Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6630303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a6630303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          A6Ylrf1AzEvfXn7/Qvh+NNL0j5/gvm2/C1Ieeou10dw=
Subject key identifier:   0D:1C:22:A0:2E:FB:8B:68:4D:5A:A6:7F:68:C1:08:A7:CE:54:37:BA
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       5A5FF75E66CB1B86C753D58C25BD98C42F03DCDC
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6630303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 06 Jan 2026 19:02:24 +0000
ROA not before:           Tue 06 Jan 2026 18:57:24 +0000
ROA not after:            Tue 05 Jan 2027 19:02:24 +0000
asID:                     264824
IP address blocks:        2803:e360:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 20:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5f:f7:5e:66:cb:1b:86:c7:53:d5:8c:25:bd:98:c4:2f:03:dc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Jan  6 18:57:24 2026 GMT
            Not After : Jan  5 19:02:24 2027 GMT
        Subject: CN=0D1C22A02EFB8B684D5AA67F68C108A7CE5437BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:b9:58:88:e4:23:5b:4c:67:9f:06:6e:0f:
                    52:66:da:1c:0b:16:d6:35:ef:dd:35:91:75:ab:b5:
                    40:3c:8a:11:ce:55:ef:b6:2e:90:9d:92:a8:64:73:
                    45:9a:ec:60:59:75:9d:39:25:bd:03:2e:4b:33:cb:
                    e9:bc:11:6d:91:91:60:2b:80:a6:3c:3d:21:02:80:
                    33:7f:e9:99:9c:07:c2:2f:43:94:84:5a:a2:91:24:
                    ce:8d:30:e6:e0:3b:54:94:2f:f3:c6:06:b7:df:18:
                    45:a7:0d:7c:96:2a:1f:9d:f2:99:ff:d8:de:48:8e:
                    61:59:57:0e:81:8a:22:91:20:d4:f9:63:ef:a9:76:
                    7a:59:eb:cd:54:17:c0:58:18:1c:4c:0d:f7:aa:91:
                    36:aa:ad:ae:80:59:21:10:13:4e:2a:86:27:d4:b7:
                    29:2e:6e:fc:34:11:d5:19:3d:58:3d:aa:3b:97:5f:
                    97:5e:01:27:4d:d1:39:c1:27:4e:66:2f:ec:09:ec:
                    e7:e3:80:7b:9c:8b:bc:5c:a7:2c:cb:d6:2f:2d:10:
                    0f:cb:93:08:ae:c0:62:6e:ea:ce:13:2a:d3:2c:a8:
                    b7:75:e8:e5:70:f0:43:f6:37:48:24:c8:ed:a2:42:
                    0d:88:bf:2a:e1:df:0a:7b:70:df:d9:ca:58:36:78:
                    ee:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1C:22:A0:2E:FB:8B:68:4D:5A:A6:7F:68:C1:08:A7:CE:54:37:BA
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6630303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:f1:c8:9d:01:83:b2:c9:3a:3d:fc:30:3a:b3:75:6c:6a:ae:
         ba:38:8d:af:5d:f3:7d:5d:25:ba:67:6c:23:b3:c2:b6:09:af:
         7f:54:37:86:42:29:cd:71:f6:c2:66:69:a6:41:7b:2e:c9:b8:
         8e:89:71:2a:8a:55:77:16:d0:02:b3:04:0b:2a:23:41:40:b1:
         78:06:11:fc:69:80:9e:c1:8a:21:c4:3e:56:3b:22:62:39:21:
         56:84:3b:56:ca:dc:32:d0:8d:ca:50:3f:38:b2:f7:e1:ba:e9:
         97:46:e7:57:2e:91:60:d0:02:d8:0a:5f:32:f9:cf:9c:4b:da:
         7d:c9:94:d5:23:ca:a4:45:7e:6a:3c:1d:9b:25:25:a3:06:98:
         f1:d3:45:a8:69:f8:a8:da:2d:26:8f:8f:69:1e:df:82:c0:85:
         6a:e1:8d:23:88:7e:8d:46:2d:51:74:72:12:c8:9e:6a:46:86:
         6a:2b:7c:15:d5:7f:71:67:e4:ef:30:92:6b:ca:47:bd:46:5a:
         d3:46:63:fb:14:6b:a0:6d:91:6f:88:06:f9:0f:3b:f7:c9:47:
         88:3b:a8:30:bb:71:08:bf:45:3f:4e:27:b8:f0:e1:07:ee:6e:
         bb:6b:d0:36:af:33:78:b7:eb:a1:d7:02:8f:1a:dd:cc:0d:10:
         45:43:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:19:28 2026 by rpki-client