Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531323a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a3531323a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          GqKFFsE5lPg6Be8S+5/Kkxkew3jCRay/c5JAEBhbyGg=
Subject key identifier:   66:17:B8:E7:48:73:35:BD:06:00:DA:3A:F9:4B:E1:51:74:03:04:8A
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       112A56AE4435B63D04059AC603A6932AEB0477F4
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531323a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Fri 26 Jun 2026 21:35:01 +0000
ROA not before:           Fri 26 Jun 2026 21:30:01 +0000
ROA not after:            Fri 25 Jun 2027 21:35:01 +0000
asID:                     267823
IP address blocks:        2803:1860:512::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Jul 2026 14:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2a:56:ae:44:35:b6:3d:04:05:9a:c6:03:a6:93:2a:eb:04:77:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Jun 26 21:30:01 2026 GMT
            Not After : Jun 25 21:35:01 2027 GMT
        Subject: CN=6617B8E7487335BD0600DA3AF94BE1517403048A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:9a:70:c7:06:b4:05:2b:63:4a:55:12:0d:
                    ab:ee:37:4f:b3:f6:63:84:9e:96:1e:11:9c:cf:8e:
                    f2:d4:cc:66:0b:f9:84:74:63:7a:a1:48:a8:39:65:
                    86:09:d3:c8:d7:dc:7d:56:40:b9:a9:9a:cb:e3:2e:
                    d6:82:57:2a:39:c7:ae:a6:27:8d:7e:89:b5:71:cf:
                    c6:83:31:82:0c:2e:f1:6f:17:f0:10:10:26:db:61:
                    f4:85:10:7b:d6:e0:9a:3c:ac:f8:6e:d2:4d:12:cf:
                    a3:c0:75:aa:d2:2e:06:f3:2d:8a:a7:93:a8:8e:06:
                    a0:ec:e1:8d:74:93:8e:98:6d:c0:52:a9:6e:ec:ea:
                    93:1f:45:15:00:92:c8:23:49:22:4e:05:8c:50:02:
                    1f:71:d1:50:49:d3:9d:bc:1d:72:18:60:e6:f0:d3:
                    37:c6:75:24:5e:be:96:bb:ac:4a:b8:b0:12:fd:9b:
                    64:14:67:24:ce:17:d3:71:c3:0c:47:cc:52:8e:36:
                    64:ee:48:a4:a8:d1:db:2e:99:76:5d:69:25:0f:73:
                    6e:c5:08:79:4d:65:20:e6:15:41:fd:9a:1a:13:d5:
                    cb:8d:c0:ee:b5:c2:3d:96:b6:25:78:9a:1d:f3:f9:
                    82:f8:ab:59:36:a8:cd:0a:ae:f7:62:12:fa:6d:91:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:17:B8:E7:48:73:35:BD:06:00:DA:3A:F9:4B:E1:51:74:03:04:8A
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531323a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:512::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:9b:c9:70:51:9a:06:e1:a9:a6:ba:18:56:88:4c:ee:a1:
         7a:24:09:ab:22:cf:60:e6:f0:fe:fb:ea:ad:5c:b8:95:c3:52:
         b0:f7:00:33:fe:4a:b6:ed:75:73:fb:8a:db:14:1d:4e:74:97:
         21:fe:06:3d:fc:cd:41:b8:41:a8:2a:7c:32:15:ef:cd:08:8b:
         1b:43:8b:24:34:2a:60:35:ce:5b:fc:cc:e0:72:ca:4d:c1:7f:
         bf:d9:20:0a:e6:3b:f4:63:e7:76:39:8e:11:91:66:a4:7c:c7:
         bd:5f:2f:d9:ce:6f:f8:c0:0c:a7:e6:89:b4:6f:c6:b2:8f:0c:
         e8:82:f9:07:48:4c:2f:74:d1:47:d9:0f:d7:b3:8e:ad:85:60:
         99:88:e0:79:37:df:d4:8e:e3:da:38:27:c1:b0:4f:20:1c:6d:
         63:94:49:55:80:33:ea:23:48:1d:d1:0c:cf:e5:b8:73:f8:98:
         6d:14:b4:df:5f:a5:b8:c2:fa:64:ab:82:17:7e:cc:fc:d9:a4:
         59:bd:c9:d4:db:d9:1d:8a:94:3f:64:95:65:9c:dd:9b:14:e8:
         0c:e9:2b:12:20:b1:03:8e:2d:6c:58:ab:28:b8:0e:c3:de:73:
         46:d9:ee:d1:f2:3e:70:af:78:04:79:a0:67:5a:58:be:ad:99:
         81:25:82:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:44:07 2026 by rpki-client