Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35343a3a2f34372d3438203d3e203133333335.roa
File:                     323830333a663830303a35343a3a2f34372d3438203d3e203133333335.roa (raw, json)
Hash identifier:          vGEKLTMXVkyuiKdz3FO+51Vocge4x0SqT3LSTMeJPgA=
Subject key identifier:   13:D2:36:F9:19:CF:16:B1:BE:88:81:2A:DF:4F:C9:6B:F7:6D:80:98
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       2B8867E085D96D350D768F50DB637C097F52BE4A
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35343a3a2f34372d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:36 +0000
ROA not before:           Wed 29 Jul 2026 16:50:36 +0000
ROA not after:            Wed 28 Jul 2027 16:55:36 +0000
asID:                     13335
IP address blocks:        2803:f800:54::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:88:67:e0:85:d9:6d:35:0d:76:8f:50:db:63:7c:09:7f:52:be:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:36 2026 GMT
            Not After : Jul 28 16:55:36 2027 GMT
        Subject: CN=13D236F919CF16B1BE88812ADF4FC96BF76D8098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:76:ee:1f:b2:5f:37:9c:37:82:2e:a3:c7:
                    3a:c0:ad:2e:b6:68:b0:5e:c9:90:52:5a:99:42:32:
                    ca:51:8d:45:28:c1:ca:09:35:87:f3:26:37:82:92:
                    d4:87:4a:7f:54:f6:28:dc:ca:9a:42:ce:e8:c7:00:
                    70:f8:4e:cf:f9:03:65:ef:d8:21:95:50:04:06:ea:
                    a5:cb:f6:01:b9:0d:d5:12:99:2f:59:4f:92:e1:a1:
                    ea:71:b0:7d:99:e8:74:37:4c:38:9c:bd:5a:3d:75:
                    19:af:d0:1b:bf:61:18:80:b3:a2:08:9f:a9:63:39:
                    ca:fb:c7:ef:20:bc:29:62:3a:02:d2:9b:b9:30:af:
                    71:fb:4d:c6:9e:a8:dc:80:a0:2d:97:0e:45:c1:13:
                    94:16:4f:6b:85:f7:96:d7:19:ea:9f:16:ea:99:70:
                    a2:44:f0:45:b1:ce:ab:61:c4:ac:d1:7e:10:13:e0:
                    08:d1:12:75:a5:e0:10:7e:a0:bd:06:ad:9c:8d:b6:
                    fb:a2:28:35:3b:88:85:b5:dd:82:be:89:26:75:32:
                    58:22:69:a1:ea:27:53:de:4f:29:4f:a0:06:6b:10:
                    3f:5c:37:2e:fa:d4:ad:d4:d8:e0:bd:e7:c8:ca:5f:
                    b1:08:97:70:dd:51:92:3d:ab:27:bf:ee:69:a2:eb:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D2:36:F9:19:CF:16:B1:BE:88:81:2A:DF:4F:C9:6B:F7:6D:80:98
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35343a3a2f34372d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:54::/47

    Signature Algorithm: sha256WithRSAEncryption
         68:c7:c4:cb:22:f9:6c:48:2b:e3:40:00:bf:a5:f1:b1:f2:52:
         b9:7d:62:33:34:58:75:cf:60:fb:f4:bd:49:15:fc:eb:da:41:
         be:17:2a:24:79:34:9d:c0:76:35:63:80:ed:8b:e3:d9:6c:a6:
         27:e9:05:58:60:0a:fc:eb:61:d5:53:6c:9e:a9:d4:f0:87:26:
         d0:07:43:fe:be:06:83:eb:2f:47:a7:77:6d:08:66:9c:94:4f:
         bc:fe:eb:26:c8:cc:1e:2c:27:6a:c3:cc:bb:d5:77:1c:b8:9e:
         86:20:c8:ee:b1:40:d5:df:95:66:e3:a2:ff:6c:68:fd:85:c8:
         7d:23:6d:d8:06:22:a9:49:6c:df:6b:16:aa:14:20:18:f2:ab:
         3c:86:8e:3a:98:a5:9c:f9:09:e9:5f:9a:d0:cf:45:8e:9a:95:
         ac:7b:4f:37:a1:02:5c:0c:01:22:be:b3:c7:97:00:f7:d9:72:
         c2:8e:3f:bb:3e:7a:f3:2e:19:bb:77:44:f6:ed:9a:5b:63:5b:
         b4:f1:08:be:48:19:cd:5d:d7:ec:94:4c:f5:b7:4f:c5:86:77:
         dd:c8:5b:32:61:4f:32:db:28:bd:e5:7c:2d:4b:7b:b1:d3:d1:
         e8:f0:a5:a8:fb:e1:24:e8:e9:df:af:0e:ab:9e:88:45:fb:2f:
         f6:f1:cb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:26:20 2026 by rpki-client