Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35373a3a2f34382d3438203d3e203133333335.roa
File:                     323830333a663830303a35373a3a2f34382d3438203d3e203133333335.roa (raw, json)
Hash identifier:          u8PjRZ6oYO9t1Tc3pGgUBNRvEHxuPza9fWjagx9MM2s=
Subject key identifier:   AB:37:24:2E:76:CE:3D:D1:A2:96:57:B3:42:AC:D1:B9:C7:40:6D:9F
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       1E57FED25445AB63E186F0420CB89DA50E6958E0
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35373a3a2f34382d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:01 +0000
ROA not before:           Wed 27 Aug 2025 16:15:01 +0000
ROA not after:            Wed 26 Aug 2026 16:20:01 +0000
asID:                     13335
IP address blocks:        2803:f800:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:57:fe:d2:54:45:ab:63:e1:86:f0:42:0c:b8:9d:a5:0e:69:58:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:01 2025 GMT
            Not After : Aug 26 16:20:01 2026 GMT
        Subject: CN=AB37242E76CE3DD1A29657B342ACD1B9C7406D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:41:35:85:1f:52:94:e1:c7:69:9f:94:b9:
                    34:83:bd:0e:52:44:62:8c:91:60:4e:bb:3e:65:61:
                    b1:5f:40:c1:4b:f4:0e:2a:e0:97:73:12:01:e9:e8:
                    2c:31:34:de:2f:34:b6:f2:a9:66:98:7e:eb:1c:21:
                    15:5f:a7:dd:8c:73:28:01:c7:32:40:a2:ab:16:ad:
                    00:ba:bf:66:30:9f:bf:27:1a:7a:7d:e0:25:4a:9b:
                    e5:9b:db:dd:ac:b8:c8:ae:90:84:28:01:85:74:80:
                    4a:d4:cf:64:4e:46:e8:05:7e:58:62:f2:93:e2:86:
                    62:dd:32:1b:3a:e2:89:c3:c9:4c:cb:9b:f0:69:69:
                    c6:df:c5:a4:cd:7d:bb:e2:4c:38:fe:6d:2f:0d:fc:
                    0b:73:88:8e:45:06:24:bb:f6:67:e6:86:2b:ce:d3:
                    c6:5f:c5:f1:8f:17:e8:b5:f7:89:38:ed:8f:e8:01:
                    ef:db:50:d9:83:1c:98:fc:11:81:bb:1d:62:a4:f0:
                    4b:f0:5b:03:26:04:66:80:a6:9c:f3:0a:f2:34:ba:
                    b9:2b:25:a7:6b:c8:f6:e7:bd:15:10:9e:aa:47:d3:
                    c8:83:fc:b7:af:21:30:d7:60:83:ce:b7:e2:61:59:
                    8e:e0:29:bc:f8:1d:86:e6:aa:6c:99:2a:f3:76:93:
                    9d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:37:24:2E:76:CE:3D:D1:A2:96:57:B3:42:AC:D1:B9:C7:40:6D:9F
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35373a3a2f34382d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:87:a0:9f:ab:8f:fc:5b:fa:a4:ae:9e:73:d8:56:e0:00:bb:
         37:65:fe:66:78:a8:e3:4b:8e:a0:e0:fe:26:7d:70:2a:83:dd:
         e6:9f:99:b8:53:f3:b2:7a:99:4c:31:02:11:c9:9a:2d:ad:06:
         c1:52:0e:6e:40:91:28:cf:a8:dc:d4:8c:2d:f4:a6:fc:7d:d3:
         06:a1:67:a0:9d:0d:52:c2:fb:ea:9f:e3:71:99:fe:c2:35:e1:
         27:18:6c:b3:72:21:19:77:c7:0b:86:4a:31:dd:92:8e:46:9f:
         81:84:19:d0:d7:63:11:75:e2:5c:32:9e:71:a7:de:e4:9d:10:
         f5:d8:2a:f4:a9:33:5e:b2:37:ca:e1:80:a2:6c:bc:d6:6e:03:
         41:de:4f:c6:3d:20:9e:91:91:f1:b9:12:bc:91:ce:04:89:76:
         d3:66:d7:24:cc:7c:5b:36:73:68:00:e5:14:e7:fa:36:c0:37:
         86:c7:02:1e:50:b8:9d:72:1d:26:ba:4d:e2:9c:62:bd:e0:d6:
         9d:48:f5:4a:8f:c7:34:30:34:dc:c5:6c:ec:01:83:e1:2c:11:
         3c:c5:33:63:f6:c7:b4:bf:32:1f:98:38:ab:31:c1:d9:3d:21:
         f7:be:28:29:7a:db:01:50:e0:0c:08:42:a1:9e:84:93:02:5c:
         12:c0:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:44 2025 by rpki-client