Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3530633a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a3530633a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          kF/UpKCbufgJrHHbtxVQdz0KhpUNAmWnBNH9av2YtmI=
Subject key identifier:   F2:D0:41:98:9D:05:5A:52:8B:00:A7:BB:15:F5:E9:6E:EE:23:A0:28
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       348E934AFB162242F50C54012C309C2B8D040616
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3530633a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Fri 26 Jun 2026 21:35:10 +0000
ROA not before:           Fri 26 Jun 2026 21:30:10 +0000
ROA not after:            Fri 25 Jun 2027 21:35:10 +0000
asID:                     267823
IP address blocks:        2803:1860:50c::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Jul 2026 14:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8e:93:4a:fb:16:22:42:f5:0c:54:01:2c:30:9c:2b:8d:04:06:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Jun 26 21:30:10 2026 GMT
            Not After : Jun 25 21:35:10 2027 GMT
        Subject: CN=F2D041989D055A528B00A7BB15F5E96EEE23A028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:4d:b3:c9:3c:11:51:b6:ed:f8:6f:27:21:
                    92:fa:08:49:13:d8:7e:a1:2a:21:66:b3:90:99:5f:
                    6a:67:5d:68:11:c3:6a:cd:10:38:15:14:e9:2c:ea:
                    6e:85:8c:eb:ab:94:93:4b:0c:a1:af:a9:ea:0b:01:
                    40:2e:5d:8b:fc:2c:82:54:b8:2f:ec:2b:77:ac:1a:
                    31:48:cb:54:10:77:7c:2d:bb:bc:94:b7:83:29:49:
                    6e:eb:e6:23:f7:c4:56:02:ba:a7:d6:78:b5:01:da:
                    9e:57:67:9e:a4:45:47:06:24:70:c7:7c:c2:bc:f8:
                    62:b6:fd:fd:4c:88:49:46:41:f8:04:77:2d:ac:45:
                    8d:0d:01:98:a8:76:f5:05:c7:af:70:36:4b:6c:f2:
                    63:07:42:17:3a:f0:1d:f8:dc:cd:2a:92:77:7a:25:
                    79:5e:f5:c8:39:dc:99:8b:3c:77:97:d2:3a:1c:75:
                    25:43:45:9b:89:9c:3d:d7:e6:1b:76:8d:cd:e3:9c:
                    13:e3:5c:7b:2b:a0:3b:c5:b5:90:ce:06:57:fd:84:
                    3a:3f:d3:89:50:17:b8:b8:1c:0c:a3:68:e0:8a:df:
                    2c:06:3b:3b:f9:b8:bc:01:8a:23:59:7d:56:c9:63:
                    c3:37:e4:4f:99:de:52:7e:5c:8b:33:62:c4:87:91:
                    d0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D0:41:98:9D:05:5A:52:8B:00:A7:BB:15:F5:E9:6E:EE:23:A0:28
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3530633a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:50c::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:37:a9:90:38:13:b8:17:09:ca:8b:fc:8a:48:ea:38:ca:fa:
         3c:97:aa:ce:46:91:2e:c1:ca:ec:11:d1:36:da:0c:93:12:13:
         6d:44:3b:20:8b:da:f9:2a:bc:68:05:45:81:a6:48:41:fd:2e:
         a6:5a:e1:9c:5f:11:e1:21:59:a5:e6:52:a4:19:dd:c4:a8:29:
         6e:ad:6e:4a:d2:a4:ba:d9:2b:51:d4:e3:d3:f3:97:cd:91:06:
         0a:ce:f0:96:0f:9b:8f:65:93:6f:b2:18:42:b9:c5:90:36:5e:
         a2:1f:ef:16:a9:3d:e9:21:b8:95:75:5a:b2:0a:a6:4a:b9:1c:
         c6:0f:03:8f:f1:0b:4c:7f:09:9b:05:4a:15:85:9e:d0:b4:2a:
         86:30:50:f7:4e:ae:42:c3:3f:45:d1:38:b9:49:24:73:0b:ec:
         a8:2a:44:55:b4:4d:64:39:e9:10:89:ea:33:3b:2b:4d:69:4a:
         9b:e2:1f:de:61:97:42:74:c0:00:0a:0e:78:8f:ca:5a:0a:25:
         bd:be:d0:5c:0c:65:88:e4:32:bf:1c:3e:b5:f5:68:fb:ca:a8:
         56:89:5d:45:de:85:9c:00:6c:dc:f7:39:e5:7e:9c:1e:81:b3:
         5f:a9:ae:7a:69:c7:dc:4e:aa:25:d2:c6:f4:ba:7f:a0:1e:f1:
         8e:c8:78:73
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUNI6TSvsWIkL1DFQBLDCcK40EBhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB
QzREQzlFOTAeFw0yNjA2MjYyMTMwMTBaFw0yNzA2MjUyMTM1MTBaMDMxMTAvBgNV
BAMTKEYyRDA0MTk4OUQwNTVBNTI4QjAwQTdCQjE1RjVFOTZFRUUyM0EwMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yE2zyTwRUbbt+G8nIZL6CEkT
2H6hKiFms5CZX2pnXWgRw2rNEDgVFOks6m6FjOurlJNLDKGvqeoLAUAuXYv8LIJU
uC/sK3esGjFIy1QQd3wtu7yUt4MpSW7r5iP3xFYCuqfWeLUB2p5XZ56kRUcGJHDH
fMK8+GK2/f1MiElGQfgEdy2sRY0NAZiodvUFx69wNkts8mMHQhc68B343M0qknd6
JXle9cg53JmLPHeX0jocdSVDRZuJnD3X5ht2jc3jnBPjXHsroDvFtZDOBlf9hDo/
04lQF7i4HAyjaOCK3ywGOzv5uLwBiiNZfVbJY8M35E+Z3lJ+XIszYsSHkdDLAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU8tBBmJ0FWlKLAKe7FfXpbu4joCgwHwYDVR0j
BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5
ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2
MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC
NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy
Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzUz
MDYzM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzIzNjM3MzgzMjMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAMYYAUMMA0GCSqGSIb3DQEBCwUAA4IBAQBTN6mQOBO4FwnKi/yKSOo4yvo8
l6rORpEuwcrsEdE22gyTEhNtRDsgi9r5KrxoBUWBpkhB/S6mWuGcXxHhIVml5lKk
Gd3EqClurW5K0qS62StR1OPT85fNkQYKzvCWD5uPZZNvshhCucWQNl6iH+8WqT3p
IbiVdVqyCqZKuRzGDwOP8QtMfwmbBUoVhZ7QtCqGMFD3Tq5Cwz9F0Ti5SSRzC+yo
KkRVtE1kOekQieozOytNaUqb4h/eYZdCdMAACg54j8paCiW9vtBcDGWI5DK/HD61
9Wj7yqhWiV1F3oWcAGzc9znlfpwegbNfqa56acfcTqol0sb0un+gHvGOyHhz
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:44:07 2026 by rpki-client