Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235353a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323235353a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          K77zCyjTfO7JANon4R1SDTtuNQEPmI3POPaStH23FXQ=
Subject key identifier:   B2:8F:6F:F1:E4:83:92:AA:2B:B7:62:78:6F:6C:89:16:BB:87:28:CC
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       6B1069E97018F104BCCC620E8553161DBE864429
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235353a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Tue 03 Mar 2026 16:25:05 +0000
ROA not before:           Tue 03 Mar 2026 16:20:05 +0000
ROA not after:            Tue 02 Mar 2027 16:25:05 +0000
asID:                     267823
IP address blocks:        2803:1860:2255::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:10:69:e9:70:18:f1:04:bc:cc:62:0e:85:53:16:1d:be:86:44:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  3 16:20:05 2026 GMT
            Not After : Mar  2 16:25:05 2027 GMT
        Subject: CN=B28F6FF1E48392AA2BB762786F6C8916BB8728CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:95:3a:c7:a1:e5:23:4c:9c:44:06:75:3a:
                    73:52:c1:23:fc:b6:17:8c:de:68:37:c1:20:f5:8d:
                    59:28:39:c2:78:f0:e9:ec:05:63:b9:cd:6d:a8:c8:
                    b8:a6:1d:9f:49:c5:71:cf:8c:d2:cd:60:e7:1b:18:
                    c9:fd:41:c2:db:20:93:42:65:cb:fe:b3:f3:1f:ab:
                    c8:9c:72:35:2e:55:ea:e4:5f:4c:2d:a4:95:ca:61:
                    ed:6f:16:d3:72:44:94:41:dc:3f:ac:c7:46:d2:50:
                    4c:2f:77:ca:c2:ab:07:99:d0:8c:87:95:15:0f:06:
                    22:76:58:3a:74:72:82:f5:cb:97:71:72:c9:22:05:
                    0e:7d:12:0d:36:ad:d2:fe:91:8f:fd:51:8a:b7:99:
                    f0:1a:10:e7:2d:5f:a8:33:45:1a:84:e2:cd:d1:3a:
                    e9:86:86:7e:81:69:d5:06:b4:a0:15:03:7b:c3:fc:
                    c0:27:ca:24:a9:f7:dd:d7:37:fa:7b:e4:74:5c:e2:
                    37:d8:bd:be:cd:3b:3b:d7:3e:66:c6:02:33:04:b5:
                    7b:3b:4d:54:49:f5:1d:17:0e:ee:d5:db:5f:4f:bd:
                    2d:d3:a8:7f:77:c1:3f:ed:13:ea:3e:13:65:6e:8b:
                    a4:90:e0:5f:f2:77:3e:15:7c:da:49:73:5d:76:5e:
                    e9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8F:6F:F1:E4:83:92:AA:2B:B7:62:78:6F:6C:89:16:BB:87:28:CC
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235353a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2255::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:fd:3c:b2:46:cb:4a:34:d1:87:c9:3e:92:ed:b9:fd:0c:f9:
         1b:29:9c:c2:1c:87:e2:8c:ef:0e:f1:49:34:f4:cd:de:53:62:
         f3:a1:33:5c:0d:c0:e3:b0:2f:09:f9:8e:0a:11:b7:db:12:ca:
         d4:a3:b1:d9:01:b0:15:a2:14:bf:e6:e8:90:7a:bc:d6:1b:81:
         8e:f1:fa:da:5f:68:4e:9b:9d:9a:ba:84:51:c6:9b:d8:72:ff:
         1f:83:9a:15:75:fb:34:ab:46:9b:1e:f2:01:31:ac:8a:db:f3:
         9c:58:ba:c0:83:db:cc:a0:d2:1c:0a:21:bc:fe:e0:9e:44:92:
         b1:41:86:2e:a3:62:d6:05:40:98:58:9d:0d:ab:37:6e:5c:85:
         98:a8:6a:2b:80:ef:64:b0:27:87:1d:6a:fc:b2:19:be:55:09:
         6b:6b:17:81:a0:5d:80:2a:ee:38:da:96:af:bd:f8:c5:f0:a6:
         eb:ca:b5:ce:dd:e5:30:bd:78:e9:7f:68:85:b3:98:0e:b5:af:
         00:2a:fc:be:a8:73:9b:69:42:c4:81:f8:6f:b4:77:30:d0:85:
         73:fe:41:48:63:05:70:0c:d7:20:f7:20:5d:30:36:ba:10:59:
         c9:fd:c4:44:57:f7:e2:8c:91:ce:8e:ee:4b:1c:58:24:ad:e4:
         3d:b7:77:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:08 2026 by rpki-client