Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235343a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323235343a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          aRMmPlJKc53K10xn/lEnj5VtecQ6ASteW3WZleGUf94=
Subject key identifier:   BA:5B:1A:6C:4A:4A:B5:D5:07:80:43:0C:89:E8:7F:6B:A4:79:E4:F0
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       6104B297DF968DCDC63BB480704D75BAAD017BFF
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235343a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Tue 03 Mar 2026 16:25:03 +0000
ROA not before:           Tue 03 Mar 2026 16:20:03 +0000
ROA not after:            Tue 02 Mar 2027 16:25:03 +0000
asID:                     267823
IP address blocks:        2803:1860:2254::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:04:b2:97:df:96:8d:cd:c6:3b:b4:80:70:4d:75:ba:ad:01:7b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  3 16:20:03 2026 GMT
            Not After : Mar  2 16:25:03 2027 GMT
        Subject: CN=BA5B1A6C4A4AB5D50780430C89E87F6BA479E4F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:f3:67:62:f0:19:52:40:f8:e8:14:4f:91:
                    67:3e:80:ea:93:fe:27:e5:09:ad:a4:2c:14:67:1e:
                    0b:95:10:76:53:fe:e8:38:c1:9b:3c:4a:53:bd:c9:
                    ed:cf:32:9b:3b:80:b0:0e:46:7a:5d:82:06:56:44:
                    f2:4c:dd:25:67:c9:b7:a7:79:0e:fe:d0:2c:e8:58:
                    2c:5b:da:e7:b0:19:ca:c0:42:e5:eb:10:f7:6f:63:
                    bc:2f:37:22:23:26:2c:eb:3c:43:62:d1:76:1e:94:
                    06:75:29:51:01:27:cf:1c:62:8b:c6:c3:d1:35:aa:
                    63:15:40:83:49:cc:ee:3e:3b:3b:c9:ff:aa:29:78:
                    6f:de:96:e7:16:4b:71:b7:b0:60:41:c7:ed:3d:be:
                    b7:00:cf:96:74:ec:56:17:20:bc:b6:e6:b1:24:a1:
                    e3:76:80:72:c9:80:e4:2c:ca:48:5f:ba:9e:0a:b2:
                    4e:1e:f6:af:1a:ba:ed:00:2d:78:dd:85:07:ed:84:
                    bb:1c:64:89:81:5f:9a:48:aa:64:95:9f:8f:dd:41:
                    75:5c:0d:81:a5:c1:e6:20:b6:d8:ca:38:5f:89:bb:
                    2b:d7:a5:75:c6:ed:ee:6c:bb:fb:09:19:bc:fc:e6:
                    7b:99:7a:6d:b3:dc:65:98:1d:9f:cc:24:1a:14:f9:
                    f3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5B:1A:6C:4A:4A:B5:D5:07:80:43:0C:89:E8:7F:6B:A4:79:E4:F0
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235343a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2254::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:e2:4c:d3:48:0c:a7:f5:ff:0a:14:89:32:0d:d9:9a:1d:71:
         ad:40:15:57:2f:1b:b8:bb:37:27:61:00:cc:9d:3b:15:ea:49:
         3c:26:ed:a5:28:a0:a0:60:6b:69:22:f8:9f:09:bf:8d:18:4b:
         b7:34:2e:69:64:ae:6d:6c:07:4f:8a:95:87:fe:44:c7:eb:30:
         2a:7a:cc:81:00:76:f3:97:b6:73:18:bc:19:83:e9:72:0f:a1:
         2d:ae:75:47:68:c1:3d:c2:d1:bc:41:e2:a7:59:61:78:3f:54:
         ed:c1:9c:4c:4a:25:f2:ae:4b:9b:64:72:fb:c5:66:69:ab:0e:
         e4:c8:b5:ca:ec:64:37:59:24:01:21:4c:0d:81:7f:6d:08:11:
         29:8e:4c:11:b9:40:01:70:00:1e:a8:60:dc:b9:e1:77:5d:14:
         b5:d9:02:6c:af:2a:99:a4:79:9d:ff:71:70:65:2c:78:c1:04:
         c3:d8:ea:c3:2c:77:5a:aa:96:09:fa:71:21:64:16:80:d6:ad:
         17:4b:05:3f:37:54:e9:02:e4:dd:ee:ac:e5:a2:f2:25:d4:0d:
         b9:e8:58:0b:2a:6b:d8:82:16:65:8f:c1:fc:51:65:ed:eb:fb:
         7c:3a:77:50:96:24:5e:d2:80:b0:bd:ac:fe:e0:6d:e4:ab:6e:
         67:f6:67:6c
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUYQSyl9+Wjc3GO7SAcE11uq0Be/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB
QzREQzlFOTAeFw0yNjAzMDMxNjIwMDNaFw0yNzAzMDIxNjI1MDNaMDMxMTAvBgNV
BAMTKEJBNUIxQTZDNEE0QUI1RDUwNzgwNDMwQzg5RTg3RjZCQTQ3OUU0RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKPNnYvAZUkD46BRPkWc+gOqT
/iflCa2kLBRnHguVEHZT/ug4wZs8SlO9ye3PMps7gLAORnpdggZWRPJM3SVnyben
eQ7+0CzoWCxb2uewGcrAQuXrEPdvY7wvNyIjJizrPENi0XYelAZ1KVEBJ88cYovG
w9E1qmMVQINJzO4+OzvJ/6opeG/elucWS3G3sGBBx+09vrcAz5Z07FYXILy25rEk
oeN2gHLJgOQsykhfup4Ksk4e9q8auu0ALXjdhQfthLscZImBX5pIqmSVn4/dQXVc
DYGlweYgttjKOF+JuyvXpXXG7e5su/sJGbz85nuZem2z3GWYHZ/MJBoU+fNNAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUulsabEpKtdUHgEMMieh/a6R55PAwHwYDVR0j
BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5
ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2
MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC
NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy
Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz
MjM1MzQzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoAxhgIlQwDQYJKoZIhvcNAQELBQADggEBAIniTNNIDKf1/woUiTIN2Zod
ca1AFVcvG7i7NydhAMydOxXqSTwm7aUooKBga2ki+J8Jv40YS7c0Lmlkrm1sB0+K
lYf+RMfrMCp6zIEAdvOXtnMYvBmD6XIPoS2udUdowT3C0bxB4qdZYXg/VO3BnExK
JfKuS5tkcvvFZmmrDuTItcrsZDdZJAEhTA2Bf20IESmOTBG5QAFwAB6oYNy54Xdd
FLXZAmyvKpmkeZ3/cXBlLHjBBMPY6sMsd1qqlgn6cSFkFoDWrRdLBT83VOkC5N3u
rOWi8iXUDbnoWAsqa9iCFmWPwfxRZe3r+3w6d1CWJF7SgLC9rP7gbeSrbmf2Z2w=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:19 2026 by rpki-client