Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130363a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323130363a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          xwuuNF/6Hh7ghXZnhEiC6Tq9v1NBIix/Dgmhl8V4avI=
Subject key identifier:   05:ED:EF:AC:41:92:6D:99:5C:6F:0E:EF:0C:2E:9E:67:81:B2:31:EF
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       13B31E900775CBBC97E9B42BE13548344560F696
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130363a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Wed 04 Mar 2026 15:20:00 +0000
ROA not before:           Wed 04 Mar 2026 15:15:00 +0000
ROA not after:            Wed 03 Mar 2027 15:20:00 +0000
asID:                     267823
IP address blocks:        2803:1860:2106::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b3:1e:90:07:75:cb:bc:97:e9:b4:2b:e1:35:48:34:45:60:f6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  4 15:15:00 2026 GMT
            Not After : Mar  3 15:20:00 2027 GMT
        Subject: CN=05EDEFAC41926D995C6F0EEF0C2E9E6781B231EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:74:b0:87:bd:27:53:8b:ec:02:dc:1e:86:0a:
                    f1:26:28:b5:9c:51:38:75:d1:c0:8d:60:1a:62:d9:
                    4f:ed:29:cd:9d:e7:fa:39:9f:0c:2f:7e:18:16:da:
                    9e:e8:c8:01:cb:69:67:44:84:c8:34:b2:c4:9b:9c:
                    7f:5d:60:a4:d5:e4:2f:3b:bb:e6:a8:24:e7:11:b1:
                    13:a4:ff:86:73:2b:59:9c:1b:bc:d5:74:ca:cb:12:
                    9d:0f:25:61:74:65:25:6c:2f:f7:4a:cc:ce:20:52:
                    4f:9c:22:63:2f:5e:4c:51:12:61:95:ef:4a:c6:2e:
                    c5:cb:ec:5b:93:ca:0a:e3:ec:99:e0:4c:f4:24:20:
                    03:b7:00:70:4d:33:c4:52:6c:22:71:47:78:32:7a:
                    57:f6:f0:ae:46:e7:9b:90:db:c0:e5:52:04:b0:21:
                    6b:44:e8:d5:3d:05:f0:ae:a7:8f:5e:de:ef:4b:9a:
                    19:98:d6:37:1b:5c:0a:27:97:e7:b7:d0:0f:22:39:
                    94:db:83:a6:f8:7c:2c:47:5a:d7:a0:6a:d2:35:a0:
                    91:f4:f7:74:3d:8e:69:bc:4e:1d:16:4b:0f:c2:d8:
                    52:15:7d:88:af:56:dd:02:0d:8f:22:3a:58:ce:93:
                    38:e7:cc:d4:9d:85:10:77:2f:6e:88:d7:e2:06:8f:
                    2b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:ED:EF:AC:41:92:6D:99:5C:6F:0E:EF:0C:2E:9E:67:81:B2:31:EF
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130363a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2106::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:09:4d:b8:9b:d1:7f:b4:e2:e7:5a:6d:28:1d:47:67:c0:15:
         ae:80:3c:ea:ca:8e:2b:5d:ca:8a:8c:7a:40:c3:ec:9b:49:e0:
         81:32:ca:e0:40:47:ec:7a:71:82:e2:22:cf:13:1e:ed:c6:dd:
         24:15:cb:92:0e:30:91:b6:69:a9:44:b5:99:26:1b:90:2d:50:
         3b:62:75:25:17:6b:3d:39:b9:93:50:13:e4:4f:ca:6f:ef:a2:
         10:f3:34:e9:02:f7:df:2d:8c:33:c2:a7:32:6f:ff:12:2a:7a:
         61:c1:0d:ce:0b:c0:c2:ea:e5:4e:c9:4d:04:35:eb:e2:cd:fe:
         96:cc:0a:46:ef:62:02:82:c8:7e:d8:33:26:ed:fc:54:10:97:
         6a:c1:3b:ef:34:28:39:4d:cd:87:58:9e:e6:27:3f:4d:e5:ec:
         47:ae:e0:75:39:b4:6c:34:b1:de:59:42:d2:72:1d:d7:61:98:
         19:cd:da:5c:77:79:bc:27:e5:fd:2b:de:53:f5:6f:d0:00:26:
         47:23:88:f4:14:22:3e:62:ae:0e:e4:a5:08:06:79:a7:ce:f4:
         22:ed:c4:dc:7e:75:54:ec:75:3a:16:8a:7d:a7:6c:60:f2:bc:
         39:b3:b0:48:03:47:b4:44:02:52:f7:83:a4:17:ed:1d:fe:6d:
         72:80:5e:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:19 2026 by rpki-client