Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35363a3a2f34382d3438203d3e203133333335.roa
File:                     323830333a663830303a35363a3a2f34382d3438203d3e203133333335.roa (raw, json)
Hash identifier:          3GvPeh8z8Cv1DlVNABkNyVDT9z8o98s9PHzd+UmEgmM=
Subject key identifier:   60:ED:60:EE:A1:B5:FB:30:CE:AE:25:DD:FE:53:0B:CF:1D:85:4B:83
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       25BD89168B12C74CD6823FEA34D911AB06ADBACF
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35363a3a2f34382d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:30 +0000
ROA not before:           Wed 29 Jul 2026 16:50:30 +0000
ROA not after:            Wed 28 Jul 2027 16:55:30 +0000
asID:                     13335
IP address blocks:        2803:f800:56::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:bd:89:16:8b:12:c7:4c:d6:82:3f:ea:34:d9:11:ab:06:ad:ba:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:30 2026 GMT
            Not After : Jul 28 16:55:30 2027 GMT
        Subject: CN=60ED60EEA1B5FB30CEAE25DDFE530BCF1D854B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:52:b6:d9:54:ce:6d:23:7f:e1:6f:82:f5:
                    26:4f:eb:81:c3:d0:d4:e7:03:99:5a:1b:2c:b9:a5:
                    82:03:74:18:06:76:10:57:41:45:bc:0d:5c:6f:40:
                    90:19:1f:90:57:20:e9:14:0b:62:dd:86:9a:12:df:
                    79:fe:fb:71:96:4a:0c:f0:10:69:9f:ef:4b:e1:18:
                    0f:1b:ff:8a:99:ab:90:41:e6:33:24:56:fd:94:b7:
                    44:a8:83:c4:a6:5d:db:2f:4c:fd:4b:11:25:ed:5b:
                    cb:1e:49:c5:1f:05:cf:2b:3a:61:bf:7c:ba:1c:45:
                    b9:2b:67:72:6e:89:e3:91:6c:65:06:f2:df:de:0d:
                    70:d0:9b:5b:61:b2:c4:34:ac:94:11:18:69:c2:8c:
                    2c:57:5d:95:1d:5b:b3:54:f8:e6:28:3a:c2:c1:15:
                    0e:1d:65:b6:df:ca:55:10:71:a2:da:e5:b8:0e:0c:
                    a0:ea:4f:41:f3:90:1e:f4:31:a5:41:5c:3a:f9:43:
                    69:8a:6c:01:cd:6b:02:6d:ed:f3:2c:cd:64:b4:4b:
                    50:1a:13:f5:64:b7:b1:02:14:39:20:fa:77:5b:36:
                    d3:0d:a2:f1:ff:63:17:ba:5a:ea:78:f9:3c:03:58:
                    28:ad:66:dd:47:34:d3:41:e8:84:a9:aa:d8:f3:af:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:ED:60:EE:A1:B5:FB:30:CE:AE:25:DD:FE:53:0B:CF:1D:85:4B:83
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35363a3a2f34382d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:56::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:ba:85:90:5c:26:59:7f:39:2d:a9:5b:24:ae:66:98:59:71:
         aa:eb:89:45:26:03:30:1a:a0:40:32:79:15:f2:90:62:ef:24:
         fb:78:2a:4b:c3:1a:4c:ca:d2:c5:e3:12:82:43:fd:c4:93:12:
         8d:eb:36:58:ac:f3:85:c1:71:02:78:79:b0:97:36:83:c4:0e:
         00:6c:01:3a:0d:a2:61:b5:f9:ff:96:2d:2e:5e:17:eb:fe:02:
         df:46:ab:16:57:b3:5d:f2:80:43:94:26:f4:9c:5a:4c:8d:60:
         48:aa:2a:73:4e:ca:ad:84:e7:57:4d:12:f2:3e:15:a0:f3:c8:
         5e:1e:9a:13:71:31:1b:bc:fd:de:16:7e:d5:73:3a:e1:81:8a:
         48:cd:ba:a2:4e:58:4b:56:dd:bc:ed:2a:ff:5f:3d:04:93:1c:
         7e:27:83:fc:42:c2:ae:0a:76:94:92:3c:e7:65:f1:93:be:d9:
         8e:7c:8b:6f:5c:aa:bc:c8:bd:d5:9f:56:2f:f4:0b:a5:ad:03:
         dd:42:00:21:45:2a:5d:cf:2d:10:6f:e0:6e:79:bd:16:c4:45:
         20:09:30:90:2f:c5:e0:d4:56:38:e9:36:73:70:01:84:ad:a2:
         82:2c:cd:a1:21:db:af:77:24:f4:fb:23:0b:0e:26:62:c1:d8:
         9f:73:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:33:57 2026 by rpki-client