Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531333a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a3531333a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          J8uIWsESTt/KqHuRQD7qNs/oxln3vT+b2D/MxbOZjz0=
Subject key identifier:   46:22:B3:00:B8:C4:3B:25:FC:D1:37:50:69:C5:75:9D:91:D9:CA:38
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       569107E63FA5A842C11FEB5A1BCE82B41C409798
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531333a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Fri 26 Jun 2026 21:35:03 +0000
ROA not before:           Fri 26 Jun 2026 21:30:03 +0000
ROA not after:            Fri 25 Jun 2027 21:35:03 +0000
asID:                     267823
IP address blocks:        2803:1860:513::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Jul 2026 14:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:91:07:e6:3f:a5:a8:42:c1:1f:eb:5a:1b:ce:82:b4:1c:40:97:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Jun 26 21:30:03 2026 GMT
            Not After : Jun 25 21:35:03 2027 GMT
        Subject: CN=4622B300B8C43B25FCD1375069C5759D91D9CA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c7:a2:dc:08:a2:8b:73:12:e2:d6:48:0b:a3:
                    a2:bf:39:94:6e:79:2d:d5:06:9a:8b:6f:f2:f9:95:
                    80:5d:82:e8:be:42:c7:07:89:cd:cd:d8:8d:ae:43:
                    5b:fc:2c:1f:71:b3:84:44:94:3f:86:ad:05:8a:6b:
                    d9:94:b1:13:a7:7e:84:c9:96:36:cb:e5:5d:29:83:
                    75:72:c5:1e:9c:4f:d3:e3:69:a1:19:6f:43:aa:a1:
                    6f:70:27:cc:c1:df:a5:32:52:66:6a:a7:34:55:4c:
                    94:05:e6:8c:3f:3a:2a:76:9a:ba:57:f9:ce:b0:27:
                    4e:60:7b:a1:84:f7:ae:20:d5:3d:2a:be:db:e6:17:
                    b7:a6:cf:35:05:70:b0:38:d2:70:0c:1c:9b:1a:58:
                    c6:94:85:1c:a7:81:22:90:d8:a4:dd:89:b5:a1:f5:
                    9e:34:ca:19:07:58:1b:fd:69:6d:29:ca:a0:e7:71:
                    4e:1a:8a:06:56:b2:4b:40:dc:a5:63:a7:80:d4:a1:
                    2f:fd:0b:8f:89:c3:53:4f:3a:02:5b:cc:5e:dc:e5:
                    26:ec:17:ff:7a:8d:3c:91:21:89:ad:d2:22:04:bb:
                    09:a4:ba:bf:1a:c8:a0:0c:66:bf:dc:d3:17:89:e8:
                    13:36:19:67:ac:db:e5:5a:0a:ad:06:f6:69:a5:7d:
                    01:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:22:B3:00:B8:C4:3B:25:FC:D1:37:50:69:C5:75:9D:91:D9:CA:38
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531333a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:513::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:7d:66:b4:9c:60:44:4a:db:f6:63:42:4b:68:eb:08:5a:28:
         b0:f5:43:98:9a:d9:08:13:e4:3d:52:f8:28:ef:9a:0d:ae:76:
         2f:f1:e8:5c:bb:e7:1a:a4:d3:2d:80:bf:bf:12:79:cb:fd:9e:
         04:cd:2a:20:f8:4d:cc:fe:70:85:c1:c8:73:2c:18:34:51:5b:
         b4:91:90:2a:50:5d:b3:65:69:67:79:fe:4e:a8:df:3b:d0:c0:
         9c:ea:cc:18:72:63:55:93:61:a3:8b:07:1b:90:ba:88:03:51:
         e1:92:4b:c3:94:61:a8:77:8b:ee:85:ac:be:25:45:16:4d:e6:
         1d:15:c6:c1:1f:18:07:bc:25:2a:34:55:be:4b:ae:16:5b:94:
         fe:61:60:f3:03:69:be:f9:c8:80:4e:d8:a7:40:d1:ae:de:82:
         75:ff:d3:1e:42:3d:58:d2:18:c2:aa:ef:01:0c:08:ba:2f:be:
         aa:79:55:bd:2e:b4:c5:63:b2:a6:5a:9f:24:5d:f7:8f:e8:95:
         4e:8f:b5:eb:d3:53:0d:31:d6:45:1a:28:9c:2c:28:2f:56:8d:
         24:e0:1d:2e:6d:78:df:44:e6:a5:a0:a2:b0:8c:d6:b3:4c:c1:
         f4:89:21:64:35:7c:ca:52:fe:b9:93:0e:9c:bf:e1:98:43:ef:
         cf:b0:e5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:44:07 2026 by rpki-client