Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230383a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323230383a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          elVlBbvmLCEj9PNLtlYfnibTte78pWtiRuMHjomBlfQ=
Subject key identifier:   53:0A:3F:45:38:BC:90:7B:A6:FE:AD:90:66:57:A7:51:EC:8F:7A:7D
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       0EA16D9AD6654E4729CC2717FDA687D65EDA1F9D
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230383a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Tue 03 Mar 2026 16:25:09 +0000
ROA not before:           Tue 03 Mar 2026 16:20:09 +0000
ROA not after:            Tue 02 Mar 2027 16:25:09 +0000
asID:                     267823
IP address blocks:        2803:1860:2208::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a1:6d:9a:d6:65:4e:47:29:cc:27:17:fd:a6:87:d6:5e:da:1f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  3 16:20:09 2026 GMT
            Not After : Mar  2 16:25:09 2027 GMT
        Subject: CN=530A3F4538BC907BA6FEAD906657A751EC8F7A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:48:26:31:a7:43:1e:d2:2e:2d:42:76:eb:
                    70:bc:12:81:40:9a:29:9c:48:de:77:af:ee:39:96:
                    82:50:54:c8:5e:91:c0:89:55:6c:1a:18:73:05:19:
                    67:df:10:6f:e2:a1:dd:3d:7a:2f:8c:5b:35:81:19:
                    7e:e8:2b:78:22:59:75:e6:0f:55:87:71:1f:41:a5:
                    64:53:5c:ff:6b:1f:9b:d1:1c:2a:e9:47:04:3b:47:
                    81:22:ce:14:a1:d9:50:cb:95:95:13:de:df:37:46:
                    d9:be:53:d0:26:6d:f5:f3:6a:4a:94:f2:22:61:07:
                    92:61:0b:cd:b8:d6:6c:57:08:11:a0:79:31:40:95:
                    97:d8:02:28:2d:92:3b:c2:06:04:8e:73:05:4d:f1:
                    47:71:e3:31:cb:12:eb:e4:f1:42:e6:3c:e0:1d:20:
                    45:65:f3:7d:09:4b:f4:19:29:a5:84:70:a8:27:55:
                    6b:df:1d:7b:ba:a7:59:5a:ae:1f:97:67:66:15:05:
                    7c:62:d6:2f:42:6a:93:03:14:4c:c1:e2:f6:ca:34:
                    4a:a6:2e:42:b5:1f:82:72:f6:64:06:ec:5a:8f:6a:
                    05:2a:4f:ac:4b:aa:61:f9:31:99:22:9b:09:42:cc:
                    f5:18:df:0c:b7:db:74:6d:ad:bf:ac:74:78:19:20:
                    3c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0A:3F:45:38:BC:90:7B:A6:FE:AD:90:66:57:A7:51:EC:8F:7A:7D
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230383a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2208::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:2b:d6:e3:bf:45:90:b3:30:7d:3e:fa:ad:d6:d8:80:ed:b4:
         58:9a:32:02:3b:25:df:75:9f:6c:e4:2b:35:a7:52:ad:0a:d5:
         e5:05:d9:ad:83:df:89:24:78:0d:97:f4:2c:47:71:4d:ea:23:
         bf:41:7a:11:97:52:9d:40:fe:c5:f9:b3:34:da:e7:87:9a:35:
         6c:84:44:31:25:5a:d0:51:b2:e9:80:99:81:4d:8e:db:c5:8d:
         a1:84:5f:a8:5c:d4:20:f4:02:49:1b:80:09:36:ad:d4:3f:0b:
         ea:1a:68:25:58:ab:6b:43:87:c1:aa:cf:e8:59:c9:b1:a2:bf:
         cc:d4:2c:63:7f:c8:a4:ca:cc:b5:3f:53:36:91:00:d3:4f:c4:
         9a:c0:67:14:d5:68:ce:dd:49:49:f3:09:12:98:2a:70:9d:a8:
         95:d9:4a:91:f9:5d:62:9d:08:fd:60:dc:69:98:0a:a0:92:45:
         15:17:78:fe:c7:e1:9e:fe:de:0e:2f:05:f0:a8:d9:dd:89:c7:
         d9:11:fe:6e:a1:64:91:78:b5:cf:50:ea:d2:06:b7:e2:b0:34:
         07:6e:62:ec:bb:0e:30:a5:6b:5b:4e:67:ec:40:88:8a:f9:19:
         37:63:32:1e:e9:53:04:40:cd:7b:f5:a1:56:03:d5:5b:cb:0b:
         e9:f6:31:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:31 2026 by rpki-client