Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3130303a3a2f34302d3438203d3e203133333335.roa
File:                     323830333a663830303a3130303a3a2f34302d3438203d3e203133333335.roa (raw, json)
Hash identifier:          DJY8Yk6FW9KSeXyyeKpa9K5mmT2xhdWfZlTC/FdKWNk=
Subject key identifier:   F6:FB:04:E3:04:95:43:55:75:7F:EE:09:AB:32:E5:82:DA:6A:27:69
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       74BDE49E8AC4F1828DD972785BBD60E8009CC3FE
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3130303a3a2f34302d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:37 +0000
ROA not before:           Wed 29 Jul 2026 16:50:37 +0000
ROA not after:            Wed 28 Jul 2027 16:55:37 +0000
asID:                     13335
IP address blocks:        2803:f800:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bd:e4:9e:8a:c4:f1:82:8d:d9:72:78:5b:bd:60:e8:00:9c:c3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:37 2026 GMT
            Not After : Jul 28 16:55:37 2027 GMT
        Subject: CN=F6FB04E304954355757FEE09AB32E582DA6A2769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:45:c8:61:f9:68:c8:db:a9:3b:d3:32:a9:38:
                    28:5f:a5:95:df:4c:68:e6:15:ad:b7:f8:70:52:02:
                    0b:03:ac:34:e2:0d:5a:92:94:87:e7:eb:c4:f9:6e:
                    b2:3c:a3:bb:1b:c0:75:46:d5:35:d2:58:1f:b9:ea:
                    c6:d3:43:de:84:d6:ec:4b:99:20:a2:3b:96:93:b4:
                    53:21:5c:70:48:0b:03:a3:65:d6:9e:63:7d:a9:13:
                    68:6d:23:a6:f8:cd:f6:f4:89:44:13:64:42:a6:9e:
                    f5:5a:92:e0:f5:f5:46:a9:86:11:f4:f5:c5:37:fc:
                    8e:75:30:5a:9f:0b:4c:9a:3e:c7:23:82:64:ec:08:
                    97:0a:37:ae:a7:03:ca:63:ea:93:5d:cd:3c:31:15:
                    17:ef:02:3b:c9:9f:b3:a3:70:ad:ba:55:a5:88:af:
                    2f:a9:be:d1:bf:ae:25:25:56:f7:92:65:0c:b5:85:
                    d7:0a:5e:5d:b0:63:c1:56:70:bf:5d:3f:7a:9c:66:
                    63:c0:7b:0b:3f:a8:e9:48:5b:0e:95:b1:cf:dc:16:
                    36:d7:a6:72:42:b2:47:23:e2:e4:22:39:60:2e:b5:
                    26:24:f2:82:78:0c:fa:d4:93:04:4d:bc:af:ca:6c:
                    25:5b:72:78:ce:c6:03:9c:4e:b5:12:98:d3:76:4d:
                    4e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FB:04:E3:04:95:43:55:75:7F:EE:09:AB:32:E5:82:DA:6A:27:69
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3130303a3a2f34302d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:6b:e7:54:82:d6:44:74:8f:04:40:17:52:d8:df:fc:5d:ee:
         64:57:5f:3e:fa:75:22:fc:cd:a7:19:59:45:51:2b:05:79:f3:
         df:1e:84:6f:70:6f:bd:dc:4c:33:76:e6:7e:92:c7:6f:7f:1f:
         5b:59:18:d5:ab:a6:0c:16:3a:2d:64:07:3d:9d:98:7e:66:ad:
         4c:d8:33:9f:57:95:91:9a:b2:b8:5b:e4:94:43:ae:ed:c5:41:
         6b:67:39:9a:f0:ac:ed:60:14:48:91:a8:da:a6:24:1d:c7:5f:
         aa:42:13:43:36:d3:fa:6a:3e:cf:3e:52:14:6e:1a:d0:6a:5c:
         b5:dd:44:49:31:0c:c7:24:ad:85:e6:82:6d:7c:b1:78:22:ab:
         b6:be:c1:c6:a3:a9:73:19:cb:8d:00:01:23:2b:32:a7:a5:4d:
         e8:e3:90:2a:ac:25:d2:0e:76:c3:0d:33:a6:24:6b:e8:9b:ec:
         17:23:d8:17:2b:f7:83:72:2a:ca:70:ba:11:2f:f2:76:dd:e0:
         8d:a0:59:1e:e8:77:2b:f7:02:21:7c:2c:37:18:4a:b6:dc:c1:
         a4:fd:be:2c:e6:fe:09:6b:5c:62:52:1d:7f:69:d5:29:c4:cf:
         f8:f0:c4:50:6f:71:45:42:f3:5f:6b:16:11:e6:70:d4:dd:56:
         10:f2:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:45:58 2026 by rpki-client