Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531633a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a3531633a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          wKUv+cOWbR7DmZt9edmUV7pvFJUbaAxdcbZB+N+wSt4=
Subject key identifier:   7A:34:66:33:B1:69:F6:37:F7:4D:C3:74:8E:89:33:1D:94:DF:CB:16
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       0D50A86BC9A52883B83EA34BB885F62094491727
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531633a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Fri 26 Jun 2026 21:35:09 +0000
ROA not before:           Fri 26 Jun 2026 21:30:09 +0000
ROA not after:            Fri 25 Jun 2027 21:35:09 +0000
asID:                     267823
IP address blocks:        2803:1860:51c::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Jul 2026 14:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:50:a8:6b:c9:a5:28:83:b8:3e:a3:4b:b8:85:f6:20:94:49:17:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Jun 26 21:30:09 2026 GMT
            Not After : Jun 25 21:35:09 2027 GMT
        Subject: CN=7A346633B169F637F74DC3748E89331D94DFCB16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:e0:98:0d:09:f2:27:19:a0:79:e8:11:e2:
                    f6:5a:19:d5:0e:1a:d6:0f:57:8e:1c:e3:50:c2:07:
                    42:a6:0b:8e:d1:56:a0:75:6f:e6:2c:ed:a0:15:c1:
                    9f:65:9b:d5:33:92:7f:53:3f:92:96:5d:22:13:41:
                    c9:49:ea:7c:f9:63:3e:f9:fb:3d:c6:66:fa:77:41:
                    9a:83:3e:d1:1b:33:0d:1c:5b:d3:57:35:1c:72:3e:
                    65:e0:89:53:52:15:04:69:b8:ea:6b:7a:80:ae:e2:
                    0b:8f:dd:cc:0a:2f:9a:19:46:6e:2c:7c:7a:e9:dd:
                    bf:3d:b2:f5:37:ba:46:ca:e2:58:bb:a7:64:8a:1d:
                    b2:9b:8f:8c:07:5c:38:49:43:ca:18:38:d2:04:30:
                    cc:99:7e:3c:bb:ba:5c:cf:48:57:2a:f6:a6:ea:10:
                    8b:49:43:4f:02:82:c7:bb:c3:70:28:f8:a1:5c:54:
                    76:26:2e:12:75:71:b8:81:bc:8c:f1:3e:b4:19:84:
                    17:4a:47:c3:ec:be:fe:b9:6b:74:0f:44:08:ca:a5:
                    c1:d1:66:7f:6f:5f:e8:18:a4:2e:b9:93:bd:8a:9e:
                    8c:2c:47:c0:13:53:cd:a4:be:19:02:cd:7b:16:28:
                    af:30:3c:9b:ca:f7:b6:61:b5:73:f4:a3:b0:e9:99:
                    2d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:34:66:33:B1:69:F6:37:F7:4D:C3:74:8E:89:33:1D:94:DF:CB:16
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531633a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:51c::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:35:18:7d:d8:64:04:42:7b:e9:c9:70:a5:a8:df:90:f9:22:
         ea:d9:74:14:99:32:bc:d4:af:91:03:b3:83:23:1b:3b:d9:3a:
         73:ca:22:80:1a:bb:9d:35:8a:33:25:11:5a:72:7d:fa:24:54:
         7c:9c:64:fd:32:e8:b1:5b:93:b2:b0:36:e5:82:0b:ae:53:48:
         94:13:6c:15:d8:7a:2a:4c:65:7a:e4:1b:ea:9a:a6:88:4d:bc:
         4b:a0:34:3a:07:ac:5e:43:45:3c:c3:ae:6a:f9:a8:e4:46:f0:
         6f:fc:c1:1f:21:76:f2:e3:34:27:ec:d4:b8:3e:db:b5:cf:11:
         2e:90:bb:55:39:ee:7c:93:b6:a5:12:a4:75:5f:70:17:ab:9e:
         11:0c:50:6f:77:6b:cc:44:84:ac:c8:42:63:fd:9b:0e:a6:51:
         54:c7:1b:bd:11:8c:4a:3b:33:96:30:a3:da:64:1e:63:05:a6:
         08:a5:75:a8:a1:e0:b8:fd:e2:70:74:3b:30:25:e5:c1:c3:d3:
         31:f0:87:f7:f2:d3:5c:9b:f8:07:db:6c:5c:a6:0e:c5:c6:15:
         8d:59:25:8f:60:52:34:f4:d2:37:52:af:5f:b7:dc:5f:60:fe:
         d6:f5:9c:c6:bf:56:f2:17:4e:92:08:d5:4c:76:51:ad:7e:18:
         80:e5:52:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:44:07 2026 by rpki-client