Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230363a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323230363a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          ms6ZUqiHe/IfrFp14N64yd+ISG3AvFMa9uuycko5gGc=
Subject key identifier:   D8:36:20:0D:CF:0C:1B:7F:CD:4D:CD:25:0A:EF:16:0B:7C:F1:66:35
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       328137667DE404471E5975EBE4FF77D1B7CF9698
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230363a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Tue 03 Mar 2026 16:25:03 +0000
ROA not before:           Tue 03 Mar 2026 16:20:03 +0000
ROA not after:            Tue 02 Mar 2027 16:25:03 +0000
asID:                     267823
IP address blocks:        2803:1860:2206::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:81:37:66:7d:e4:04:47:1e:59:75:eb:e4:ff:77:d1:b7:cf:96:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  3 16:20:03 2026 GMT
            Not After : Mar  2 16:25:03 2027 GMT
        Subject: CN=D836200DCF0C1B7FCD4DCD250AEF160B7CF16635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:55:3d:2f:56:ed:96:a8:cc:62:1e:13:0a:
                    25:f7:6a:76:5d:e2:ff:fb:97:34:15:a8:8f:7a:88:
                    55:19:87:d7:a2:d3:3b:2b:69:c2:c4:15:3c:38:6a:
                    ac:6e:21:99:99:c0:c5:58:ca:18:7b:f7:25:36:9e:
                    09:6c:92:93:1d:50:01:85:b9:0a:2d:33:49:2b:e8:
                    2f:96:ff:ef:06:25:38:22:10:bc:b1:bf:e4:1a:e2:
                    42:71:af:2a:6d:7e:2e:40:db:d8:68:70:3a:c6:03:
                    7e:25:d5:a6:0c:4b:a1:c6:f1:a3:9b:48:8b:78:c2:
                    bf:bd:d0:ef:7d:5f:03:cf:f9:85:47:35:af:45:89:
                    df:d7:6e:80:f7:37:43:19:e6:d9:cd:44:8d:a4:e1:
                    77:d0:07:f4:04:ab:34:8c:53:54:b0:7c:85:8e:2b:
                    2e:3e:37:d9:cd:83:47:fc:3f:35:0b:f4:04:fc:a2:
                    e0:d7:c2:45:e8:83:2f:77:6b:66:38:bf:4b:af:ec:
                    ae:1c:3f:d8:8b:15:37:2c:00:85:e0:04:50:e1:de:
                    95:f2:39:1c:bf:4d:af:05:91:6e:bf:18:53:ae:dd:
                    a8:55:60:61:aa:55:77:0a:3d:39:ba:a1:ad:3e:f8:
                    bd:90:3e:5a:66:1e:96:f8:9d:5a:e8:2b:c6:e2:7f:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:36:20:0D:CF:0C:1B:7F:CD:4D:CD:25:0A:EF:16:0B:7C:F1:66:35
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230363a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2206::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:02:7a:bd:44:0e:ff:fc:c7:d6:59:53:3d:c8:62:48:23:88:
         3e:15:be:e1:d4:21:a6:c8:12:07:93:5c:5b:c8:4e:3f:ab:66:
         96:3b:eb:d3:d4:22:73:d6:6e:49:57:c3:4f:c5:86:d0:98:72:
         f9:d7:26:52:24:d6:da:30:1d:45:ae:0f:d6:a2:29:78:80:fe:
         31:9f:6b:60:03:26:c5:91:0c:f7:4a:fd:e2:ce:cd:0a:b0:87:
         1d:75:f5:21:9c:32:8b:cb:74:db:2b:6c:26:83:a1:7f:75:a4:
         0a:07:a2:91:a6:a5:66:27:bd:07:01:3a:9c:3c:18:f3:9d:49:
         61:a2:5d:28:e9:d8:ee:e6:88:a1:34:aa:83:dc:df:77:40:da:
         a7:0a:76:45:87:50:ba:cd:61:c4:bb:2c:47:91:68:a5:73:fb:
         b4:48:e9:68:24:9c:2f:a0:5e:2b:39:f8:80:25:e2:4b:fb:58:
         a4:ca:33:f4:5f:40:c3:9d:b8:7f:1b:40:40:ff:7c:17:d8:74:
         a1:a5:64:b3:36:95:e5:18:bb:23:6f:7e:93:ee:d7:06:46:47:
         91:c9:d9:c4:1e:c5:a4:22:ab:c6:b2:10:e2:a0:9e:86:37:bf:
         8a:59:d0:44:40:57:c7:78:0b:1b:58:11:a7:11:cc:10:25:a3:
         23:90:06:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:24 2026 by rpki-client