Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a343030303a3a2f33342d3438203d3e203133333335.roa
File:                     323830333a663830303a343030303a3a2f33342d3438203d3e203133333335.roa (raw, json)
Hash identifier:          9xKNAorvSAIxe8vlUvmqdpJLJL3E0+qIyU57AIKGBb0=
Subject key identifier:   96:AB:F0:4F:D7:81:95:1D:1B:19:EB:C5:06:F2:F2:BA:7E:C2:34:D6
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       41EED8837C1FD9CDA515338413557751BD2C43A4
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a343030303a3a2f33342d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:00 +0000
ROA not before:           Wed 27 Aug 2025 16:15:00 +0000
ROA not after:            Wed 26 Aug 2026 16:20:00 +0000
asID:                     13335
IP address blocks:        2803:f800:4000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ee:d8:83:7c:1f:d9:cd:a5:15:33:84:13:55:77:51:bd:2c:43:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:00 2025 GMT
            Not After : Aug 26 16:20:00 2026 GMT
        Subject: CN=96ABF04FD781951D1B19EBC506F2F2BA7EC234D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:33:f4:6b:ae:16:92:8a:c5:66:ed:92:96:
                    a6:b8:4d:34:b2:50:68:ad:2e:af:87:97:a4:c2:6a:
                    5c:dc:4f:c8:53:92:18:9f:c3:16:47:04:62:ee:41:
                    36:27:c9:02:04:ca:10:90:af:e6:f7:60:3e:92:0d:
                    16:e6:ab:63:71:99:95:90:27:c0:86:33:03:f3:61:
                    91:a0:aa:4f:92:9f:a2:1d:f7:6a:a0:9f:e2:90:5e:
                    2d:66:12:51:ad:69:d4:38:92:ca:c3:d4:0b:19:f7:
                    e6:31:69:27:ee:fb:d2:0b:1c:8a:32:77:39:72:d2:
                    19:b6:0b:10:28:d9:2c:1f:2f:14:d4:95:16:66:e4:
                    08:2a:f8:b7:42:3a:5b:f8:ec:ab:ac:74:1f:47:39:
                    95:02:08:11:60:d7:26:6c:d0:f6:07:f3:6f:32:c2:
                    6e:50:98:b2:54:dc:ee:1c:9c:29:02:6e:59:84:57:
                    46:53:e0:93:e0:40:22:62:52:f6:f8:ee:13:50:69:
                    6a:f8:7e:2f:d7:f0:0b:12:c8:ec:a2:a0:b7:32:11:
                    97:86:ef:00:2d:fc:fa:79:07:96:38:9f:43:ed:72:
                    0a:ac:46:fc:5e:86:7f:d5:99:1b:37:3c:c7:93:d4:
                    aa:0d:85:0b:5f:82:31:80:4a:cf:4c:1b:44:71:10:
                    0b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AB:F0:4F:D7:81:95:1D:1B:19:EB:C5:06:F2:F2:BA:7E:C2:34:D6
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a343030303a3a2f33342d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b1:2c:ac:01:db:26:33:5f:9c:e0:a9:d2:8e:d2:5f:f7:aa:d3:
         d7:52:f5:a4:69:33:e3:c0:dd:80:41:59:3e:c4:ef:24:c2:c7:
         58:5f:25:ed:90:96:2c:43:64:b1:0e:80:55:2f:70:84:a3:0a:
         ee:18:f2:0e:7e:f0:2f:7f:5d:a4:88:27:29:32:5f:52:af:2f:
         fb:89:00:ee:3f:10:00:dc:8a:ac:1e:40:43:7f:63:77:55:5b:
         38:77:0c:80:f1:13:8b:15:41:ae:40:24:3a:e7:d5:13:8e:fc:
         99:0c:73:34:1c:f9:eb:a8:80:d0:83:6b:7f:4b:a0:69:7f:27:
         80:d8:22:6e:f7:8e:84:bb:35:49:a1:cc:7a:88:97:f8:ed:84:
         e3:3d:e8:67:b3:3a:d5:8e:b0:90:59:05:93:ef:b1:e5:0c:05:
         8b:94:20:a6:37:3d:5b:64:3b:fd:83:74:6e:ba:74:1b:58:73:
         49:19:c5:39:d7:c4:38:ec:58:92:a0:70:67:00:ab:c9:20:1b:
         f9:1f:73:76:c8:87:81:70:40:6c:a3:3d:a5:fa:4a:61:a0:2e:
         9f:3e:6f:76:63:2e:99:49:b0:42:05:5f:af:c2:a8:5c:85:be:
         2d:0e:3a:57:9b:bf:06:3f:fa:ed:0e:55:a3:5a:81:f8:eb:0d:
         1b:54:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:53:26 2025 by rpki-client