Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3230303a3a2f34302d3430203d3e20323637383233.roa
File:                     323830333a313836303a3230303a3a2f34302d3430203d3e20323637383233.roa (raw, json)
Hash identifier:          sWf3UeQsvXyP3n4VlzKpozbLdZYn9ysACMMFd2gfcaU=
Subject key identifier:   4E:11:C3:8B:4C:C2:A0:FE:0E:6C:22:49:42:70:E5:56:D8:91:7D:00
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       78888D6E56BDE6FA183C93D512B79631A32C3468
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3230303a3a2f34302d3430203d3e20323637383233.roa
Signing time:             Tue 12 Aug 2025 06:30:06 +0000
ROA not before:           Tue 12 Aug 2025 06:25:06 +0000
ROA not after:            Tue 11 Aug 2026 06:30:06 +0000
asID:                     267823
IP address blocks:        2803:1860:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:88:8d:6e:56:bd:e6:fa:18:3c:93:d5:12:b7:96:31:a3:2c:34:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Aug 12 06:25:06 2025 GMT
            Not After : Aug 11 06:30:06 2026 GMT
        Subject: CN=4E11C38B4CC2A0FE0E6C22494270E556D8917D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:67:b8:2c:fd:5a:b7:1f:4d:54:c7:e1:60:9a:
                    f6:94:26:86:a9:eb:59:b5:3f:7f:17:9c:e4:20:b1:
                    87:0d:6e:dc:3b:a1:42:1b:8e:75:7a:15:75:b4:37:
                    c0:69:18:ad:d9:e2:f4:d8:16:2b:ee:4c:06:b4:0f:
                    2e:87:30:a3:91:ea:30:3d:a4:af:ef:9e:f2:e5:dd:
                    69:39:0d:d0:07:28:56:3c:95:02:5b:31:b8:23:f1:
                    b8:79:ca:a5:e3:7a:f0:4f:5f:3d:52:a3:6b:6d:d7:
                    cf:fb:29:79:a3:9d:d8:23:13:2f:14:9e:78:86:20:
                    b8:14:75:b4:0b:64:2a:ef:09:69:ef:a3:b1:07:f4:
                    c2:7d:c7:c0:ea:19:7e:14:91:29:cd:83:c8:ac:88:
                    a7:59:cf:09:18:2f:f7:f5:fb:fc:0d:44:53:cc:2a:
                    c8:32:a6:2c:1d:6e:9d:6d:0f:dc:2c:1b:f7:88:04:
                    52:ed:7a:c2:cf:38:03:7e:98:40:40:51:91:8f:b6:
                    b7:0b:6f:03:ee:68:fd:03:fa:21:dc:5b:54:04:5f:
                    b2:ce:86:fd:e3:72:82:e3:ac:e4:f1:ee:4f:98:3c:
                    3e:a0:80:1d:48:9e:d3:f9:fb:13:83:78:e6:75:e5:
                    12:e9:4c:a7:48:dc:db:37:6b:ad:c4:af:e5:82:43:
                    5b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:11:C3:8B:4C:C2:A0:FE:0E:6C:22:49:42:70:E5:56:D8:91:7D:00
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3230303a3a2f34302d3430203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:f6:d0:5f:02:a6:61:a7:72:ab:0a:25:6f:9a:1f:94:0d:14:
         a0:a1:e7:67:a5:08:c3:ad:95:10:04:30:cc:97:24:72:57:06:
         54:b4:c7:25:cc:13:ed:c9:31:d8:b4:fb:2c:44:1b:94:5a:1f:
         91:2b:21:5f:e1:1a:55:94:b9:87:5f:58:24:01:b5:b1:6b:98:
         f7:b5:c4:cd:e1:12:30:a8:9e:e7:46:06:27:7c:29:b6:47:c9:
         5a:46:0d:1b:18:e8:af:03:08:a4:c0:ab:5d:66:52:b2:3b:34:
         38:26:e5:45:12:5c:6c:e2:4e:6f:cc:89:85:e5:dd:e5:7e:03:
         bd:62:33:29:68:fd:87:2c:91:fe:fd:c0:b4:f2:7c:45:f9:af:
         43:3a:39:28:82:ef:ff:98:a4:8c:55:dd:3a:2a:9f:59:39:02:
         3a:cd:d7:60:ce:e8:b2:e4:ed:ec:fc:90:0c:42:4a:4c:23:de:
         ca:81:e3:73:8b:ef:b9:54:50:c1:ee:a7:d1:48:77:7f:31:62:
         44:64:bd:e5:af:62:44:1e:49:e3:ec:6f:01:c9:db:4c:03:da:
         f6:48:c6:30:8a:16:9f:b9:34:dd:8b:e4:e6:e3:0c:81:8a:6a:
         63:f1:6c:1a:76:d5:02:78:48:77:41:e3:10:14:6d:b1:1a:01:
         47:c7:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:50:54 2025 by rpki-client