Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030613a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323030613a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          hUjCa1nbZyvn1BJvm+pgUASFVVa9ndptcIShpPv3NSI=
Subject key identifier:   16:69:8A:68:24:47:A1:71:A9:7F:27:4A:D5:15:2C:3B:F7:39:BC:65
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       40B8AD66F18F91A50F43E508E4831EE2B0987217
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030613a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Wed 04 Mar 2026 15:20:01 +0000
ROA not before:           Wed 04 Mar 2026 15:15:01 +0000
ROA not after:            Wed 03 Mar 2027 15:20:01 +0000
asID:                     267823
IP address blocks:        2803:1860:200a::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b8:ad:66:f1:8f:91:a5:0f:43:e5:08:e4:83:1e:e2:b0:98:72:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  4 15:15:01 2026 GMT
            Not After : Mar  3 15:20:01 2027 GMT
        Subject: CN=16698A682447A171A97F274AD5152C3BF739BC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:86:4d:d3:a7:ba:c1:77:c7:02:6c:91:bd:
                    f2:06:c1:55:73:a3:01:13:b6:76:49:3a:3b:e0:9b:
                    dd:cf:17:cf:62:cd:c7:f6:9e:ed:f1:5a:26:f6:53:
                    98:b6:84:71:30:74:7d:27:4a:41:4d:7d:93:b9:da:
                    38:f2:69:f1:08:01:ba:03:e6:5b:d4:dd:69:66:11:
                    d3:84:09:b0:59:27:3d:be:f8:69:26:5b:ae:d2:26:
                    1d:a3:dc:26:5c:d2:03:13:96:c5:1b:39:b0:28:bc:
                    12:cf:b7:b5:2f:84:fd:96:0e:36:81:9a:4e:c3:28:
                    50:0b:09:77:e5:40:2d:d4:79:92:71:03:1c:92:2e:
                    91:23:ae:f1:cc:f2:52:4c:3f:76:a8:ac:b4:73:af:
                    6d:39:bc:af:74:ac:08:d5:81:c3:ae:51:bf:93:1f:
                    da:7f:a1:6c:ed:a7:3f:65:de:16:89:d0:6d:50:2a:
                    da:fd:21:0e:b6:cc:db:52:8e:be:79:0f:a4:15:e1:
                    9f:38:ba:7e:66:b2:dc:a8:24:21:fb:e6:30:e8:01:
                    b7:f9:23:a3:a9:67:e8:1c:d2:e2:2a:25:97:d6:73:
                    9e:e4:af:64:61:93:71:90:3d:92:13:3e:0f:fc:69:
                    6c:62:e4:6d:3c:cd:2e:8c:b7:a0:76:66:fe:7c:4c:
                    38:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:69:8A:68:24:47:A1:71:A9:7F:27:4A:D5:15:2C:3B:F7:39:BC:65
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030613a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:200a::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:a1:c4:55:dc:d0:64:ce:5a:16:50:fc:40:d3:b9:ed:6d:21:
         c5:15:97:86:40:e4:d5:d9:11:f2:7d:82:16:44:60:64:22:2d:
         02:ea:84:1d:56:18:4b:24:6f:fc:c5:71:25:1d:3b:f3:c2:f9:
         94:f3:64:0b:41:fc:2e:bf:63:01:7b:cc:df:a7:3b:a8:7c:11:
         3a:fb:f7:eb:d1:13:a6:04:c8:8a:b5:52:b0:f8:8c:81:30:ef:
         06:90:80:cd:02:7e:5a:ef:06:61:bc:2f:40:a5:99:3c:78:48:
         11:7f:eb:0e:6c:b3:a3:35:80:89:8b:2e:c1:79:50:2c:77:cf:
         cc:79:59:59:c4:ad:5e:6a:a0:c6:3d:83:4f:b6:67:10:16:21:
         20:b0:e0:b6:df:2a:1f:1c:1b:63:09:c3:b4:d2:bf:fc:23:2e:
         14:75:f2:e5:10:b3:03:13:89:69:a3:5b:f6:21:15:b0:59:41:
         bf:8c:eb:bd:c5:21:40:0a:b7:ab:e9:47:ad:65:a1:64:3f:cd:
         70:f3:93:68:6e:c4:04:bb:7c:93:19:3f:73:1d:b2:d2:0a:44:
         bb:34:52:a4:bf:db:92:9c:e9:b9:16:b6:46:dc:48:41:b1:20:
         ca:8e:f6:22:1d:df:87:fd:a0:6d:92:48:51:e3:8e:5c:85:75:
         8a:31:3d:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:51 2026 by rpki-client