Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3230303a3a2f33392d3438203d3e203133333335.roa
File:                     323830333a663830303a3230303a3a2f33392d3438203d3e203133333335.roa (raw, json)
Hash identifier:          8i3nTDB4t/eGvGptouOz5c8kTcBYXXdyb6qIULrUvt4=
Subject key identifier:   22:FE:5B:1F:BA:45:F4:09:3D:32:3D:67:4B:AB:7B:D0:CB:DC:E3:B7
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       12C305A9D1574F123D63549D299E3AA50724641B
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3230303a3a2f33392d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:37 +0000
ROA not before:           Wed 29 Jul 2026 16:50:37 +0000
ROA not after:            Wed 28 Jul 2027 16:55:37 +0000
asID:                     13335
IP address blocks:        2803:f800:200::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c3:05:a9:d1:57:4f:12:3d:63:54:9d:29:9e:3a:a5:07:24:64:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:37 2026 GMT
            Not After : Jul 28 16:55:37 2027 GMT
        Subject: CN=22FE5B1FBA45F4093D323D674BAB7BD0CBDCE3B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:08:00:54:ac:18:21:0e:fb:52:87:60:bc:
                    8d:cd:8f:91:39:ac:56:66:63:4e:1c:65:77:fd:85:
                    0c:69:2f:3e:c3:29:ea:eb:f9:5b:bd:41:67:33:ea:
                    31:24:6e:2b:0e:e1:11:ba:b2:28:c7:3f:3a:eb:59:
                    2e:e6:9b:a5:1d:19:2a:c4:bc:49:bc:b0:b5:9e:5f:
                    33:82:32:d5:00:3d:0f:56:6e:b1:c5:cd:be:b7:5b:
                    ee:06:42:fd:3f:e2:7c:80:58:1a:f1:f6:e0:b3:92:
                    c6:96:5e:9d:7b:6e:4b:00:3c:ce:70:14:20:04:0f:
                    70:70:4f:6b:8b:2d:4f:f9:a7:6f:a8:94:da:72:f7:
                    b2:a1:1b:c4:97:5f:ee:6c:8f:36:6a:03:37:54:cd:
                    1b:3a:b1:cd:63:57:4b:21:95:ea:4a:88:a7:2c:1c:
                    81:c2:11:cb:ce:24:92:f9:64:78:08:c6:0b:5a:06:
                    8a:94:55:14:01:dc:d6:77:c0:49:ce:14:23:cc:99:
                    6e:97:e6:36:0f:0c:83:97:eb:30:ee:15:a6:a4:6a:
                    31:71:ee:51:7a:68:bd:e0:82:32:30:aa:39:9a:9c:
                    9f:9b:1d:7f:50:3e:42:e9:97:31:13:2b:0e:22:7f:
                    c3:c4:50:47:b8:62:9f:8f:a4:08:45:b1:0e:a0:48:
                    fd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FE:5B:1F:BA:45:F4:09:3D:32:3D:67:4B:AB:7B:D0:CB:DC:E3:B7
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3230303a3a2f33392d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         5a:e7:07:5f:4d:2b:af:00:2b:05:b7:89:eb:d6:2b:65:42:0a:
         2a:04:cd:db:7e:bc:7c:17:19:45:c0:13:bc:ff:6d:88:bb:56:
         00:2d:c6:89:17:6b:9d:da:7e:7e:52:17:02:0a:10:b5:ff:5a:
         63:1c:21:1e:6a:f2:bf:e3:04:5e:63:6e:17:bd:4f:31:d9:f4:
         f2:27:bc:cf:51:87:e7:ee:9a:08:db:16:61:69:36:6a:de:1d:
         03:84:83:62:74:09:ed:b8:1a:b6:5f:bd:6d:f5:11:aa:c8:1a:
         aa:20:8b:c4:fa:01:08:e1:06:f4:01:fa:03:f1:54:95:67:2d:
         4b:f7:e9:0c:2a:2a:08:53:e5:7e:73:19:cc:6c:1e:c9:18:e8:
         74:74:4f:88:06:e9:df:db:4c:eb:fb:28:18:cf:fd:b0:31:40:
         47:59:14:d1:be:d0:f6:31:d3:74:18:ce:ea:ce:61:8b:b6:73:
         9f:8e:89:da:08:b8:43:86:d2:3d:81:93:66:c2:86:b3:19:a8:
         e3:59:08:24:68:95:83:bf:9a:bf:6d:fc:72:8d:87:e9:53:19:
         45:4e:62:97:b1:bd:62:93:0c:64:5d:61:8c:4f:b5:5c:18:9b:
         25:82:1d:d6:8b:dc:82:3b:8a:e7:ca:53:13:f5:65:88:9b:ab:
         c0:3b:b2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:45:59 2026 by rpki-client