Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3330303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a3330303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          n8qDtcedL0M+ER/x9YDEcWoPrlPJqdlFjsHEF6Rn4wA=
Subject key identifier:   7B:44:7E:B1:17:F2:6C:96:16:32:2B:D6:1C:07:25:73:40:42:4B:EB
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       3761DD405777D195AFCFA34747709688B16244AA
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3330303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 06 Jan 2026 19:02:22 +0000
ROA not before:           Tue 06 Jan 2026 18:57:22 +0000
ROA not after:            Tue 05 Jan 2027 19:02:22 +0000
asID:                     264824
IP address blocks:        2803:e360:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 20:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:61:dd:40:57:77:d1:95:af:cf:a3:47:47:70:96:88:b1:62:44:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Jan  6 18:57:22 2026 GMT
            Not After : Jan  5 19:02:22 2027 GMT
        Subject: CN=7B447EB117F26C9616322BD61C07257340424BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:81:85:49:37:4b:e3:e9:5c:c6:95:4f:18:
                    23:b8:94:f6:c4:f3:e0:00:9b:53:72:e2:f2:56:e3:
                    69:9e:c2:26:1e:9b:42:5d:77:1b:ad:37:6c:ed:80:
                    12:36:76:1e:6f:0d:52:d9:ea:40:60:f2:74:19:a0:
                    bc:53:58:f1:e3:40:29:41:e1:77:d6:32:c0:b0:d1:
                    bf:1a:f4:4b:2a:03:1e:cf:5c:5f:a2:72:63:c9:6f:
                    74:50:a7:65:16:3a:13:95:95:2b:ec:2d:fc:e1:ef:
                    8e:df:99:d9:d1:94:d5:68:b5:82:a5:45:25:5d:45:
                    48:36:e1:5a:e8:3e:69:f3:64:81:8a:3e:74:49:9c:
                    39:16:2c:6d:c7:98:99:ed:5a:ab:ef:4e:a4:c7:c3:
                    45:0d:32:26:e7:78:82:ac:2d:9f:9b:d8:af:47:0e:
                    c4:07:95:b6:aa:e0:59:13:27:42:d0:fc:23:aa:36:
                    fb:c9:7c:b1:41:7e:6f:d2:85:76:9a:02:a7:88:c3:
                    38:a8:8b:87:3a:ba:e6:42:41:45:e3:c5:48:bc:47:
                    aa:93:9b:06:5d:71:4d:59:12:6f:44:c8:eb:f8:f9:
                    be:66:ca:9c:b0:f5:f3:c4:98:73:67:2d:6b:57:ea:
                    b9:8c:f4:11:44:bf:45:e6:1d:69:af:24:10:c0:27:
                    20:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:44:7E:B1:17:F2:6C:96:16:32:2B:D6:1C:07:25:73:40:42:4B:EB
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3330303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:ae:7c:f0:b2:cb:b9:7c:43:3d:79:b7:b9:6c:2d:bb:2f:01:
         c7:a8:2e:48:35:63:7c:f0:ae:db:85:93:62:bc:23:5d:76:d2:
         bf:f5:40:02:a7:fd:e0:78:b3:7b:ea:ec:af:8a:2c:42:cf:56:
         7e:04:6e:95:5f:28:b4:3f:fb:cc:f1:aa:68:da:18:75:61:7b:
         39:59:b3:e3:d8:fb:6f:30:c9:dd:7a:35:b4:55:40:a2:3c:82:
         08:7c:cc:6d:2c:c5:8d:91:55:ae:48:71:a9:25:fd:66:72:bd:
         8f:d4:07:f0:34:4f:30:41:9f:53:55:be:90:c7:7d:e7:e4:83:
         7b:a4:fc:3b:29:0e:13:db:2c:7e:3c:d1:3f:fc:1f:82:88:68:
         f6:8c:3a:db:22:12:98:86:ff:7e:11:cb:92:46:f8:b6:bb:7e:
         6f:b0:f3:db:7a:67:2a:64:eb:44:eb:27:4b:47:14:c5:43:99:
         71:46:5e:65:b8:71:85:11:e9:f7:2c:3d:c0:11:55:8c:e0:fc:
         48:15:95:76:bc:5b:ca:f7:76:d3:1d:5b:02:4c:f7:0a:50:59:
         87:55:96:20:bc:9d:44:8b:ca:d1:39:d0:1a:9b:14:68:aa:08:
         ac:ee:b8:db:fc:f8:52:15:c8:dd:6c:a8:39:e7:94:0a:bb:6a:
         3e:56:21:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:19:31 2026 by rpki-client