NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy
Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz
MDMwMzMzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoAxhgIAMwDQYJKoZIhvcNAQELBQADggEBADpktCFjq+8/JfINNcjCkFAV
VDHTWVPeFGwd9m2d0D6N469pFhbW3RQqzh61q/yzNFZsU3ebn+/AcXeUkUYRQmtW
17oxeugT3R+pJFTtghURB//Iy7RjcZZIyBWa5HLutQLyM0wHJjDYxI891GloCyFs
k2RzQVOBEocKY9oqQ0SjCGqC4qnx12WI1YNU9X92bO2Mat3oaA3mongI9Rxvdrha
PwV4Y3krupyaOwsFEq22GDDISs4r9bw2iJUp1yXxfKRU3Cg2kaOLtW69h1QtTqSD
3YOa9ZphcAlSMrARAAn/4TwGA4BZ87FCKjAj5kzAa6DHK5oUphEU3B6ihRO+m08=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:42 2026 by rpki-client