Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130333a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323130333a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          OGHwyeFFZgziq0Xb1H2dgJnYE3YZqQSOlRyga4pQDME=
Subject key identifier:   E5:01:FF:41:D9:B1:4F:1D:D8:50:1C:11:C4:BB:C2:7D:BA:D4:83:EE
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       5326CF19F2FFC3FA5C5DD158BBF9F68B0132C2B5
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130333a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Tue 03 Mar 2026 16:25:02 +0000
ROA not before:           Tue 03 Mar 2026 16:20:02 +0000
ROA not after:            Tue 02 Mar 2027 16:25:02 +0000
asID:                     267823
IP address blocks:        2803:1860:2103::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:26:cf:19:f2:ff:c3:fa:5c:5d:d1:58:bb:f9:f6:8b:01:32:c2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  3 16:20:02 2026 GMT
            Not After : Mar  2 16:25:02 2027 GMT
        Subject: CN=E501FF41D9B14F1DD8501C11C4BBC27DBAD483EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:31:20:e4:83:f4:4d:b5:f1:4b:76:01:af:34:
                    ab:0f:9c:6f:9d:de:00:57:8c:0f:18:a1:63:bb:e0:
                    ea:35:9f:7e:2b:3b:17:21:c9:54:00:88:27:54:d8:
                    64:16:ed:ba:97:1a:a5:f4:5f:77:8d:cb:22:1d:79:
                    bb:42:8a:e9:2c:b8:3e:93:7e:8a:bf:e8:a4:ec:1e:
                    af:c3:d7:8f:56:5b:d0:f8:34:9c:02:f4:50:8a:e1:
                    ce:d2:cc:5f:63:77:74:bc:80:c3:7c:db:8f:ad:b6:
                    ab:4b:3d:11:d0:de:a8:e0:44:48:77:e6:ae:67:64:
                    de:b3:6a:68:ca:10:09:52:f6:a5:61:47:7e:b1:c7:
                    cf:53:a5:48:73:fd:17:a6:af:1c:81:b6:29:52:19:
                    4a:40:4d:1d:79:61:fd:a2:fb:29:5c:ad:e3:85:aa:
                    93:2e:4a:76:55:29:b0:13:e8:e4:30:c7:6a:45:3b:
                    97:5b:f3:ad:91:79:ee:50:ef:0b:e8:e4:23:63:48:
                    b2:b4:33:f7:3e:f1:dc:0b:a0:27:95:2a:4b:42:20:
                    77:a0:59:04:d5:da:f1:f7:b5:d7:fb:9e:93:64:e7:
                    87:cb:d6:53:d8:1d:46:4f:dc:97:54:7d:25:6b:97:
                    fb:b0:fe:9f:ac:b2:b4:3b:6b:f9:b3:a8:8c:5f:12:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:01:FF:41:D9:B1:4F:1D:D8:50:1C:11:C4:BB:C2:7D:BA:D4:83:EE
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130333a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2103::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:e2:18:33:e8:86:84:33:b3:26:96:fc:20:16:59:5b:73:7d:
         9b:48:4d:1b:08:9e:fa:6c:86:1a:71:bb:fd:bd:06:27:c7:d5:
         3f:01:b2:c1:bc:31:f4:94:5e:e0:dc:fa:e6:0b:f4:97:d2:1f:
         49:5c:72:e2:c3:fd:aa:41:e5:1c:68:ec:e3:a4:e1:f7:51:1b:
         66:e1:df:37:5d:5f:f0:a5:7f:df:82:51:9d:05:b1:1e:65:19:
         bb:e7:1e:4f:2d:5f:1a:9e:58:eb:d4:6f:af:68:82:19:cf:29:
         5f:3c:ef:1d:46:4b:57:12:33:a2:fb:ee:9e:aa:44:ce:89:fa:
         96:f9:a3:e8:53:31:00:f3:92:3c:1c:1d:2c:43:a9:f9:fe:c3:
         44:55:6a:73:fc:96:7f:b2:0e:c7:c2:c7:dd:c7:c6:1d:7a:48:
         f8:03:90:bb:10:9f:0b:70:5d:50:6b:d7:05:0a:5b:84:81:b3:
         a3:cb:75:6d:95:c5:97:7a:ee:08:92:24:f6:32:3e:43:ad:6f:
         49:df:e5:81:00:a3:61:61:be:b0:a4:54:af:e4:21:f0:36:70:
         99:13:02:af:13:e8:a3:8d:c9:a9:dc:05:74:da:9a:04:85:35:
         b5:49:8b:c7:47:ca:29:af:90:78:16:68:c1:fd:f0:3c:35:04:
         51:c7:de:04
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUUybPGfL/w/pcXdFYu/n2iwEywrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB
QzREQzlFOTAeFw0yNjAzMDMxNjIwMDJaFw0yNzAzMDIxNjI1MDJaMDMxMTAvBgNV
BAMTKEU1MDFGRjQxRDlCMTRGMUREODUwMUMxMUM0QkJDMjdEQkFENDgzRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxMSDkg/RNtfFLdgGvNKsPnG+d
3gBXjA8YoWO74Oo1n34rOxchyVQAiCdU2GQW7bqXGqX0X3eNyyIdebtCiuksuD6T
foq/6KTsHq/D149WW9D4NJwC9FCK4c7SzF9jd3S8gMN824+ttqtLPRHQ3qjgREh3
5q5nZN6zamjKEAlS9qVhR36xx89TpUhz/RemrxyBtilSGUpATR15Yf2i+ylcreOF
qpMuSnZVKbAT6OQwx2pFO5db862Ree5Q7wvo5CNjSLK0M/c+8dwLoCeVKktCIHeg
WQTV2vH3tdf7npNk54fL1lPYHUZP3JdUfSVrl/uw/p+ssrQ7a/mzqIxfEn+hAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQU5QH/QdmxTx3YUBwRxLvCfbrUg+4wHwYDVR0j
BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5
ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2
MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC
NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy
Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz
MTMwMzMzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoAxhgIQMwDQYJKoZIhvcNAQELBQADggEBAJLiGDPohoQzsyaW/CAWWVtz
fZtITRsInvpshhpxu/29BifH1T8BssG8MfSUXuDc+uYL9JfSH0lccuLD/apB5Rxo
7OOk4fdRG2bh3zddX/Clf9+CUZ0FsR5lGbvnHk8tXxqeWOvUb69oghnPKV887x1G
S1cSM6L77p6qRM6J+pb5o+hTMQDzkjwcHSxDqfn+w0RVanP8ln+yDsfCx93Hxh16
SPgDkLsQnwtwXVBr1wUKW4SBs6PLdW2VxZd67giSJPYyPkOtb0nf5YEAo2FhvrCk
VK/kIfA2cJkTAq8T6KONyancBXTamgSFNbVJi8dHyimvkHgWaMH98Dw1BFHH3gQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:57 2026 by rpki-client