Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3530383a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a3530383a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          gO1Wkaq7sV+FgaIUEzzUXBUaL+ukWXYV7PEto6YBxfE=
Subject key identifier:   9E:DC:05:56:A3:90:C6:4F:69:A1:60:E2:93:20:AE:CF:C7:FE:10:A2
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       141A9C62DB23B23F7696BC3701303B4A569B8638
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3530383a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Fri 26 Jun 2026 21:35:10 +0000
ROA not before:           Fri 26 Jun 2026 21:30:10 +0000
ROA not after:            Fri 25 Jun 2027 21:35:10 +0000
asID:                     267823
IP address blocks:        2803:1860:508::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Jul 2026 14:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1a:9c:62:db:23:b2:3f:76:96:bc:37:01:30:3b:4a:56:9b:86:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Jun 26 21:30:10 2026 GMT
            Not After : Jun 25 21:35:10 2027 GMT
        Subject: CN=9EDC0556A390C64F69A160E29320AECFC7FE10A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:31:79:f0:ae:f9:c6:07:47:cb:b0:d0:43:
                    e5:26:2e:bc:44:11:33:36:15:1e:6b:f4:24:e2:00:
                    e6:0c:fc:2e:45:0e:3e:c6:78:f3:28:5d:e4:96:e0:
                    77:e9:c4:a4:15:03:5f:72:0b:1f:10:07:58:3b:dd:
                    2c:fa:e3:45:6a:ce:47:87:c5:1e:86:cd:df:d7:9b:
                    da:e4:a0:17:ab:87:69:0c:8f:04:b4:bc:e2:40:9d:
                    fd:b1:27:55:bf:a1:a3:41:47:b6:c7:21:f4:fa:1c:
                    ee:09:ae:d8:e3:bf:5d:4a:77:20:6a:2a:f8:9a:7f:
                    eb:3e:b6:3a:ef:1f:7c:3c:2f:35:28:61:9b:07:82:
                    18:10:ca:55:b6:ac:e1:a8:ae:78:77:5e:3f:38:ba:
                    4c:0c:b9:ac:2a:62:2c:6d:92:92:be:27:d8:56:e3:
                    1f:01:81:00:7f:f3:f0:10:41:ad:54:b6:7a:06:b1:
                    ca:29:a8:5d:34:36:d1:fe:00:0f:6e:a7:bf:98:b8:
                    91:82:be:55:31:1c:28:71:2c:fd:7e:e4:67:84:38:
                    23:c7:c5:06:4d:ef:a6:fc:06:36:17:b6:9d:fe:75:
                    37:b6:a0:8f:e0:a1:42:99:7e:5b:29:77:42:39:49:
                    0e:56:96:9b:f1:6c:62:91:11:34:5f:54:1a:d6:00:
                    84:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DC:05:56:A3:90:C6:4F:69:A1:60:E2:93:20:AE:CF:C7:FE:10:A2
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3530383a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:508::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:b1:de:8b:6e:a3:30:61:30:04:76:68:50:57:04:f8:01:06:
         ef:bf:dd:98:ff:2e:c8:50:a1:1b:77:2e:df:51:72:e6:56:89:
         7c:ff:f6:32:ca:d1:3f:6d:0c:f5:c2:63:25:38:d4:c7:86:52:
         f5:79:28:66:dc:01:f4:2d:cd:ba:a3:d8:8d:98:f1:46:39:d3:
         d9:46:65:47:e3:22:ad:42:a6:13:7d:9a:51:78:5e:0c:79:53:
         07:c3:a2:28:d8:0d:32:22:cc:42:8a:40:86:6a:d4:be:f0:d9:
         1d:5d:64:38:45:a6:00:d2:71:d9:79:68:95:a2:73:9d:3b:35:
         39:5f:95:74:08:2c:9a:0e:bf:c8:46:8b:32:59:71:20:54:f9:
         3c:f8:d3:e4:e5:0e:53:cf:f1:06:a8:c9:2d:ee:c7:ea:99:c4:
         e7:1e:41:82:6a:f2:df:71:ce:b3:da:fc:ce:28:b9:1c:13:d1:
         1a:1b:ce:a0:67:42:10:83:18:19:3f:a0:9b:61:35:2d:b9:03:
         4d:5d:0c:81:0d:35:e3:3e:fb:b1:3d:21:07:32:35:9c:0e:1c:
         20:43:e4:e0:73:1a:7f:e4:9d:f4:76:5f:8f:62:81:9c:24:36:
         b8:00:f4:56:1c:6f:9d:7c:79:85:7d:37:40:ae:43:76:1b:7e:
         2b:87:19:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:44:07 2026 by rpki-client