Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230303a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323230303a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          HfT+0R5QUsf0lYzZql4xxkbd0yeixg4UXaQqFUc8SuU=
Subject key identifier:   1E:AD:B2:73:33:30:F4:E1:59:C1:93:AA:B5:70:98:1D:32:E8:5B:59
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       1FF04694B4BC77D04F890323FCE3AA1A7D297D6B
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230303a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Tue 03 Mar 2026 16:25:01 +0000
ROA not before:           Tue 03 Mar 2026 16:20:01 +0000
ROA not after:            Tue 02 Mar 2027 16:25:01 +0000
asID:                     267823
IP address blocks:        2803:1860:2200::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f0:46:94:b4:bc:77:d0:4f:89:03:23:fc:e3:aa:1a:7d:29:7d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  3 16:20:01 2026 GMT
            Not After : Mar  2 16:25:01 2027 GMT
        Subject: CN=1EADB2733330F4E159C193AAB570981D32E85B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:11:29:19:85:49:3b:43:c6:f9:f1:4d:02:
                    c4:53:bc:da:2a:3e:ce:3e:5e:0e:29:87:d1:88:5d:
                    3f:8f:e5:6e:fa:22:d8:83:23:40:49:82:47:06:8a:
                    38:08:b9:ca:fa:6d:28:01:18:86:18:ef:9c:14:57:
                    e3:c7:5f:e8:ab:a4:17:08:7f:cb:b9:7d:c3:f2:8e:
                    e7:11:5a:fc:4b:3f:be:26:53:82:c2:4a:d0:28:84:
                    0e:eb:40:60:b2:d5:cf:1c:ba:dd:e2:cf:f6:75:59:
                    bf:3e:e2:83:c2:58:5b:69:05:01:c7:2e:15:a6:4f:
                    e5:4e:c2:6f:aa:dc:06:f8:b5:f6:e5:44:69:be:36:
                    8f:e0:3b:19:4c:34:8b:50:94:60:89:81:a6:3a:51:
                    bf:e3:66:8f:59:6f:80:1c:cd:ef:5e:d5:7c:ba:15:
                    e8:2a:bf:c3:29:dc:d6:65:1a:73:64:00:2d:4f:d2:
                    6c:8d:9e:da:ab:d1:87:d5:18:e6:4d:6b:51:b6:6b:
                    b5:9e:bd:5c:d7:fe:33:44:46:e2:e1:08:56:80:04:
                    c0:2c:17:65:d8:7d:a6:f9:b7:2d:8e:50:9b:bb:92:
                    2a:9f:6e:c9:9e:9f:6c:94:f9:d9:5d:dd:cc:16:83:
                    95:a4:56:5b:87:a7:68:e5:f2:8a:04:44:4f:db:e4:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AD:B2:73:33:30:F4:E1:59:C1:93:AA:B5:70:98:1D:32:E8:5B:59
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230303a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2200::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:2c:67:d1:37:fb:d6:aa:a3:e0:b5:df:14:aa:38:00:52:
         3a:0e:18:f3:d5:5e:66:d5:d7:97:3f:f0:d4:99:4e:52:ac:b0:
         3a:ce:9a:42:ab:65:da:98:f0:c7:50:52:78:9c:19:8d:09:3c:
         eb:54:0d:44:36:15:c2:d8:9a:b1:15:86:18:1b:5e:3c:ff:84:
         f4:77:ad:cf:ab:f4:b1:7f:4c:22:8e:98:c0:42:ce:2d:f4:8b:
         5f:2e:be:c4:34:8b:2d:2d:ac:a1:4f:2c:2c:65:a6:0e:ed:9f:
         b5:5b:c3:f2:c9:d1:c6:3b:0e:5a:a9:86:b9:e7:6b:fa:3d:91:
         48:7f:ce:c0:2f:4e:28:b0:20:c6:d3:7a:89:bc:e4:c5:aa:1e:
         51:3d:cc:10:cb:bb:0d:ec:4d:e3:86:74:4a:66:76:48:e1:4d:
         03:6d:44:a3:57:e2:97:ec:a9:8d:d3:fe:3b:b3:fc:c0:04:87:
         2e:58:68:12:84:42:f3:96:91:0e:b8:62:58:90:b9:b9:5e:43:
         95:46:b3:bc:20:94:22:af:fd:82:55:4e:c3:34:76:aa:76:1a:
         16:e3:4b:96:6d:c6:de:63:eb:af:10:f1:47:56:08:37:95:f5:
         94:f3:e4:e4:d7:94:51:ca:e4:40:a3:cb:a5:37:3b:6a:6e:fe:
         0c:1c:89:ce
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUH/BGlLS8d9BPiQMj/OOqGn0pfWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB
QzREQzlFOTAeFw0yNjAzMDMxNjIwMDFaFw0yNzAzMDIxNjI1MDFaMDMxMTAvBgNV
BAMTKDFFQURCMjczMzMzMEY0RTE1OUMxOTNBQUI1NzA5ODFEMzJFODVCNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ihEpGYVJO0PG+fFNAsRTvNoq
Ps4+Xg4ph9GIXT+P5W76ItiDI0BJgkcGijgIucr6bSgBGIYY75wUV+PHX+irpBcI
f8u5fcPyjucRWvxLP74mU4LCStAohA7rQGCy1c8cut3iz/Z1Wb8+4oPCWFtpBQHH
LhWmT+VOwm+q3Ab4tfblRGm+No/gOxlMNItQlGCJgaY6Ub/jZo9Zb4Acze9e1Xy6
Fegqv8Mp3NZlGnNkAC1P0myNntqr0YfVGOZNa1G2a7WevVzX/jNERuLhCFaABMAs
F2XYfab5ty2OUJu7kiqfbsmen2yU+dld3cwWg5WkVluHp2jl8ooERE/b5Kl1AgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUHq2yczMw9OFZwZOqtXCYHTLoW1kwHwYDVR0j
BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5
ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2
MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC
NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy
Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz
MjMwMzAzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoAxhgIgAwDQYJKoZIhvcNAQELBQADggEBAFyYLGfRN/vWqqPgtd8UqjgA
UjoOGPPVXmbV15c/8NSZTlKssDrOmkKrZdqY8MdQUnicGY0JPOtUDUQ2FcLYmrEV
hhgbXjz/hPR3rc+r9LF/TCKOmMBCzi30i18uvsQ0iy0trKFPLCxlpg7tn7Vbw/LJ
0cY7Dlqphrnna/o9kUh/zsAvTiiwIMbTeom85MWqHlE9zBDLuw3sTeOGdEpmdkjh
TQNtRKNX4pfsqY3T/juz/MAEhy5YaBKEQvOWkQ64YliQubleQ5VGs7wglCKv/YJV
TsM0dqp2GhbjS5Ztxt5j668Q8UdWCDeV9ZTz5OTXlFHK5ECjy6U3O2pu/gwcic4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:56 2026 by rpki-client