Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030363a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323030363a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          4tLkdPLJgXRnxaUO2b9EjNsTmaZOCpEO/bSZkpudAI8=
Subject key identifier:   0D:B6:19:EA:76:A6:75:8E:76:60:A0:5F:7D:1A:A9:39:66:58:AA:A3
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       3042007C2939BBEBC5D6522B1A2CCCEDD06CF9E8
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030363a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Wed 04 Mar 2026 15:20:00 +0000
ROA not before:           Wed 04 Mar 2026 15:15:00 +0000
ROA not after:            Wed 03 Mar 2027 15:20:00 +0000
asID:                     267823
IP address blocks:        2803:1860:2006::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:42:00:7c:29:39:bb:eb:c5:d6:52:2b:1a:2c:cc:ed:d0:6c:f9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  4 15:15:00 2026 GMT
            Not After : Mar  3 15:20:00 2027 GMT
        Subject: CN=0DB619EA76A6758E7660A05F7D1AA9396658AAA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:80:13:8e:86:83:c1:c0:a6:2c:e0:41:1c:54:
                    0e:5b:f0:02:7f:c3:97:10:af:18:fb:fa:bd:58:ca:
                    eb:86:70:51:d5:60:85:0f:67:ff:8e:c2:c3:55:81:
                    b4:85:12:96:52:73:83:e3:62:28:73:86:a8:26:24:
                    06:f2:a3:f2:4e:ab:b6:ad:2a:ea:cd:15:ff:3d:44:
                    53:66:f1:7d:f2:56:18:99:a4:5c:56:8a:c0:14:46:
                    08:80:0c:13:a8:1b:38:83:ba:d7:9f:04:ac:4c:89:
                    e7:d9:78:f7:0b:ea:73:04:af:30:dd:b4:6d:b9:f5:
                    09:ba:65:ef:dd:e3:44:88:39:f1:ab:9f:e8:38:cc:
                    f0:de:dc:6f:4f:78:19:8e:fc:e4:10:e9:8e:28:46:
                    d0:5d:9c:d9:fa:8e:49:ad:e9:f2:5d:23:66:41:da:
                    cc:3e:ae:ca:24:00:50:20:ac:c8:11:53:dc:34:56:
                    e3:98:69:b4:85:aa:6d:67:3f:7a:10:b9:e9:e4:2d:
                    4e:bd:66:a2:60:34:a0:55:1e:6f:1e:29:f8:2b:5b:
                    0b:f3:29:29:f8:36:bc:fc:28:b3:51:92:94:1c:71:
                    e0:a3:89:1b:87:dc:f7:a7:18:3e:c6:44:6a:6c:6f:
                    18:36:49:4e:8f:5d:a0:45:dc:45:7c:cf:5c:b4:92:
                    55:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B6:19:EA:76:A6:75:8E:76:60:A0:5F:7D:1A:A9:39:66:58:AA:A3
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030363a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2006::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:3c:6d:c8:78:a0:a8:7c:9a:d5:42:07:d0:d3:8c:04:86:03:
         e5:d6:ad:70:30:53:8b:79:ee:56:30:94:d1:75:9a:f7:16:4a:
         a0:a7:66:17:35:ca:43:85:98:cc:de:00:be:3a:d9:e2:9a:50:
         fd:85:6a:3b:b1:0f:45:cc:30:54:33:e5:93:87:05:32:9d:5b:
         02:37:6c:07:c0:39:2a:cc:4a:9c:95:1a:14:8c:a8:36:14:55:
         5d:89:a4:6c:b0:2a:c6:53:c1:13:b0:56:7c:3b:68:04:b1:e8:
         78:fc:b8:ae:1b:65:a3:02:2a:09:19:3c:f4:3f:8e:c2:10:d2:
         2c:10:c1:c9:2a:17:cb:a3:56:bf:71:a6:c1:3e:57:c5:20:3f:
         a9:61:9f:75:4e:38:66:b9:f5:37:22:c4:35:7f:28:a7:19:08:
         1f:82:39:e0:8f:71:ec:55:80:83:d5:bc:98:0f:63:5c:ca:4c:
         2b:40:a6:b1:9e:29:43:57:44:bb:40:e3:e8:42:80:11:a1:14:
         d0:02:f2:aa:ae:0b:93:d5:d8:c8:5e:42:19:a2:73:26:5a:de:
         99:34:4b:19:8d:34:1e:36:e6:3f:af:a2:da:01:64:ff:26:e1:
         7a:52:7f:3b:05:df:b7:a8:d4:48:94:0a:dd:63:b3:ad:ca:53:
         2c:f7:6c:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:22:51 2026 by rpki-client