Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a6530303a3a2f34302d3430203d3e20323637383233.roa
File:                     323830333a313836303a6530303a3a2f34302d3430203d3e20323637383233.roa (raw, json)
Hash identifier:          pXMDhA8aJSMoC0ucTh5MHi4Tt/96logbs2DSXBHwgBY=
Subject key identifier:   21:9D:AA:B9:63:D7:E2:47:68:1B:E2:3E:3B:81:0F:46:32:F3:FD:C4
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       1B3A6245709396432F2FA9A03233C0564DB43E70
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a6530303a3a2f34302d3430203d3e20323637383233.roa
Signing time:             Tue 12 Aug 2025 06:30:04 +0000
ROA not before:           Tue 12 Aug 2025 06:25:04 +0000
ROA not after:            Tue 11 Aug 2026 06:30:04 +0000
asID:                     267823
IP address blocks:        2803:1860:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3a:62:45:70:93:96:43:2f:2f:a9:a0:32:33:c0:56:4d:b4:3e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Aug 12 06:25:04 2025 GMT
            Not After : Aug 11 06:30:04 2026 GMT
        Subject: CN=219DAAB963D7E247681BE23E3B810F4632F3FDC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b4:eb:24:53:9d:3f:3e:22:50:e6:37:62:9b:
                    6d:8e:9f:79:1e:39:2d:5c:0a:b9:75:89:81:80:0a:
                    ea:4f:99:8b:41:5a:02:94:56:a9:a0:4f:32:c6:ec:
                    a1:09:5c:4f:20:5e:f6:30:3f:ef:16:56:59:9d:6a:
                    06:ad:0a:0e:c2:dd:f4:78:54:79:cd:57:68:e2:f4:
                    8c:e8:e4:15:93:4d:ec:29:49:0c:23:aa:f8:f3:df:
                    68:0d:44:4c:06:dd:a9:7d:be:fe:a0:58:0d:9f:86:
                    c9:8c:ae:f2:09:eb:24:4d:06:29:e0:f7:94:f1:50:
                    ae:c5:ae:b2:73:b0:3f:94:2e:13:00:71:f9:30:05:
                    5d:71:d3:74:41:49:58:07:f7:19:0e:dd:e8:a9:1c:
                    5f:8a:75:b5:7d:e6:af:8d:5f:39:ac:73:10:44:24:
                    1d:2c:a9:14:eb:7d:20:b1:6d:fa:a9:b2:ba:05:15:
                    0e:f5:25:08:63:84:4a:c0:82:06:47:cf:b3:62:c6:
                    da:e3:9e:86:bc:31:54:ff:cb:70:de:71:ab:94:70:
                    e4:44:51:6b:27:24:d3:fa:83:b1:3c:03:6a:be:cf:
                    62:28:3d:0f:32:06:a5:c1:33:d2:9b:5f:41:b9:f3:
                    b4:65:ff:4f:92:fd:f5:80:2b:54:54:2c:58:13:2f:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9D:AA:B9:63:D7:E2:47:68:1B:E2:3E:3B:81:0F:46:32:F3:FD:C4
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a6530303a3a2f34302d3430203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:00:9d:f6:34:15:77:91:42:10:6c:fe:d2:16:81:56:99:51:
         10:1a:ff:7c:83:92:be:64:4f:d6:a8:87:e6:e3:66:11:dd:e2:
         b5:d2:ef:80:21:c0:05:9f:ca:f3:29:a3:62:97:75:f1:81:0a:
         d0:92:67:0c:36:69:b4:a8:35:eb:99:72:cd:04:c9:e2:84:ba:
         81:10:82:4c:6a:5f:f6:ec:ab:30:64:64:fa:ea:cc:a6:04:14:
         b9:53:43:08:6c:95:68:55:35:d1:4e:77:8f:5e:97:a5:90:15:
         e7:94:82:d1:c2:e0:3d:9c:8b:f8:50:0a:56:48:38:4e:83:e5:
         98:00:79:f6:76:76:03:fb:96:fe:44:72:69:18:37:6d:ae:85:
         b2:90:99:26:c5:84:f8:73:22:b6:39:19:e4:94:23:49:06:5e:
         5e:8a:77:6b:4c:d1:20:a8:e4:8b:f0:a3:a1:f0:68:59:07:83:
         49:3a:0c:24:c0:33:04:79:e3:50:a5:8b:ea:1c:91:fc:bd:91:
         06:8d:2c:be:d1:ff:eb:fa:fd:79:73:40:67:b5:ee:d2:38:1f:
         19:d7:c7:62:71:d4:1d:d8:5f:b4:18:e7:0d:ed:94:2c:54:07:
         73:a4:33:aa:a9:de:b4:19:ee:7b:f7:7e:fb:08:d2:60:7b:fe:
         1c:80:fd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:44:36 2025 by rpki-client