Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a313330303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a313330303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          qhMtcndKq10KdJ8JEA+XBlShLTlmHbJ31xThZ/XogyQ=
Subject key identifier:   93:42:C7:32:83:B6:56:B1:BB:0B:88:EE:8F:16:95:A1:25:6E:22:0F
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       6DC6C8725B5A26259C4C983F2DF5D1E4E8C9FE11
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a313330303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 06 Jan 2026 19:02:23 +0000
ROA not before:           Tue 06 Jan 2026 18:57:23 +0000
ROA not after:            Tue 05 Jan 2027 19:02:23 +0000
asID:                     264824
IP address blocks:        2803:e360:1300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 20:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c6:c8:72:5b:5a:26:25:9c:4c:98:3f:2d:f5:d1:e4:e8:c9:fe:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Jan  6 18:57:23 2026 GMT
            Not After : Jan  5 19:02:23 2027 GMT
        Subject: CN=9342C73283B656B1BB0B88EE8F1695A1256E220F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6b:e1:28:df:fb:42:a0:1f:41:42:f1:38:99:
                    a6:3c:c9:dd:50:23:fe:e1:db:d7:7b:95:cc:29:88:
                    3a:78:ff:1e:7f:53:2a:8d:f2:11:cd:c1:0a:ed:d1:
                    19:f5:f9:95:be:68:12:a2:d9:6e:7f:e8:af:fc:fc:
                    04:0c:27:1e:24:3a:a6:6d:02:94:b1:4d:9c:02:1e:
                    de:fd:80:ea:7a:9d:59:8e:0b:24:67:5a:be:fc:0a:
                    52:54:ed:2e:a9:32:ac:df:80:51:a2:b2:a4:01:74:
                    1d:d8:da:59:35:1a:90:48:05:66:52:11:5e:ba:34:
                    7d:ee:75:23:57:f6:d2:a1:ca:b7:49:04:9b:32:70:
                    2c:ce:fa:36:44:12:f3:e3:1a:2b:66:ec:e1:41:00:
                    a0:d1:10:a3:38:2c:6e:b7:ca:ed:96:91:63:bf:5b:
                    b8:3e:e0:ef:40:94:d2:36:d6:48:a7:63:52:85:c3:
                    45:3a:c5:bb:ad:16:17:0b:3d:da:93:12:04:e1:f3:
                    86:e7:7f:84:c3:82:8c:12:10:79:c3:d3:63:7e:b8:
                    b4:fa:68:ff:62:d3:c7:73:44:22:9c:d0:4a:af:84:
                    45:e3:c0:02:86:2c:19:24:6b:63:f3:37:f0:b5:f7:
                    4f:93:41:a5:43:23:aa:0d:7f:2f:53:aa:10:79:10:
                    68:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:42:C7:32:83:B6:56:B1:BB:0B:88:EE:8F:16:95:A1:25:6E:22:0F
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a313330303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:c4:97:4b:ad:e7:b3:e4:6d:b3:1f:29:ed:f2:91:f6:72:23:
         4e:a9:03:a9:57:8c:6a:46:ea:61:d4:97:24:cd:cc:9c:bc:aa:
         d3:04:a1:86:08:ef:6f:66:58:ec:46:03:69:12:aa:3a:24:8e:
         16:ca:82:8a:a3:59:75:df:9d:0b:b9:10:9d:5e:5b:8f:a4:c1:
         50:e5:2c:b5:d5:c8:ed:cc:7e:68:7f:25:4f:8f:72:cc:7d:48:
         fd:49:db:dd:b8:6a:8f:21:a4:46:76:bf:43:60:53:e0:d8:19:
         ea:56:3b:a1:19:0a:d1:2e:9d:c4:62:84:7b:c9:51:15:dc:21:
         58:1a:3b:91:56:25:e5:f0:1a:55:84:2a:28:b7:02:5a:aa:76:
         d7:4c:92:0c:dc:a0:0d:36:ca:98:fb:19:83:67:41:b8:af:bb:
         be:94:ad:cd:33:20:5a:79:a4:a3:8b:45:bd:ef:57:50:6b:07:
         37:ae:3f:17:26:98:2e:5a:0f:86:b1:e0:3f:e5:f3:e3:57:a2:
         cd:ac:37:2e:d1:3a:07:b4:93:85:7e:19:77:22:f1:74:b3:e2:
         41:49:48:af:0b:cd:74:51:f4:bb:9f:85:bb:cb:5a:dd:fc:96:
         42:47:fc:22:67:9f:13:f7:78:e8:74:af:90:b4:3c:c1:df:9b:
         84:f2:72:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Mar 3 07:19:27 2026 by rpki-client