Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531383a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a3531383a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          Cwdqo2dQBqJBP46ygaS0CvGFJtWXl+lRiXN18f0+11U=
Subject key identifier:   B6:65:AF:E7:FA:AC:7D:FD:2F:C0:3A:C6:1B:00:B5:67:03:78:95:21
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       749B0CA964863F9E673230215EF9C6DC91A1AFEE
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531383a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Fri 26 Jun 2026 21:35:07 +0000
ROA not before:           Fri 26 Jun 2026 21:30:07 +0000
ROA not after:            Fri 25 Jun 2027 21:35:07 +0000
asID:                     267823
IP address blocks:        2803:1860:518::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Jul 2026 14:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9b:0c:a9:64:86:3f:9e:67:32:30:21:5e:f9:c6:dc:91:a1:af:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Jun 26 21:30:07 2026 GMT
            Not After : Jun 25 21:35:07 2027 GMT
        Subject: CN=B665AFE7FAAC7DFD2FC03AC61B00B56703789521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:7f:b1:0b:91:5e:e8:21:b8:bd:e7:f9:7b:
                    17:22:a8:58:14:a8:5a:8a:e7:50:08:26:b8:65:bf:
                    0a:58:6e:f4:64:45:8f:8b:f8:cc:3d:cc:fd:2b:c0:
                    2f:32:95:18:5b:50:bc:c3:04:91:8b:8e:34:9a:6a:
                    c7:1c:08:52:3c:79:8c:0e:55:ed:2f:b6:7c:9e:56:
                    59:94:23:c5:11:b5:45:3a:5a:66:20:b1:b4:75:d5:
                    01:80:00:08:aa:28:48:37:f8:4b:60:4b:44:b2:09:
                    b5:28:24:ea:41:12:ef:8a:d8:ca:b2:d1:a4:79:38:
                    68:4e:73:74:e2:50:73:1b:c3:cf:b2:15:82:3c:c0:
                    fb:23:40:b0:a7:07:c9:08:39:4f:aa:d9:5b:a5:53:
                    06:aa:48:97:7e:f5:75:cc:3c:85:23:52:80:75:d3:
                    c6:cb:a3:70:7c:89:e0:75:b8:2c:37:46:c3:56:4e:
                    6b:65:93:17:7f:a9:64:59:1a:52:bc:11:71:a4:7e:
                    bd:3e:c6:b4:64:07:c6:e0:b0:32:81:5e:5f:9f:5d:
                    f0:8b:d3:d1:82:93:ed:94:f8:4c:b9:bf:f3:1c:cc:
                    f2:0a:25:70:b8:69:1a:08:6f:18:d8:1c:04:80:86:
                    cf:c6:6d:59:9c:7a:5d:0e:05:e9:20:82:29:46:91:
                    a9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:65:AF:E7:FA:AC:7D:FD:2F:C0:3A:C6:1B:00:B5:67:03:78:95:21
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531383a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:518::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:68:0f:c4:e3:09:33:37:5c:5e:df:39:16:d1:6c:fb:0a:97:
         0d:1e:45:b1:fa:a5:28:83:ba:98:99:da:ff:c7:01:b4:ed:21:
         4f:50:70:c3:45:ba:7c:5b:ee:95:11:20:ea:d8:f7:ac:05:77:
         5a:77:67:26:26:c3:68:1e:d7:2c:00:da:a0:df:f0:6a:f7:36:
         5f:7c:3a:1a:4b:ce:6f:c9:40:8e:fa:9b:60:ce:c8:c1:75:56:
         c9:d5:65:f6:f6:55:1d:59:fe:b2:df:e1:1c:f3:69:04:9f:66:
         92:c3:eb:4c:ae:b9:ac:28:35:33:f7:43:b3:89:4d:e7:7d:0a:
         0e:0c:09:02:c2:7d:12:1c:db:80:69:05:43:66:cb:31:99:76:
         74:f9:ce:b0:7f:06:7a:07:73:76:c3:fb:4a:1b:dc:77:10:13:
         d8:13:b4:6a:23:78:11:bc:31:6c:9a:23:50:de:c3:ff:5c:23:
         35:e8:c6:18:09:46:35:f5:0f:48:cd:9d:68:b0:b4:36:76:51:
         4c:96:79:dd:c8:d9:bf:75:87:a3:21:d7:f9:15:b0:eb:ed:8c:
         c8:c2:0e:05:7c:f8:0b:3d:6c:ae:2f:6d:63:2a:3f:6e:dd:2e:
         6c:8c:a6:8f:e8:29:c0:4f:60:28:5f:7a:85:6c:94:50:a2:57:
         65:3e:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:44:07 2026 by rpki-client