Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531643a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a3531643a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          AYwHpspxpH23LGAn8hOEWarCj7yygRfWTwtBjiMz8xI=
Subject key identifier:   D8:F8:37:A9:3C:99:AD:80:B9:AB:A6:39:6A:3C:98:1A:A1:FB:DC:71
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       664A1663B34E0CE3D5BF2FDBAD76585A2272EA26
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531643a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Fri 26 Jun 2026 21:35:08 +0000
ROA not before:           Fri 26 Jun 2026 21:30:08 +0000
ROA not after:            Fri 25 Jun 2027 21:35:08 +0000
asID:                     267823
IP address blocks:        2803:1860:51d::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Jul 2026 14:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4a:16:63:b3:4e:0c:e3:d5:bf:2f:db:ad:76:58:5a:22:72:ea:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Jun 26 21:30:08 2026 GMT
            Not After : Jun 25 21:35:08 2027 GMT
        Subject: CN=D8F837A93C99AD80B9ABA6396A3C981AA1FBDC71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:a3:30:fa:cd:61:82:0d:09:2f:39:c0:36:
                    1d:40:5c:35:0e:76:78:cc:0b:0a:e3:e4:3a:35:7c:
                    2c:5c:e3:8a:2d:ed:e7:74:03:ea:67:fa:23:49:45:
                    d3:26:8e:c6:bf:31:44:7b:5b:d8:74:25:97:d5:48:
                    fd:b7:4e:06:02:b1:5c:de:32:b3:c6:59:9d:ea:e4:
                    fe:35:bb:20:bc:ac:a2:f8:e3:96:f3:dc:cf:f7:b1:
                    b5:a5:18:ac:e0:60:8d:db:d6:07:b8:15:68:b3:ed:
                    43:5f:5c:6b:0d:4c:fb:8f:8e:cb:c6:6c:19:f2:ea:
                    e4:a4:a7:0f:65:04:3f:87:1c:aa:e5:2a:b2:81:26:
                    eb:9a:68:d5:bd:a3:a6:56:a2:10:28:f5:8f:b3:4a:
                    aa:7f:5c:07:43:96:43:38:d1:92:c4:16:d7:a9:7d:
                    73:ef:a4:20:ef:3f:9a:70:7b:9f:55:49:c1:95:67:
                    79:1c:98:09:92:aa:8d:c4:ea:b3:9d:d5:42:60:21:
                    6d:be:90:e5:e0:b8:c0:5b:9d:64:43:83:2b:3f:eb:
                    7d:ce:06:b2:7c:f9:64:ea:1c:d2:05:da:e3:be:d3:
                    95:25:9a:87:34:86:bf:28:55:96:b7:9c:1e:79:10:
                    b6:7c:ea:a0:e6:df:2c:ba:eb:be:87:55:41:91:a6:
                    d2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F8:37:A9:3C:99:AD:80:B9:AB:A6:39:6A:3C:98:1A:A1:FB:DC:71
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a3531643a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:51d::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:7e:d7:5c:b1:e5:8d:fd:d3:76:69:7e:d3:de:44:85:92:50:
         96:c3:51:05:8e:92:2e:17:ae:4f:85:b9:86:0d:91:e0:b4:c0:
         30:a0:82:b2:35:35:70:76:b9:93:29:7c:ea:4e:ec:1c:15:f1:
         58:e3:fb:c8:06:53:30:7d:0d:a6:b9:90:86:62:5a:7d:5a:1e:
         79:2f:04:96:da:e1:cd:1b:4e:a2:27:96:76:50:e5:87:2f:a5:
         89:fa:22:9d:2e:b7:65:b5:50:52:1c:48:06:da:bc:00:b9:40:
         ff:73:59:4f:38:83:d3:c8:b9:7f:dc:c1:a7:65:24:9d:60:ee:
         07:1b:80:8b:15:8d:76:ef:c0:d4:7b:9c:c6:0d:62:65:bf:2a:
         90:81:a6:bc:25:e3:30:11:af:90:65:e5:df:bb:ac:69:fa:56:
         bb:1f:6f:03:63:8d:a6:ed:24:0b:0d:c0:03:1d:d7:88:b9:01:
         43:50:65:a4:f4:34:2f:ed:c4:b3:dc:b8:da:24:d1:80:7f:ac:
         52:a4:0d:53:df:ac:f9:01:da:46:a2:8b:90:b7:08:fe:0e:06:
         c5:a4:91:7c:36:57:4a:44:ac:17:b8:92:fe:43:b5:d4:35:9b:
         1e:a7:19:6a:47:f6:50:7c:d5:35:e7:2d:3f:d6:68:48:a1:89:
         9e:dc:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:44:16 2026 by rpki-client