Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531363a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a3531363a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          dgbIslWCPlxTkMrlK+EkWgXlCF5E31FlqLsWomkyEFo=
Subject key identifier:   A9:5F:03:AE:A3:57:76:A5:F2:28:96:55:60:4C:B2:70:32:2A:68:B9
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       4C6BDEB02C58348CDDDB1E5281F1AC3A831DB35D
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531363a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Fri 26 Jun 2026 21:35:02 +0000
ROA not before:           Fri 26 Jun 2026 21:30:02 +0000
ROA not after:            Fri 25 Jun 2027 21:35:02 +0000
asID:                     267823
IP address blocks:        2803:1860:516::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Jul 2026 14:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6b:de:b0:2c:58:34:8c:dd:db:1e:52:81:f1:ac:3a:83:1d:b3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Jun 26 21:30:02 2026 GMT
            Not After : Jun 25 21:35:02 2027 GMT
        Subject: CN=A95F03AEA35776A5F2289655604CB270322A68B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:2d:86:a2:a1:ca:24:6e:fb:dd:e1:71:77:
                    dc:d8:92:af:7c:09:2c:f0:4e:4a:3d:91:58:48:b6:
                    93:69:0b:22:d9:d3:fa:d3:0a:54:70:21:1b:b6:dc:
                    73:0c:4f:b3:81:d4:7c:ab:e4:d8:9a:47:db:2e:22:
                    90:af:36:7d:52:84:a3:08:a2:4f:a1:97:69:1b:56:
                    33:a5:67:bc:8a:ff:fe:d1:5c:12:e2:c1:e6:04:40:
                    65:a7:b0:cd:e4:64:30:6d:c4:38:6c:e6:12:41:36:
                    59:71:a5:b2:bb:ea:c0:32:3c:67:52:63:b4:cc:a6:
                    06:f1:d0:8a:74:22:35:56:88:7f:0f:c2:5f:39:6b:
                    9a:75:27:03:51:86:80:01:9d:f2:c2:d0:4b:2c:0b:
                    c1:0b:a2:44:7c:5f:69:ac:37:b4:16:f6:19:cb:d1:
                    8c:e9:e4:1b:98:24:2a:85:35:3c:3e:5b:c3:70:77:
                    cd:07:a5:88:4a:c8:bc:68:e5:6f:55:ad:ac:37:56:
                    c7:0f:c4:18:70:e3:f4:58:99:55:c0:ed:10:17:0d:
                    8d:ed:ac:e5:27:31:da:89:e5:83:c0:31:27:b8:51:
                    78:b9:d9:c0:d9:94:64:a7:78:3a:b7:73:7a:dc:bd:
                    fb:83:77:97:5a:87:69:e0:fa:af:d2:a0:f3:61:7e:
                    cc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5F:03:AE:A3:57:76:A5:F2:28:96:55:60:4C:B2:70:32:2A:68:B9
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531363a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:516::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:7f:62:5b:73:42:94:a3:35:de:56:16:a2:37:6f:9a:62:aa:
         d2:2f:d0:0f:b0:d1:42:86:0a:37:7b:2c:d6:05:66:61:f6:71:
         8d:7b:48:fc:bd:53:e6:1a:86:4e:b7:2c:fb:98:be:31:6b:02:
         83:b6:9e:1c:13:68:10:57:94:1b:25:e3:38:0f:ce:20:62:1a:
         6e:0e:3e:40:2e:9d:f7:9d:d0:34:ea:2a:04:bb:0b:41:db:55:
         21:29:1b:3f:48:ae:c0:ff:39:3a:64:80:2d:e7:cb:19:fc:6f:
         91:fa:96:18:e2:ff:75:b4:85:94:b4:e7:8b:7e:31:73:b7:38:
         9e:6f:4f:c8:ed:e9:43:29:cb:56:f2:5e:99:b8:58:7e:07:72:
         14:da:e2:89:f5:6d:3a:4f:02:51:51:13:11:87:2f:57:dc:b0:
         10:f9:8d:1a:8f:43:20:5c:ef:08:e7:17:88:aa:9e:88:7a:5a:
         f5:10:29:3c:e9:97:f1:b0:f4:df:94:71:05:ea:9d:61:5b:98:
         ca:08:bf:22:51:05:51:2c:62:70:25:65:85:33:fa:02:62:c6:
         7d:a6:c6:2f:17:f7:1c:b6:27:f2:94:dd:ed:58:5c:52:24:dd:
         b7:76:c3:40:e8:e6:76:e1:b4:bf:87:21:06:9c:e7:53:8d:82:
         7a:3e:8c:81
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUTGvesCxYNIzd2x5SgfGsOoMds10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB
QzREQzlFOTAeFw0yNjA2MjYyMTMwMDJaFw0yNzA2MjUyMTM1MDJaMDMxMTAvBgNV
BAMTKEE5NUYwM0FFQTM1Nzc2QTVGMjI4OTY1NTYwNENCMjcwMzIyQTY4QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwi2GoqHKJG773eFxd9zYkq98
CSzwTko9kVhItpNpCyLZ0/rTClRwIRu23HMMT7OB1Hyr5NiaR9suIpCvNn1ShKMI
ok+hl2kbVjOlZ7yK//7RXBLiweYEQGWnsM3kZDBtxDhs5hJBNllxpbK76sAyPGdS
Y7TMpgbx0Ip0IjVWiH8Pwl85a5p1JwNRhoABnfLC0EssC8ELokR8X2msN7QW9hnL
0Yzp5BuYJCqFNTw+W8Nwd80HpYhKyLxo5W9Vraw3VscPxBhw4/RYmVXA7RAXDY3t
rOUnMdqJ5YPAMSe4UXi52cDZlGSneDq3c3rcvfuDd5dah2ng+q/SoPNhfswZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUqV8DrqNXdqXyKJZVYEyycDIqaLkwHwYDVR0j
BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5
ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2
MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC
NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy
Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzUz
MTM2M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzIzNjM3MzgzMjMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAMYYAUWMA0GCSqGSIb3DQEBCwUAA4IBAQAFf2Jbc0KUozXeVhaiN2+aYqrS
L9APsNFChgo3eyzWBWZh9nGNe0j8vVPmGoZOtyz7mL4xawKDtp4cE2gQV5QbJeM4
D84gYhpuDj5ALp33ndA06ioEuwtB21UhKRs/SK7A/zk6ZIAt58sZ/G+R+pYY4v91
tIWUtOeLfjFztzieb0/I7elDKctW8l6ZuFh+B3IU2uKJ9W06TwJRURMRhy9X3LAQ
+Y0aj0MgXO8I5xeIqp6Ielr1ECk86ZfxsPTflHEF6p1hW5jKCL8iUQVRLGJwJWWF
M/oCYsZ9psYvF/cctifylN3tWFxSJN23dsNA6OZ24bS/hyEGnOdTjYJ6PoyB
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:43:49 2026 by rpki-client