Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35303a3a2f34352d3435203d3e203133333335.roa
File:                     323830333a663830303a35303a3a2f34352d3435203d3e203133333335.roa (raw, json)
Hash identifier:          abJhV5jfdi9uJURoeXTAoCbjsmh4pmpcgEoq8efUxLI=
Subject key identifier:   11:D8:5E:57:5E:A1:3A:4E:8B:20:58:5D:27:88:BD:5C:24:53:2D:04
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       5FE791FDEE1E4F8BC08CB1A210C8F2F2EAA1F644
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35303a3a2f34352d3435203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:07 +0000
ROA not before:           Wed 27 Aug 2025 16:15:07 +0000
ROA not after:            Wed 26 Aug 2026 16:20:07 +0000
asID:                     13335
IP address blocks:        2803:f800:50::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e7:91:fd:ee:1e:4f:8b:c0:8c:b1:a2:10:c8:f2:f2:ea:a1:f6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:07 2025 GMT
            Not After : Aug 26 16:20:07 2026 GMT
        Subject: CN=11D85E575EA13A4E8B20585D2788BD5C24532D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:c4:f1:af:77:ea:9f:b5:a1:4d:b5:f5:b0:
                    23:47:60:0c:31:b2:9c:ca:41:f6:36:3c:84:35:c9:
                    c3:fc:e4:86:ec:dc:6d:4f:96:bc:18:a1:3a:57:fc:
                    a2:ae:5f:4b:15:6d:aa:fe:5e:35:9a:59:d8:7d:29:
                    26:07:0f:10:12:4f:2a:91:9b:5c:b8:8a:ad:88:e0:
                    ee:05:cd:48:a1:01:d7:88:e4:22:a9:be:4d:1b:03:
                    e9:74:66:1d:8e:32:f6:67:4d:30:3f:b4:51:17:8c:
                    ab:62:4e:34:cf:0b:c5:03:a0:61:8f:91:a5:e2:31:
                    c1:f3:cd:f2:48:c6:49:68:db:b1:58:80:0a:2d:0c:
                    fb:b5:d7:8b:e8:8d:30:b4:a7:9e:b9:2c:13:88:43:
                    de:1e:45:65:9a:62:f0:05:80:39:f1:2f:8e:9d:28:
                    fe:33:9f:b4:6a:d3:cc:86:a4:ed:ec:bf:10:ae:14:
                    83:3b:0c:a0:d0:23:9c:2f:a9:27:d0:d7:28:32:de:
                    a8:48:9f:31:9a:21:63:31:fa:45:90:55:4c:a9:fc:
                    64:fa:29:c0:88:10:77:c5:a4:39:54:b8:e1:5e:ff:
                    ae:0a:cb:4d:13:70:da:e8:f4:22:02:90:92:4f:40:
                    33:c9:b0:43:64:c2:33:c0:31:21:c9:01:b8:eb:ba:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D8:5E:57:5E:A1:3A:4E:8B:20:58:5D:27:88:BD:5C:24:53:2D:04
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35303a3a2f34352d3435203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:50::/45

    Signature Algorithm: sha256WithRSAEncryption
         00:7b:aa:21:54:b6:4f:89:d5:23:d5:6e:0a:e5:02:02:c6:67:
         73:ce:56:fe:71:61:5e:2b:f6:b8:2a:db:78:d8:d4:d6:f7:01:
