Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3930303a3a2f34302d3430203d3e20323637383233.roa
File:                     323830333a313836303a3930303a3a2f34302d3430203d3e20323637383233.roa (raw, json)
Hash identifier:          JXrVnstYCV+IzXuUiBdupaoqXWqpzeBpZoDzP0y5i4k=
Subject key identifier:   2F:A6:5D:A3:FF:48:81:CA:45:13:88:EA:7D:78:66:8F:68:AB:5A:3E
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       69ACE073AA4EFB2159E0CA34D57476946C4ED812
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3930303a3a2f34302d3430203d3e20323637383233.roa
Signing time:             Tue 12 Aug 2025 06:30:03 +0000
ROA not before:           Tue 12 Aug 2025 06:25:03 +0000
ROA not after:            Tue 11 Aug 2026 06:30:03 +0000
asID:                     267823
IP address blocks:        2803:1860:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ac:e0:73:aa:4e:fb:21:59:e0:ca:34:d5:74:76:94:6c:4e:d8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Aug 12 06:25:03 2025 GMT
            Not After : Aug 11 06:30:03 2026 GMT
        Subject: CN=2FA65DA3FF4881CA451388EA7D78668F68AB5A3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:7c:6b:17:7d:b0:32:94:0d:3e:ad:1d:f8:
                    d6:65:4d:a6:1e:00:6d:cc:cd:35:cc:fc:aa:e0:46:
                    ce:3f:3f:72:20:22:6b:d0:17:c0:64:ad:45:2e:92:
                    c8:a7:b3:84:2f:5b:4c:21:4e:03:16:b0:e2:bc:cd:
                    54:07:ab:eb:01:79:28:d7:30:1d:60:f6:6b:5f:15:
                    9c:94:0b:ab:f9:02:c4:1b:a5:88:58:f4:4d:0a:3d:
                    34:90:01:49:13:49:c5:4a:f4:33:fc:2b:3b:9e:2a:
                    33:dd:a2:62:81:2a:c8:04:ea:7d:00:49:74:4e:a4:
                    2f:50:3b:78:0e:89:7e:11:52:95:34:25:76:da:6f:
                    11:fe:67:d9:56:71:92:ef:39:bd:98:ab:eb:3e:ff:
                    d6:e7:7a:64:24:36:99:f5:fd:d5:48:d2:5b:64:16:
                    63:42:5e:c0:1b:cd:bd:d8:0f:df:cb:8e:da:e4:b8:
                    ad:0a:09:72:4e:da:12:4d:cd:75:25:57:3e:7b:c9:
                    3a:f5:b0:de:69:96:06:8f:d5:81:87:1a:1d:d1:5b:
                    0a:33:69:38:0e:30:05:3b:99:ca:37:ab:87:87:f3:
                    5c:91:9f:9c:ea:bb:64:5c:3a:db:72:cc:f4:70:62:
                    92:bf:77:15:c0:aa:4e:48:e4:39:26:07:76:d6:a1:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A6:5D:A3:FF:48:81:CA:45:13:88:EA:7D:78:66:8F:68:AB:5A:3E
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3930303a3a2f34302d3430203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:0b:e7:05:5a:a0:6c:3a:42:52:f2:1d:e5:23:2b:0c:03:75:
         fa:e2:fd:06:a7:b3:ba:a6:0a:2d:e3:24:0e:e5:49:73:e8:53:
         e3:21:b3:c6:79:09:16:4c:25:4f:a3:dc:90:78:e1:02:ff:f9:
         ae:3e:c7:e0:3c:52:73:a7:da:6e:03:0f:62:cc:6e:b9:df:f8:
         a4:26:15:9e:74:b7:af:31:23:72:74:6e:91:c6:82:e4:1f:4e:
         49:88:87:e2:b4:f3:99:ea:14:e6:97:17:b5:2a:8b:fc:d6:72:
         d4:a4:81:70:45:2c:bf:ae:32:eb:57:e6:72:0a:4a:17:71:55:
         42:61:41:7c:6a:b3:0b:f8:06:39:f1:ad:84:56:08:4f:34:0c:
         07:0f:d5:c0:07:92:e6:1e:ad:b4:4b:90:b1:7e:0d:57:af:b5:
         55:f6:8f:e2:46:e3:80:0b:1b:5a:5b:d4:67:ed:89:72:ff:88:
         77:77:69:11:91:0b:09:c0:79:da:e6:cb:e0:ec:b1:30:7d:c8:
         5e:b3:01:77:3e:1a:d8:77:a2:2c:b6:4d:7e:1e:66:e1:ab:5f:
         0c:43:08:db:15:21:92:01:e6:d0:81:2d:e8:02:4f:42:d9:e8:
         b5:99:8b:b8:33:d0:34:ca:a7:cf:78:55:a2:33:4a:53:99:3e:
         4c:3e:ae:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:51 2025 by rpki-client