Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235363a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323235363a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          3xh+v01B8cC3FW1puUIuWXB2Q4sZp3XwPzPSyuG/VNg=
Subject key identifier:   AB:5D:F0:B8:19:8E:5D:F7:3E:37:72:76:3A:02:9E:DC:B7:80:2D:71
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       7D5C7B6DEF28B67772909952BFA79205C5B21EFE
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235363a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Tue 03 Mar 2026 16:25:06 +0000
ROA not before:           Tue 03 Mar 2026 16:20:06 +0000
ROA not after:            Tue 02 Mar 2027 16:25:06 +0000
asID:                     267823
IP address blocks:        2803:1860:2256::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5c:7b:6d:ef:28:b6:77:72:90:99:52:bf:a7:92:05:c5:b2:1e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  3 16:20:06 2026 GMT
            Not After : Mar  2 16:25:06 2027 GMT
        Subject: CN=AB5DF0B8198E5DF73E3772763A029EDCB7802D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:4f:4a:b1:47:92:bd:a2:d0:75:ba:b7:ad:
                    b3:04:ab:b7:a4:ec:f2:51:21:f5:fa:4e:7b:11:d4:
                    56:53:14:99:ee:65:91:33:0a:c0:3a:78:7d:ff:93:
                    fc:89:79:2f:7b:f8:f3:4a:fa:9a:5f:b9:cd:80:27:
                    17:c1:61:31:e3:54:a7:c2:c5:5b:2c:43:93:bc:8c:
                    a1:62:12:9f:cd:3a:f3:be:6d:e5:a0:9a:d8:da:bd:
                    52:90:01:8f:3b:cd:cd:7f:48:b4:08:58:ee:e8:98:
                    a7:2b:b0:dc:9d:7c:32:c4:b7:7f:6b:d7:18:5c:d2:
                    66:c9:77:18:6c:41:92:2f:52:f0:3d:fe:64:fa:93:
                    13:bf:ec:d0:2a:82:df:90:2a:b2:8c:76:a1:b9:82:
                    74:94:95:58:0e:ad:1f:a0:3d:f7:63:b4:f8:65:8f:
                    50:3a:af:04:51:04:6a:7c:c1:5a:3c:35:df:ac:ee:
                    0d:af:4a:f0:be:c3:8f:df:80:16:f7:74:be:cd:6a:
                    28:53:e8:f0:da:7a:cd:36:62:d0:15:f8:e2:57:77:
                    54:ea:ad:d8:a1:71:9c:19:41:7d:fd:1f:59:ca:b0:
                    3d:79:8c:8f:f5:bf:7f:f1:aa:29:37:d7:a9:b2:f7:
                    1d:d0:7c:cb:59:4b:56:a9:76:19:26:5f:42:1e:46:
                    0f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5D:F0:B8:19:8E:5D:F7:3E:37:72:76:3A:02:9E:DC:B7:80:2D:71
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235363a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2256::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:26:ec:70:5e:52:e4:b6:9b:c4:b5:5a:e4:02:c8:0e:2c:e5:
         76:c2:b4:0b:62:bc:cf:3c:fd:c2:fc:a1:5f:c3:5f:c9:2d:dd:
         56:ee:0c:90:e8:af:06:b8:ff:37:1d:fc:da:f5:ac:82:b1:7f:
         1b:c0:23:62:bb:17:6c:00:60:e5:2a:6b:f3:cd:23:c1:73:fb:
         49:48:30:b2:a7:8b:1e:6d:bf:29:87:ea:b0:49:6f:db:48:b9:
         d4:86:7a:fb:54:05:7e:cb:2e:0c:b2:51:72:8a:3a:9b:29:9c:
         0c:1b:7e:fe:41:43:eb:95:c4:f4:66:26:36:50:e2:db:38:04:
         fc:f6:18:e4:fe:d8:40:19:c5:12:2e:a4:c6:9a:9b:e6:90:28:
         35:7d:c6:0b:c8:54:af:f4:5a:0a:11:c5:d7:2e:59:30:8d:1c:
         35:10:95:f1:02:db:9d:34:36:e8:1c:e5:96:c7:af:b1:91:c4:
         58:81:37:9f:45:cd:d3:06:60:e6:55:f6:80:e7:38:54:97:5c:
         51:8e:9b:f4:60:9c:61:60:de:e0:a9:cd:42:66:dc:73:7c:06:
         50:63:d7:52:39:19:bd:83:fe:51:69:db:e5:4e:af:6e:df:fb:
         bd:18:26:aa:49:73:31:dd:50:17:10:34:c3:c7:a0:d8:1c:3e:
         b9:11:82:0d
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUfVx7be8otndykJlSv6eSBcWyHv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB
QzREQzlFOTAeFw0yNjAzMDMxNjIwMDZaFw0yNzAzMDIxNjI1MDZaMDMxMTAvBgNV
BAMTKEFCNURGMEI4MTk4RTVERjczRTM3NzI3NjNBMDI5RURDQjc4MDJENzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClzE9KsUeSvaLQdbq3rbMEq7ek
7PJRIfX6TnsR1FZTFJnuZZEzCsA6eH3/k/yJeS97+PNK+ppfuc2AJxfBYTHjVKfC
xVssQ5O8jKFiEp/NOvO+beWgmtjavVKQAY87zc1/SLQIWO7omKcrsNydfDLEt39r
1xhc0mbJdxhsQZIvUvA9/mT6kxO/7NAqgt+QKrKMdqG5gnSUlVgOrR+gPfdjtPhl
j1A6rwRRBGp8wVo8Nd+s7g2vSvC+w4/fgBb3dL7NaihT6PDaes02YtAV+OJXd1Tq
rdihcZwZQX39H1nKsD15jI/1v3/xqik316my9x3QfMtZS1apdhkmX0IeRg/xAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUq13wuBmOXfc+N3J2OgKe3LeALXEwHwYDVR0j
BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5
ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2
MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC
NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy
Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz
MjM1MzYzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoAxhgIlYwDQYJKoZIhvcNAQELBQADggEBAGEm7HBeUuS2m8S1WuQCyA4s
5XbCtAtivM88/cL8oV/DX8kt3VbuDJDorwa4/zcd/Nr1rIKxfxvAI2K7F2wAYOUq
a/PNI8Fz+0lIMLKnix5tvymH6rBJb9tIudSGevtUBX7LLgyyUXKKOpspnAwbfv5B
Q+uVxPRmJjZQ4ts4BPz2GOT+2EAZxRIupMaam+aQKDV9xgvIVK/0WgoRxdcuWTCN
HDUQlfEC2500Nugc5ZbHr7GRxFiBN59FzdMGYOZV9oDnOFSXXFGOm/RgnGFg3uCp
zUJm3HN8BlBj11I5Gb2D/lFp2+VOr27f+70YJqpJczHdUBcQNMPHoNgcPrkRgg0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:10 2026 by rpki-client