Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230353a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323230353a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          WbeyB27QqRYMM5BWQ6YZn0jQlZczggc+7N3R0raKonQ=
Subject key identifier:   F1:30:86:8A:45:AB:52:D7:93:43:71:62:6B:CF:E0:63:5E:AF:E3:45
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       79777FADA182FB93BA523F5C115058F571E46534
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230353a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Tue 03 Mar 2026 16:25:00 +0000
ROA not before:           Tue 03 Mar 2026 16:20:00 +0000
ROA not after:            Tue 02 Mar 2027 16:25:00 +0000
asID:                     267823
IP address blocks:        2803:1860:2205::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:77:7f:ad:a1:82:fb:93:ba:52:3f:5c:11:50:58:f5:71:e4:65:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  3 16:20:00 2026 GMT
            Not After : Mar  2 16:25:00 2027 GMT
        Subject: CN=F130868A45AB52D7934371626BCFE0635EAFE345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:42:26:6f:96:12:c7:d3:a9:29:d4:90:86:
                    0d:00:2f:80:cc:44:4c:c3:9b:7a:31:30:3f:53:26:
                    05:0e:ac:69:df:15:ff:7f:91:66:47:87:11:17:66:
                    c3:f1:eb:db:47:85:9d:0e:4c:73:54:d4:dc:73:0f:
                    96:0a:40:ac:15:c6:95:91:21:ab:e6:63:ca:8b:00:
                    86:72:ca:a8:83:97:38:54:27:5e:2a:a8:82:f3:e9:
                    00:4d:57:3e:64:6a:23:9b:fd:3d:fc:1f:ab:b3:e3:
                    b8:8f:02:60:23:12:c9:79:21:64:de:23:57:d8:b3:
                    75:bf:c0:02:6a:42:c2:cf:c6:98:10:4d:5f:87:b2:
                    5b:18:8b:22:03:34:19:ec:36:60:84:01:ee:10:e6:
                    f2:2e:78:33:97:a4:14:19:b1:90:51:42:e0:b5:b4:
                    b7:72:7d:38:32:43:ee:dd:f6:48:2a:df:28:05:f6:
                    f6:ac:7f:c4:7a:2d:3d:8a:9f:65:ff:19:93:76:fc:
                    3d:6b:56:ee:0a:c6:42:5b:6d:14:60:8a:92:50:ab:
                    b4:f2:27:16:c3:92:74:70:d3:93:87:ff:fd:0c:cd:
                    0a:55:03:0b:71:52:10:9b:47:8a:86:d0:7a:b9:96:
                    e3:30:c4:d9:00:a5:75:f9:3e:df:54:b6:d4:ad:d6:
                    e5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:30:86:8A:45:AB:52:D7:93:43:71:62:6B:CF:E0:63:5E:AF:E3:45
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230353a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2205::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:04:ed:0f:a9:e7:a9:9d:65:0f:b7:70:c5:9a:20:54:59:81:
         41:e8:c2:3b:eb:6f:4f:ce:c9:89:00:31:9e:f3:f1:7b:ad:72:
         ab:3a:23:5d:b1:71:b1:89:ce:b5:be:0d:f5:2d:2d:cf:3a:a2:
         0f:e6:fa:3d:e2:a4:1b:57:d0:96:14:d7:ee:bd:1d:94:ef:f6:
         56:21:d3:bc:c2:ef:1e:2d:f8:53:a7:a0:72:c6:ef:44:ca:e1:
         b3:fb:47:ba:07:44:8e:69:b8:10:c4:04:b1:6d:93:11:3d:db:
         96:c5:da:1a:18:25:bb:9b:05:e4:48:9d:f6:4b:b8:4e:a9:63:
         c1:59:b6:4d:06:b8:da:04:88:b7:a5:9f:4e:46:1f:67:af:02:
         75:b0:97:06:42:5d:d2:aa:5c:b5:49:32:3a:ef:a1:64:d6:1c:
         59:82:e3:6d:c7:7f:12:98:7e:c0:6a:67:b5:b1:3f:4c:17:78:
         95:2b:d0:7b:4d:8c:30:33:0b:d0:b7:c5:01:a7:a8:e6:58:32:
         0d:62:7c:72:f6:98:83:22:0b:08:82:d0:3b:7b:f0:d4:19:bb:
         73:6d:d0:f1:88:61:ec:fd:2b:86:dd:b1:6a:6f:22:3d:e5:28:
         b3:be:80:c5:49:16:78:40:e0:52:44:ae:9c:3b:5a:aa:7e:57:
         fe:bd:7b:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:14 2026 by rpki-client