Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6430303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a6430303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          ctSf/1mF7LCEZsOSruCYrw30m802EGTzkmOpOahY+08=
Subject key identifier:   54:B2:D3:C4:9F:CF:02:F9:C0:24:58:3D:AA:1B:46:DA:3A:25:69:EE
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       6CB8B2B1AD2202C42ECA0A53CC9D5B17083ECF0F
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6430303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 06 Jan 2026 19:02:24 +0000
ROA not before:           Tue 06 Jan 2026 18:57:24 +0000
ROA not after:            Tue 05 Jan 2027 19:02:24 +0000
asID:                     264824
IP address blocks:        2803:e360:d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 20:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b8:b2:b1:ad:22:02:c4:2e:ca:0a:53:cc:9d:5b:17:08:3e:cf:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Jan  6 18:57:24 2026 GMT
            Not After : Jan  5 19:02:24 2027 GMT
        Subject: CN=54B2D3C49FCF02F9C024583DAA1B46DA3A2569EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:7b:55:6e:60:b0:d1:39:7c:e3:ad:ed:9d:
                    74:45:eb:de:c1:da:02:20:87:68:56:92:c2:37:45:
                    dc:51:65:4f:0a:04:88:c2:14:6e:a3:be:f2:e0:20:
                    dc:71:ec:2b:11:51:65:d0:11:41:55:d6:03:e9:54:
                    ef:98:4b:53:44:1d:0a:e3:ff:61:ed:77:77:a1:5d:
                    60:3b:c3:a3:c4:e7:55:54:be:17:31:9a:84:55:89:
                    7e:c0:3d:25:92:ca:c8:e6:81:f8:89:1e:77:c5:56:
                    08:05:54:21:b6:d3:bf:9f:96:46:a2:48:33:9e:cf:
                    31:45:87:e2:bb:2a:48:6e:08:ef:45:fd:21:77:d1:
                    e4:b7:fa:6d:fc:f1:15:68:2a:ca:31:68:78:62:da:
                    03:d6:fb:35:df:5f:ef:da:dc:49:70:e9:ed:44:18:
                    9e:21:57:2a:9d:b4:32:fa:6f:96:70:84:42:27:0b:
                    4d:89:f8:b2:9d:63:ed:e2:24:1f:d5:65:87:27:da:
                    66:23:1d:83:4a:d8:f4:ba:e7:26:7c:4a:5d:57:5f:
                    24:f2:bd:98:83:04:f9:8a:e4:3d:79:44:73:4a:6b:
                    29:f1:25:1b:38:08:a5:75:50:ef:27:fd:68:cd:57:
                    46:77:d8:64:3f:af:54:da:8f:c3:4c:4d:12:0c:7e:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B2:D3:C4:9F:CF:02:F9:C0:24:58:3D:AA:1B:46:DA:3A:25:69:EE
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6430303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:d4:72:23:9c:e6:78:7c:fb:19:f6:67:2d:28:5c:81:e5:c6:
         98:5a:19:37:24:82:76:fe:fa:d4:dc:4b:1a:7a:cf:8f:56:2c:
         87:a4:01:93:e7:60:b4:c3:af:0a:2b:fc:8b:df:57:97:79:84:
         a8:8c:7c:ed:2e:6a:49:d4:b7:c9:97:a1:92:c3:9c:7f:d0:57:
         17:af:16:80:e1:c8:ad:76:d8:40:66:4c:8a:e8:c5:94:c8:48:
         18:54:a2:ed:f0:49:62:68:4b:fc:20:55:74:51:0f:6d:0d:3f:
         c7:2c:4d:4a:3c:88:19:a0:a5:44:8d:2f:6d:00:64:95:a1:71:
         63:05:6c:ec:48:d2:f3:fe:0b:74:04:9f:28:7c:56:47:c3:10:
         ba:e1:f0:49:ee:66:09:65:47:61:81:0b:e5:6c:e2:f0:9e:2b:
         fd:fc:c0:a2:fe:d6:33:9e:a7:32:31:e8:ea:e2:a3:51:91:0d:
         71:15:b8:89:5a:3d:41:2c:03:c0:ce:c8:b8:9e:9f:0c:e1:77:
         7c:ad:4b:d1:00:f8:2b:f0:55:64:d0:14:cc:d2:16:e4:de:6d:
         56:d8:05:b2:56:84:43:2e:ed:9f:3a:fe:60:de:38:e6:d2:aa:
         5b:88:60:e5:2b:f9:af:82:4a:49:15:5b:6a:d4:16:58:85:76:
         91:69:4d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:48:12 2026 by rpki-client