Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130383a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323130383a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          iOX8KJOsAzpUQL77HdLMzQbrfydkSyfryaatOaepqq8=
Subject key identifier:   07:5D:56:05:97:1C:6B:1F:62:21:3A:02:62:47:40:E1:29:9C:B0:67
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       3C967DE0E311ACD9DE3DD06093074EB7EDA0178B
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130383a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Wed 04 Mar 2026 15:20:01 +0000
ROA not before:           Wed 04 Mar 2026 15:15:01 +0000
ROA not after:            Wed 03 Mar 2027 15:20:01 +0000
asID:                     267823
IP address blocks:        2803:1860:2108::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:96:7d:e0:e3:11:ac:d9:de:3d:d0:60:93:07:4e:b7:ed:a0:17:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  4 15:15:01 2026 GMT
            Not After : Mar  3 15:20:01 2027 GMT
        Subject: CN=075D5605971C6B1F62213A02624740E1299CB067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:5f:43:4a:a4:5e:e3:0c:97:d5:21:d4:d4:
                    7d:b3:b4:f5:61:28:c6:1e:7c:36:74:f2:48:4e:9b:
                    15:4c:f0:55:9b:98:b9:15:54:a7:10:0d:c8:ff:2b:
                    0c:c1:fc:6a:d8:4c:d4:c0:0d:4c:60:4f:fb:a3:f5:
                    ba:49:86:9a:ea:3e:77:84:e3:57:30:f2:50:21:c6:
                    25:54:33:49:d3:b5:02:5c:ff:e4:2e:8f:5b:e9:d1:
                    63:aa:97:0d:ce:9b:21:27:ae:6d:55:ed:82:f3:a0:
                    64:73:a0:e7:17:2a:a7:36:bc:92:cb:9d:1b:87:6e:
                    49:76:02:4d:a2:77:9c:f8:fa:e7:ba:d1:7f:02:40:
                    89:cb:58:32:db:2e:d4:dd:fd:cf:8c:ea:0b:3d:d3:
                    53:b3:40:b0:02:b6:f7:f2:54:d4:90:16:a6:23:af:
                    75:32:26:eb:be:2e:05:7a:16:d1:da:6b:21:1b:7c:
                    52:d9:bc:69:44:90:61:0d:50:29:36:37:1b:4b:13:
                    62:25:73:73:18:9b:76:23:76:0a:84:ce:9a:39:d0:
                    f7:09:25:3e:93:6f:b5:51:e8:ff:29:4d:4f:ff:00:
                    f4:26:fb:6c:5c:55:e0:c7:14:e7:f1:1c:74:72:9d:
                    80:ff:16:63:7a:12:a1:8c:43:7a:7e:48:bb:53:ee:
                    ac:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5D:56:05:97:1C:6B:1F:62:21:3A:02:62:47:40:E1:29:9C:B0:67
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130383a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2108::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:1e:cf:e6:2e:19:e8:5b:70:65:87:3e:6d:13:fa:2f:5d:42:
         41:d7:70:b0:f7:66:89:e9:c4:d7:7b:a0:c8:08:98:6a:3e:75:
         04:72:8f:de:65:6e:e3:fb:33:63:98:75:11:f8:6d:85:9c:fe:
         68:b9:b7:ae:bd:b8:45:a8:f5:e4:d7:e6:0a:a9:d7:02:83:b2:
         68:98:96:1c:16:18:46:05:ab:8f:e3:15:43:19:04:0d:a3:27:
         78:e7:2b:e5:44:7c:8d:3e:70:c3:aa:da:69:aa:48:05:e3:e2:
         f0:bf:dd:fa:a4:40:c7:3c:5e:7a:a4:c3:3e:36:c4:67:ee:53:
         c6:6e:59:67:90:49:2c:73:a1:2f:e2:98:c4:d3:ad:c3:18:b8:
         01:b2:c6:1f:29:c4:fb:55:8d:5b:07:c5:1b:0b:ad:ab:c7:06:
         22:71:61:11:41:52:46:28:90:fc:a5:e9:10:ec:25:cf:a2:85:
         fd:f4:c5:ef:66:f0:2f:0e:d7:1b:d2:ef:96:e8:0d:93:93:37:
         65:26:e1:e2:bd:21:fc:f7:d6:d7:0a:02:db:9e:ca:47:08:b2:
         3a:f9:91:5b:4b:a3:c8:ff:f0:b3:b2:2c:2e:bc:06:aa:2a:80:
         18:20:fc:f7:ec:4c:64:f7:d7:21:8b:7f:6f:88:35:75:a7:f6:
         9c:45:c9:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:57 2026 by rpki-client