Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a313030303a3a2f33362d3438203d3e203133333335.roa
File:                     323830333a663830303a313030303a3a2f33362d3438203d3e203133333335.roa (raw, json)
Hash identifier:          Iod+neHrhnomS31GlPU/iFlfzvq65fXcUfh/3Q7Wchk=
Subject key identifier:   4C:20:DB:1E:95:AF:4C:00:B5:FB:20:8E:D7:FD:75:DD:AD:AB:9E:9E
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       03C5751AFCA623608276E6C996A7A19CCD5DC0FA
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a313030303a3a2f33362d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:09 +0000
ROA not before:           Wed 27 Aug 2025 16:15:09 +0000
ROA not after:            Wed 26 Aug 2026 16:20:09 +0000
asID:                     13335
IP address blocks:        2803:f800:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c5:75:1a:fc:a6:23:60:82:76:e6:c9:96:a7:a1:9c:cd:5d:c0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:09 2025 GMT
            Not After : Aug 26 16:20:09 2026 GMT
        Subject: CN=4C20DB1E95AF4C00B5FB208ED7FD75DDADAB9E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d2:de:3d:3e:0d:1e:49:52:1a:fe:25:bb:d7:
                    98:73:de:1e:b5:43:a0:7e:09:b2:b8:b2:d7:33:85:
                    cd:2e:04:ac:c3:f7:4f:76:8d:c5:25:c6:7f:48:c7:
                    d5:72:42:ab:67:33:eb:fd:0a:56:cc:c9:6a:b5:c6:
                    eb:6b:de:94:b0:c9:dc:5f:e1:eb:0f:74:03:10:2c:
                    69:c4:b4:fa:39:23:44:22:d8:e2:07:93:bb:99:f9:
                    f0:1f:37:10:fa:a5:5b:81:ef:a4:3b:b5:62:5b:6a:
                    7b:f4:3d:69:a8:66:1d:e5:65:95:3e:5a:72:86:03:
                    bd:db:6c:87:a9:ab:08:e0:38:cb:64:60:a7:87:25:
                    ae:d2:c2:55:42:07:3f:f5:67:4a:0b:1e:b1:0c:f8:
                    db:bf:c3:90:94:f7:26:0f:6c:10:0f:2e:1d:bd:9b:
                    05:d1:2b:85:5f:d3:f0:cc:6e:a7:a7:60:0f:4f:ff:
                    7a:fc:3a:89:44:2f:61:81:cf:0e:06:96:ad:58:37:
                    b3:f5:41:78:fa:db:de:d7:ab:c8:01:68:84:a9:72:
                    f0:95:e0:ce:3e:fb:be:7a:87:de:c9:8b:b0:cd:c1:
                    f1:af:ad:4f:b0:ca:55:68:55:5b:a8:7c:a7:26:6a:
                    ed:5d:e4:e3:96:ce:85:5a:0f:7f:31:7d:a9:8c:85:
                    9b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:20:DB:1E:95:AF:4C:00:B5:FB:20:8E:D7:FD:75:DD:AD:AB:9E:9E
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a313030303a3a2f33362d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         51:8d:d2:d7:2f:d1:c1:64:39:93:2c:ad:99:a3:29:c9:df:d3:
         7d:db:a0:c5:f4:14:68:0e:48:e9:a1:3f:39:88:2e:52:b8:7e:
         dc:28:10:26:8a:f4:86:e9:50:c8:dc:c9:ec:25:04:fd:56:4a:
         5f:8d:ee:32:5b:02:b3:bd:5d:fc:3f:1b:55:cd:21:d4:64:90:
         fc:b4:c7:68:0a:a9:00:31:fd:45:95:7f:a0:47:67:33:8c:fd:
         da:18:68:fb:c2:14:c8:55:3a:56:e4:78:47:c3:3d:b3:58:dd:
         8b:5c:33:44:ed:01:dc:9c:3d:61:70:d4:cb:f6:10:1d:c3:0b:
         33:a5:e6:5e:f7:69:23:84:ae:40:4b:42:81:4b:bc:73:f1:8e:
         f6:7b:53:57:5a:2d:72:f9:69:60:6c:f3:8b:4c:b8:5d:ac:03:
         a0:89:25:df:8c:50:bb:45:3c:f8:b9:da:dc:24:f0:aa:ab:b6:
         dd:c0:ea:d6:39:da:ba:af:7a:d6:42:89:cf:66:75:83:84:df:
         e6:53:b3:ed:a0:0f:51:7b:68:88:20:8e:58:a0:31:bf:dc:b3:
         84:a8:88:c2:86:3e:2f:ed:0b:33:ce:7e:24:9c:7b:47:a6:56:
         5e:dd:26:33:60:c4:75:98:fd:7c:77:5d:93:20:1d:a9:94:20:
         ab:ce:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:45 2025 by rpki-client