Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35383a3a2f34372d3438203d3e203133333335.roa
File:                     323830333a663830303a35383a3a2f34372d3438203d3e203133333335.roa (raw, json)
Hash identifier:          PcSns2r4PHmh1AYSNAEcpTNCbleGZ/PxCTH/ksZ3x/8=
Subject key identifier:   99:07:D5:1D:89:05:45:6C:BF:39:EE:68:F9:35:F1:0A:11:6A:EF:A4
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       78DD16881BDB0EFDDCBAEF0271840C9315E0AB
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35383a3a2f34372d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:04 +0000
ROA not before:           Wed 27 Aug 2025 16:15:04 +0000
ROA not after:            Wed 26 Aug 2026 16:20:04 +0000
asID:                     13335
IP address blocks:        2803:f800:58::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:dd:16:88:1b:db:0e:fd:dc:ba:ef:02:71:84:0c:93:15:e0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:04 2025 GMT
            Not After : Aug 26 16:20:04 2026 GMT
        Subject: CN=9907D51D8905456CBF39EE68F935F10A116AEFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:d7:40:1c:b4:8d:b4:4b:92:fd:00:d9:ff:
                    92:92:95:07:42:e6:03:b6:41:c2:43:45:60:b3:2c:
                    ed:e7:42:9f:42:68:27:10:b8:04:1c:5e:8f:f0:84:
                    97:ac:56:80:74:ef:7a:96:8e:81:fd:bd:fb:69:2e:
                    cc:f2:94:54:dd:03:38:47:cb:8f:77:c0:22:83:63:
                    58:4f:f1:0a:da:62:f9:78:ba:24:7d:6a:c9:8c:85:
                    24:dc:46:ef:72:56:d4:40:d3:8d:6c:d1:a0:07:8c:
                    63:c0:7f:dc:97:e6:e0:89:3a:b3:08:c8:a1:73:f3:
                    92:93:1d:12:53:d5:5e:ff:95:b7:22:1f:a6:0f:5c:
                    03:4d:33:eb:48:3e:49:02:4e:30:aa:20:81:8d:1f:
                    a9:0e:be:de:71:c1:f1:bb:5e:88:e3:a8:0e:d9:e4:
                    eb:97:e8:22:32:d3:86:74:c7:ad:57:24:98:70:2d:
                    d9:ed:ee:f8:4c:70:b6:79:09:9c:23:fe:74:79:e3:
                    88:74:d6:c3:a4:98:9a:88:54:c8:00:d3:2f:0a:99:
                    0b:13:6b:ba:ba:6c:4c:41:50:31:73:23:20:93:22:
                    af:99:73:9f:b7:a5:cb:74:bf:c8:bf:a5:3c:1f:d2:
                    db:1a:92:f0:e5:dd:d0:be:59:86:62:81:d1:dc:ae:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:07:D5:1D:89:05:45:6C:BF:39:EE:68:F9:35:F1:0A:11:6A:EF:A4
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35383a3a2f34372d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:58::/47

    Signature Algorithm: sha256WithRSAEncryption
         75:8e:50:58:9f:16:5f:7a:3e:49:6c:83:98:1b:55:8c:93:42:
         19:ea:cd:4e:57:d7:ff:d6:b4:b6:1b:4e:c1:97:5e:ba:8c:f6:
