Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          FDv6NcXhYlCbXsGoiEl5ZyqvqqROFvHy8dTwGvRKFhU=
Subject key identifier:   68:1D:BA:A3:EE:96:FC:A4:9C:AF:06:18:C2:91:26:30:07:32:D6:22
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       22BA35B143B2B9BC3138C91FE891A1E68FF73F5A
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 06 Jan 2026 19:02:22 +0000
ROA not before:           Tue 06 Jan 2026 18:57:22 +0000
ROA not after:            Tue 05 Jan 2027 19:02:22 +0000
asID:                     264824
IP address blocks:        2803:e360::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 20:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ba:35:b1:43:b2:b9:bc:31:38:c9:1f:e8:91:a1:e6:8f:f7:3f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Jan  6 18:57:22 2026 GMT
            Not After : Jan  5 19:02:22 2027 GMT
        Subject: CN=681DBAA3EE96FCA49CAF0618C29126300732D622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:e7:0b:9f:4c:fd:e6:5b:16:67:a3:5d:c9:
                    c9:21:8a:ff:8c:dc:b0:d5:72:32:bf:16:75:32:41:
                    46:60:6f:2c:59:9e:fd:70:b3:e4:c0:b1:9e:d1:5a:
                    66:79:8e:4a:11:63:c7:61:e5:d7:af:80:fd:1a:d7:
                    71:9b:b7:a2:55:c3:3b:1f:aa:75:35:ee:d7:74:4b:
                    71:10:c3:e9:b7:1b:d8:8c:47:54:86:4b:50:8e:5b:
                    e1:60:a4:b3:b5:83:07:5a:71:08:6c:2a:85:e6:db:
                    8a:e8:00:be:58:f2:d9:8d:2e:6e:de:90:be:05:58:
                    75:90:99:05:93:31:b2:b0:4f:a7:23:a0:e1:bb:3a:
                    95:1a:a2:f2:9b:b0:a9:37:62:00:05:ab:87:d5:95:
                    1b:db:7b:1c:5e:1f:49:25:b2:64:53:88:4c:77:33:
                    ef:19:2a:e9:4a:67:5a:af:e5:7e:38:f4:06:6e:7d:
                    0b:b7:4e:d1:0e:c9:e2:e3:3a:14:1d:3a:3e:91:45:
                    be:5a:9f:bc:99:fc:d6:fc:f7:0d:f0:66:80:a8:42:
                    1b:10:03:90:07:2b:b1:0b:0e:bf:75:da:9d:dc:8d:
                    49:34:96:69:5f:84:29:81:e4:12:28:7c:0e:2c:de:
                    f1:2c:de:b6:12:2c:aa:52:ef:24:90:17:9e:41:47:
                    7d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1D:BA:A3:EE:96:FC:A4:9C:AF:06:18:C2:91:26:30:07:32:D6:22
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:67:03:d4:89:87:1e:af:2a:f9:23:0f:c8:c7:78:98:53:65:
         de:ec:39:35:dd:6b:0e:e6:a0:ff:1d:a3:89:4c:94:d8:eb:4b:
         3f:39:55:2a:a9:91:e8:64:79:51:a7:21:90:70:d2:38:ca:e6:
         f6:47:e8:a0:22:1f:42:72:16:f4:1c:24:92:66:18:dd:83:75:
         3d:c5:45:6a:eb:e5:52:b2:ea:c0:27:c2:a0:e1:00:88:50:2b:
         e2:cf:b4:37:82:47:78:a2:20:bd:96:f9:89:af:9d:2f:59:2c:
         e4:ea:f8:75:7e:78:4e:64:ff:e2:98:43:7c:8f:07:31:96:14:
         52:fb:e8:c4:8a:7d:a5:27:72:2f:c6:9b:e9:80:a9:1b:93:20:
         0f:df:a5:6f:53:dc:12:15:47:39:9d:67:5e:74:d9:d2:2a:5a:
         45:ec:07:05:18:4e:80:c7:3c:6e:57:6e:1a:30:7a:f5:d4:e4:
         34:0e:53:2f:92:14:aa:63:e4:81:1b:79:88:58:49:3a:64:05:
         11:e8:de:e1:67:9d:e2:de:5e:a6:b6:97:b7:97:4c:1c:d2:20:
         44:93:64:94:d3:2a:aa:f2:22:82:39:a5:e7:a6:73:08:03:44:
         24:1e:aa:14:81:d5:9f:c1:2c:60:66:2b:1e:c3:08:18:2c:62:
         fa:b6:12:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:44:50 2026 by rpki-client