Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35303a3a2f34372d3438203d3e203133333335.roa
File:                     323830333a663830303a35303a3a2f34372d3438203d3e203133333335.roa (raw, json)
Hash identifier:          dANQ8Lxt/pT72b05YNzP1OMDUyEZgkqgTB1FnMfh68U=
Subject key identifier:   C4:63:F9:B2:7C:43:CC:6E:1A:4E:23:17:48:F1:C1:D9:8C:C5:77:F5
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       7CD93BED85144A90FE38D52F87F6727592BDBE14
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35303a3a2f34372d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:01 +0000
ROA not before:           Wed 27 Aug 2025 16:15:01 +0000
ROA not after:            Wed 26 Aug 2026 16:20:01 +0000
asID:                     13335
IP address blocks:        2803:f800:50::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d9:3b:ed:85:14:4a:90:fe:38:d5:2f:87:f6:72:75:92:bd:be:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:01 2025 GMT
            Not After : Aug 26 16:20:01 2026 GMT
        Subject: CN=C463F9B27C43CC6E1A4E231748F1C1D98CC577F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:d4:91:8a:53:70:79:17:2c:fe:37:bc:91:
                    7c:f3:b7:c8:d1:78:d3:ff:3a:79:a8:51:14:30:93:
                    db:1b:ef:ae:c9:09:67:14:16:1d:96:44:3d:da:85:
                    a7:63:05:e9:e0:81:29:7b:0d:e0:7c:e2:ab:6f:96:
                    8c:71:43:43:13:7f:73:db:be:9d:de:17:d4:6b:ab:
                    b1:37:03:2e:d8:f0:a0:b5:22:53:d0:5d:e4:bc:81:
                    33:81:d3:72:0d:05:50:e2:1a:81:f0:b5:9d:e9:ce:
                    e5:04:87:69:4f:3f:54:8d:15:0a:68:2d:81:ea:e0:
                    86:3c:92:6d:22:62:3e:51:43:9a:19:0d:c4:c2:d0:
                    ea:8d:82:27:80:75:a8:cb:14:13:75:14:8f:51:e7:
                    78:ab:0c:56:63:e2:ef:8e:43:30:fc:84:37:90:58:
                    b0:ad:2d:ff:98:76:18:18:8c:29:87:3d:53:d2:a0:
                    26:ab:e9:8e:10:ff:c3:15:29:7f:ee:61:3a:4c:79:
                    ff:a2:85:85:37:bf:a4:46:e2:47:2b:94:66:8c:9a:
                    16:db:8d:0c:07:a5:a1:db:61:ba:5e:22:16:0b:01:
                    c6:c9:88:ea:c9:3c:4c:8a:9f:97:b8:51:9a:66:cc:
                    77:c0:96:6a:83:6e:92:90:03:92:99:8b:a3:22:08:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:63:F9:B2:7C:43:CC:6E:1A:4E:23:17:48:F1:C1:D9:8C:C5:77:F5
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35303a3a2f34372d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:50::/47

    Signature Algorithm: sha256WithRSAEncryption
         59:3b:76:70:45:d2:78:60:c3:5d:62:74:56:02:b2:c3:c2:5a:
         f4:0c:48:eb:02:e7:87:b9:af:24:9e:e5:1d:36:ef:a7:84:92:
         41:d1:c0:4a:95:09:ec:8f:20:9c:fb:5b:ef:cd:3b:2c:37:2a:
         3d:8a:1b:8a:24:96:58:0f:90:48:63:48:99:f2:62:92:13:73:
         59:20:e8:f6:4d:e4:e4:30:d2:2b:a8:6e:0e:d5:66:a9:b4:ba:
         30:9d:2a:2b:3f:9a:80:bc:6f:2d:3b:99:00:61:60:9c:0f:92:
         f2:99:c8:fd:a0:0d:57:03:3e:35:13:2b:9d:43:96:df:77:d0:
         d9:0e:5a:b4:73:7b:0b:8a:b1:6d:84:c7:71:78:6c:30:e8:3d:
         f3:d5:b6:b2:e8:b6:c1:6d:da:53:d5:9c:6e:89:09:f5:81:13:
         39:0a:e6:30:6c:cd:3f:29:40:3d:a7:ad:2d:e9:43:90:bb:18:
         ff:2d:91:e4:35:ef:23:46:1b:48:aa:51:39:8e:09:16:17:9a:
         8e:2d:b4:08:28:13:17:99:e3:ce:bb:db:c7:c2:ad:6d:ae:08:
         60:eb:fb:f5:87:31:a4:60:7d:0a:a4:a6:62:67:1d:ba:cd:c7:
         c4:8d:88:cf:2a:12:1a:ed:e9:f0:5a:8b:04:c1:95:c8:78:10:
         53:34:ad:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:44 2025 by rpki-client