Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a323030303a3a2f33352d3438203d3e203133333335.roa
File:                     323830333a663830303a323030303a3a2f33352d3438203d3e203133333335.roa (raw, json)
Hash identifier:          ZgmhnRrpMYOAVWp67oFRkpkEPowRvxXIrHQ7VGv6ek8=
Subject key identifier:   15:D5:52:2C:41:CD:E4:47:1A:E9:BA:D3:B6:0A:71:DF:13:E5:4B:A1
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       754D90136D21F347BD56C8F4FDA7A666EFEE6339
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a323030303a3a2f33352d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:00 +0000
ROA not before:           Wed 27 Aug 2025 16:15:00 +0000
ROA not after:            Wed 26 Aug 2026 16:20:00 +0000
asID:                     13335
IP address blocks:        2803:f800:2000::/35 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4d:90:13:6d:21:f3:47:bd:56:c8:f4:fd:a7:a6:66:ef:ee:63:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:00 2025 GMT
            Not After : Aug 26 16:20:00 2026 GMT
        Subject: CN=15D5522C41CDE4471AE9BAD3B60A71DF13E54BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:c5:cc:ef:83:bc:1a:e2:1b:98:4a:ed:5d:
                    8f:33:c8:de:93:b2:ce:38:3d:dd:aa:a5:38:ea:e8:
                    d9:1d:18:29:1e:f6:12:a0:04:cd:50:84:46:65:59:
                    5c:61:6e:bb:d9:1d:f0:b6:d7:ae:00:ba:7f:7f:6f:
                    e6:ea:97:81:11:e1:de:17:24:01:ec:57:8a:d6:d4:
                    2f:80:70:6c:4d:44:ae:7c:2d:38:41:9e:0c:0a:dc:
                    8f:dd:78:7b:5a:c7:ca:3d:73:ac:80:34:8b:0c:04:
                    b8:0a:72:68:aa:53:e3:e2:7a:40:25:c2:cc:2e:65:
                    0e:9a:1c:3d:99:fd:d4:e3:b9:5a:99:1c:8d:fc:87:
                    68:19:7a:25:69:47:9a:5d:fd:98:e1:bb:aa:2d:2a:
                    7d:cf:58:89:e9:cb:2d:0b:ac:56:b7:c3:fc:26:a8:
                    c8:db:8a:5a:fd:59:a2:bf:bc:5e:94:b3:ca:5e:fc:
                    17:a1:f9:f5:2d:a0:3b:16:e3:1c:fb:ee:eb:bc:bf:
                    0a:5b:1f:74:8b:f9:85:fb:7a:d8:9e:69:f0:93:9a:
                    59:93:a4:a0:89:16:5a:af:e7:69:82:65:9d:fa:38:
                    f8:73:53:07:1a:45:7a:ea:a0:c8:13:dc:c9:86:cb:
                    b4:07:fe:4a:32:7b:a9:c8:20:16:a8:77:4c:f9:74:
                    7f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D5:52:2C:41:CD:E4:47:1A:E9:BA:D3:B6:0A:71:DF:13:E5:4B:A1
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a323030303a3a2f33352d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         15:d3:6f:a4:f4:50:ed:db:71:06:ca:c0:14:a5:fa:7a:75:16:
         20:ae:aa:82:1e:12:68:5c:c5:df:16:1c:44:c0:66:5c:2e:b6:
         33:23:8a:2a:ba:94:7c:72:dd:21:53:5b:14:a7:25:93:4d:0f:
         b9:c8:d9:e2:30:9b:58:34:2a:b5:bd:e2:3a:48:85:91:1c:46:
         30:a4:91:1b:9f:af:5d:94:a8:b5:0e:ec:d9:3e:6b:80:11:96:
         2c:fe:0d:55:19:b5:91:e1:7e:7e:1f:11:92:bf:21:04:8d:60:
         d4:e3:68:86:21:60:b4:f8:b5:9a:63:43:a3:f0:89:03:6c:f9:
         e3:5b:be:7f:a9:23:53:54:ec:08:a3:fc:b2:43:2c:b4:b7:f2:
         51:8d:22:70:d7:d8:e7:68:0d:c1:e0:1a:c3:62:fa:a2:51:e0:
         25:92:b3:b2:06:7c:be:3b:4d:b9:ef:01:1f:d0:ff:06:88:2f:
         9c:f6:5b:de:cf:38:7f:01:31:7c:e3:e7:ce:87:03:d6:4e:81:
         3f:19:85:a1:02:82:ae:3b:21:b1:39:fe:cf:9a:36:8a:60:a5:
         71:39:21:27:09:26:df:ec:07:91:8c:1e:31:c6:7a:60:34:7c:
         02:73:d9:c7:db:c3:fc:8e:31:4d:c9:aa:b6:ce:e2:6e:5d:2c:
         9a:80:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:45 2025 by rpki-client