Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030343a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323030343a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          VYnKiFBSKaqgMlvvnv07vEHMNcvyRdkGj2Q8ba6beAk=
Subject key identifier:   B4:0E:E5:8D:15:83:73:F6:F3:E5:2B:A3:21:81:F6:6C:E2:F1:DB:84
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       5F16CF075ACA2C99FB1F8ABF1039E521A342CF30
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030343a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Tue 03 Mar 2026 16:25:01 +0000
ROA not before:           Tue 03 Mar 2026 16:20:01 +0000
ROA not after:            Tue 02 Mar 2027 16:25:01 +0000
asID:                     267823
IP address blocks:        2803:1860:2004::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:16:cf:07:5a:ca:2c:99:fb:1f:8a:bf:10:39:e5:21:a3:42:cf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  3 16:20:01 2026 GMT
            Not After : Mar  2 16:25:01 2027 GMT
        Subject: CN=B40EE58D158373F6F3E52BA32181F66CE2F1DB84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:77:f9:38:8d:4e:c6:1b:55:40:35:93:0e:0a:
                    a7:ef:4f:8c:0a:fc:b0:7e:78:33:2b:59:9e:8d:6b:
                    b0:89:11:7b:80:f4:58:d8:6d:1a:9e:b0:b2:89:26:
                    c1:ef:36:ae:8a:09:d5:53:99:ec:22:c7:dc:0a:a0:
                    06:a6:a9:df:68:bc:fa:ea:24:96:56:51:5a:ba:47:
                    56:cf:3a:72:c1:06:ca:19:cc:87:19:81:34:b1:4a:
                    ae:5d:a0:94:85:b5:76:54:9c:ef:03:50:e7:31:71:
                    d4:33:46:48:c8:3a:30:d0:fa:10:6d:0a:f3:be:57:
                    35:1f:56:43:0f:66:a7:62:12:6f:bf:4c:76:e5:58:
                    8e:d8:7e:20:21:33:10:54:6a:4a:6c:a3:a6:86:e0:
                    27:cf:b3:19:e8:45:c1:da:83:b6:dc:da:31:aa:08:
                    40:f1:24:62:fc:47:3c:dc:c1:0c:17:4e:1e:fc:35:
                    bc:70:50:f4:71:cc:84:bd:66:2d:c3:1f:38:62:54:
                    f1:eb:67:f1:16:51:c7:0e:58:3c:de:e3:96:ee:f7:
                    8f:5b:5b:e3:af:d7:c6:cb:72:75:6e:2f:33:63:f2:
                    7b:f1:86:f3:9c:03:cd:9c:d6:fa:39:47:6b:22:e7:
                    a4:28:75:31:f5:5d:61:96:ac:1d:b9:fd:ba:72:5f:
                    5f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0E:E5:8D:15:83:73:F6:F3:E5:2B:A3:21:81:F6:6C:E2:F1:DB:84
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030343a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2004::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:fd:ab:73:d5:14:0c:d0:72:9c:cb:ec:6d:30:a5:3a:51:3f:
         4d:32:0a:9d:af:32:3e:1a:6b:b3:d0:f9:e9:9a:82:02:76:c1:
         85:a9:fa:8e:da:62:f4:2d:5a:0c:aa:4c:47:8a:0d:a1:09:53:
         7f:e3:e3:10:b0:d4:17:00:e5:9f:3e:03:00:c8:5a:f5:86:b3:
         b3:ba:43:f1:5e:b3:cc:2f:86:85:2d:04:40:6c:86:d5:ba:01:
         17:f5:8b:f3:56:32:28:20:8b:e1:2c:15:dd:b7:40:1f:fd:5a:
         e3:01:d1:01:60:c6:2d:f9:48:47:9f:e6:ba:7e:0c:4b:5e:83:
         d7:ac:da:bd:77:f1:47:d7:9d:91:d4:5b:27:4b:0c:46:bc:1d:
         67:55:be:55:16:c6:50:b9:55:3d:a0:53:43:7d:7b:a0:43:50:
         55:1c:e4:43:7a:5d:b8:e5:d5:e5:66:63:46:d0:c0:ea:ae:99:
         48:09:26:fc:49:31:65:5c:b1:cb:49:8b:dd:01:a9:0b:02:b3:
         05:7b:7f:d3:4b:c0:31:c4:4e:e4:a6:a6:21:71:c2:8d:1a:c4:
         ab:96:84:61:0f:82:80:45:b4:0b:2a:cd:10:0a:42:8d:79:67:
         54:63:ac:17:b5:24:d0:a6:a1:a8:22:28:c6:de:a4:e7:89:5a:
         d0:97:cc:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:22:53 2026 by rpki-client