Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3430303a3a2f34302d3430203d3e20323637383233.roa
File:                     323830333a313836303a3430303a3a2f34302d3430203d3e20323637383233.roa (raw, json)
Hash identifier:          bIjk6y/0YTAdD0YjxUSOVa/O31P93YphOdtUmA6/LDo=
Subject key identifier:   A2:8B:D2:4E:4B:21:02:6D:6B:80:41:55:2C:8A:80:DF:C8:D8:92:72
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       017452BC1660751B083A98AABBA1A000ECA2A874
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3430303a3a2f34302d3430203d3e20323637383233.roa
Signing time:             Tue 12 Aug 2025 06:30:03 +0000
ROA not before:           Tue 12 Aug 2025 06:25:03 +0000
ROA not after:            Tue 11 Aug 2026 06:30:03 +0000
asID:                     267823
IP address blocks:        2803:1860:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:74:52:bc:16:60:75:1b:08:3a:98:aa:bb:a1:a0:00:ec:a2:a8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Aug 12 06:25:03 2025 GMT
            Not After : Aug 11 06:30:03 2026 GMT
        Subject: CN=A28BD24E4B21026D6B8041552C8A80DFC8D89272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:ef:95:79:7b:57:88:43:ff:5e:6d:14:0d:
                    54:f5:d9:e8:27:34:29:68:65:06:86:42:b9:6a:85:
                    d2:14:d4:04:38:d2:55:23:2e:d8:af:d6:ad:40:77:
                    46:8f:11:dc:96:ca:61:84:55:e1:a9:e0:5f:75:93:
                    e9:db:4e:c0:6d:21:fe:4e:98:e5:3a:12:66:04:cf:
                    17:f4:08:f8:f4:89:88:2b:66:c8:d9:6f:c7:be:b0:
                    b6:4b:d3:a0:e1:c0:6c:56:68:d4:6f:10:ff:33:11:
                    e5:d5:87:34:a7:ae:cb:29:ae:b4:51:f1:88:82:63:
                    b7:9f:ee:63:d5:cf:55:ea:f4:e6:0c:92:a1:9c:87:
                    f7:c3:7b:e8:37:df:e4:62:96:7f:21:be:b2:14:6d:
                    96:93:09:9f:a4:d8:42:2f:06:48:54:9a:d9:91:fc:
                    ad:d6:2e:56:a4:be:c4:61:08:93:2a:a6:96:7b:60:
                    5d:a1:2a:ee:4c:a2:53:21:52:2f:1d:44:e6:f6:ad:
                    58:8a:19:18:9c:1e:92:ff:f4:dd:4f:97:b3:80:a0:
                    b1:7c:da:d0:e1:db:ae:af:7e:bc:ba:7a:2d:e1:0a:
                    e3:6f:9e:e6:19:3c:f9:f6:97:87:1e:cb:50:17:11:
                    62:f0:57:49:47:ab:c7:c5:c4:d0:84:59:14:3b:31:
                    5d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8B:D2:4E:4B:21:02:6D:6B:80:41:55:2C:8A:80:DF:C8:D8:92:72
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3430303a3a2f34302d3430203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:7b:03:82:22:6d:2a:cd:e3:bd:86:54:f9:3f:b7:b3:48:df:
         04:5d:2c:12:7d:c1:6b:96:7e:35:12:63:08:6c:9d:4d:69:f7:
         db:5b:0f:a9:77:c8:38:a6:a1:6a:2b:a0:78:d0:d6:30:6d:c3:
         d7:f0:9e:d0:fe:4a:3e:88:a3:fd:96:46:5e:fc:c0:20:f5:a7:
         3d:4c:85:95:72:33:42:58:44:b1:6d:d1:23:b8:c6:b1:fd:c8:
         90:2e:1c:0e:2a:20:2e:1c:27:f2:61:6c:11:84:43:c1:fd:e8:
         97:dd:58:4b:45:28:b1:d6:46:08:69:a1:5d:35:d9:c4:02:84:
         d3:ae:ea:ac:a1:76:49:85:64:3b:86:7d:3c:4b:6d:d2:2d:b9:
         51:5b:a4:64:04:e4:98:fd:2d:e6:51:ae:e2:a5:10:98:83:d4:
         f0:5f:08:72:16:87:3a:cb:90:6d:c0:25:d5:c6:dd:92:15:98:
         59:4c:24:b0:ec:24:31:c3:4a:c0:ba:cd:7b:08:54:60:e3:96:
         c8:87:39:1e:0f:9b:f8:4c:de:fa:53:67:60:82:fe:f5:78:1f:
         48:c2:68:9d:0b:a5:d2:fe:65:eb:66:c5:47:59:0c:8e:13:99:
         9f:3b:24:ad:49:63:bc:28:51:fc:e5:c6:41:1c:1b:99:e8:39:
         0d:47:8a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:49 2025 by rpki-client