         48:75:5b:c2:53:dc:5c:45:0f:d0:e4:a0:02:55:95:79:8a:bd:
         31:96:90:ea:58:d7:a8:8a:bf:58:9a:81:c3:db:ea:2d:a6:9c:
         89:19:92:2e:89:f9:f5:96:c2:dc:d3:45:5c:98:34:31:42:db:
         a8:2f:01:fa:7d:97:64:f9:04:ef:ff:1e:80:2b:2c:e3:8b:28:
         d1:0d:f8:8c:44:48:fe:52:84:f0:32:22:d3:5c:bd:87:f6:f6:
         b6:0f:c6:3d:5a:34:a7:f0:8b:5c:ad:8e:c3:3c:af:04:a1:3d:
         eb:d0:d5:2d:66:cf:ef:d2:e3:ac:ce:37:36:90:b3:a3:a7:10:
         59:de:00:6d:74:ff:fb:21:35:d0:6b:28:50:fc:a8:aa:a5:72:
         50:78:29:eb:e8:bc:1b:1d:42:44:35:f2:72:b1:3d:69:8a:4a:
         de:73:93:25:94:d6:75:50:90:01:3c:93:81:6f:65:52:c5:89:
         5e:2a:a5:85:21:86:88:7a:34:48:37:c1:4f:1c:60:57:cd:2f:
         aa:af:e7:c9:00:a3:e8:1e:99:1f:41:75:17:7e:32:e3:f8:0e:
         27:df:a2:04
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUX+eR/e4eT4vAjLGiEMjy8uqh9kQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNBRUVEN0NCOTkwQzREMzc0NTcyNTFDNjQ2QzM1NUE5
MTY5ODRBMDAeFw0yNTA4MjcxNjE1MDdaFw0yNjA4MjYxNjIwMDdaMDMxMTAvBgNV
BAMTKDExRDg1RTU3NUVBMTNBNEU4QjIwNTg1RDI3ODhCRDVDMjQ1MzJEMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9LsTxr3fqn7WhTbX1sCNHYAwx
spzKQfY2PIQ1ycP85Ibs3G1PlrwYoTpX/KKuX0sVbar+XjWaWdh9KSYHDxASTyqR
m1y4iq2I4O4FzUihAdeI5CKpvk0bA+l0Zh2OMvZnTTA/tFEXjKtiTjTPC8UDoGGP
kaXiMcHzzfJIxklo27FYgAotDPu114vojTC0p565LBOIQ94eRWWaYvAFgDnxL46d
KP4zn7Rq08yGpO3svxCuFIM7DKDQI5wvqSfQ1ygy3qhInzGaIWMx+kWQVUyp/GT6
KcCIEHfFpDlUuOFe/64Ky00TcNro9CICkJJPQDPJsENkwjPAMSHJAbjrum7HAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUEdheV16hOk6LIFhdJ4i9XCRTLQQwHwYDVR0j
BBgwFoAUbK7tfLmQxNN0VyUcZGw1WpFphKAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OUUxMUE0RkQ3NkZBMzE4OEEwODdFNzkyQTk2MTFDNTBG
NDA0RDNDOUVENDNDOEVEQUQyRjVGMEI4RUYyRkJELzAvNkNBRUVEN0NCOTkwQzRE
Mzc0NTcyNTFDNjQ2QzM1NUE5MTY5ODRBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Q0FFRUQ3Q0I5OTBDNEQzNzQ1
NzI1MUM2NDZDMzU1QTkxNjk4NEEwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTlFMTFBNEZENzZGQTMxODhBMDg3RTc5MkE5NjExQzUwRjQwNEQzQzlF
RDQzQzhFREFEMkY1RjBCOEVGMkZCRC8wLzMyMzgzMDMzM2E2NjM4MzAzMDNhMzUz
MDNhM2EyZjM0MzUyZDM0MzUyMDNkM2UyMDMxMzMzMzMzMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMo
A/gAAFAwDQYJKoZIhvcNAQELBQADggEBAAB7qiFUtk+J1SPVbgrlAgLGZ3POVv5x
YV4r9rgq23jY1Nb3AUh1W8JT3FxFD9DkoAJVlXmKvTGWkOpY16iKv1iagcPb6i2m
nIkZki6J+fWWwtzTRVyYNDFC26gvAfp9l2T5BO//HoArLOOLKNEN+IxESP5ShPAy
ItNcvYf29rYPxj1aNKfwi1ytjsM8rwShPevQ1S1mz+/S46zONzaQs6OnEFneAG10
//shNdBrKFD8qKqlclB4KevovBsdQkQ18nKxPWmKSt5zkyWU1nVQkAE8k4FvZVLF
iV4qpYUhhoh6NEg3wU8cYFfNL6qv58kAo+gemR9BdRd+MuP4DiffogQ=
-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:44 2025 by rpki-client