         87:47:7b:58:ed:1b:95:01:83:6e:86:4f:a9:39:a0:a9:b9:92:
         e1:bc:69:30:fe:16:07:83:c8:18:66:e3:9c:f9:76:f9:4c:d3:
         1d:c4:40:c7:1d:d4:6d:e0:40:dc:cf:5a:d0:05:e0:bf:12:68:
         91:4f:c1:06:e0:03:91:6f:7e:c2:96:60:3b:50:f9:b7:5a:60:
         7a:f4:f0:83:d6:ed:10:11:a3:23:98:57:02:d7:7d:0f:07:23:
         a4:fb:cb:a2:64:8e:be:88:2e:90:71:c9:cf:7b:ed:09:3e:fb:
         4f:d9:25:d3:7e:d1:20:72:af:f5:d2:8e:d7:71:1f:8e:51:a6:
         ba:ea:20:29:a4:a8:56:30:f8:d6:b6:19:43:c9:bd:84:1e:f4:
         c8:9f:11:d9:9a:57:3b:d6:95:63:e3:4c:60:40:aa:c3:88:6b:
         98:97:c0:5c:5c:6c:40:a0:5a:86:a1:5f:92:31:3b:28:c8:43:
         78:af:c2:98:a3:5a:3e:44:63:4d:82:ff:f1:c3:60:e1:33:93:
         c1:b7:05:8b:0a:c2:2d:eb:8d:82:66:61:d0:80:55:25:fc:34:
         07:2e:cd:13
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgITeN0WiBvbDv3cuu8CcYQMkxXgqzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg2Q0FFRUQ3Q0I5OTBDNEQzNzQ1NzI1MUM2NDZDMzU1QTkx
Njk4NEEwMB4XDTI1MDgyNzE2MTUwNFoXDTI2MDgyNjE2MjAwNFowMzExMC8GA1UE
AxMoOTkwN0Q1MUQ4OTA1NDU2Q0JGMzlFRTY4RjkzNUYxMEExMTZBRUZBNDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKuT10ActI20S5L9ANn/kpKVB0Lm
A7ZBwkNFYLMs7edCn0JoJxC4BBxej/CEl6xWgHTvepaOgf29+2kuzPKUVN0DOEfL
j3fAIoNjWE/xCtpi+Xi6JH1qyYyFJNxG73JW1EDTjWzRoAeMY8B/3Jfm4Ik6swjI
oXPzkpMdElPVXv+VtyIfpg9cA00z60g+SQJOMKoggY0fqQ6+3nHB8bteiOOoDtnk
65foIjLThnTHrVckmHAt2e3u+ExwtnkJnCP+dHnjiHTWw6SYmohUyADTLwqZCxNr
urpsTEFQMXMjIJMir5lzn7ely3S/yL+lPB/S2xqS8OXd0L5ZhmKB0dyu3GsCAwEA
AaOCAs8wggLLMB0GA1UdDgQWBBSZB9UdiQVFbL857mj5NfEKEWrvpDAfBgNVHSME
GDAWgBRsru18uZDE03RXJRxkbDVakWmEoDAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0
L3Jwa2kvbGFjbmljLzU5RTExQTRGRDc2RkEzMTg4QTA4N0U3OTJBOTYxMUM1MEY0
MDREM0M5RUQ0M0M4RURBRDJGNUYwQjhFRjJGQkQvMC82Q0FFRUQ3Q0I5OTBDNEQz
NzQ1NzI1MUM2NDZDMzU1QTkxNjk4NEEwLmNybDCBuQYIKwYBBQUHAQEEgawwgakw
gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr
aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE
MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wLzZDQUVFRDdDQjk5MEM0RDM3NDU3
MjUxQzY0NkMzNTVBOTE2OTg0QTAuY2VyMIHLBggrBgEFBQcBCwSBvjCBuzCBuAYI
KwYBBQUHMAuGgatyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81OUUxMUE0RkQ3NkZBMzE4OEEwODdFNzkyQTk2MTFDNTBGNDA0RDNDOUVE
NDNDOEVEQUQyRjVGMEI4RUYyRkJELzAvMzIzODMwMzMzYTY2MzgzMDMwM2EzNTM4
M2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzEzMzMzMzMzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASgD
+AAAWDANBgkqhkiG9w0BAQsFAAOCAQEAdY5QWJ8WX3o+SWyDmBtVjJNCGerNTlfX
/9a0thtOwZdeuoz2h0d7WO0blQGDboZPqTmgqbmS4bxpMP4WB4PIGGbjnPl2+UzT
HcRAxx3UbeBA3M9a0AXgvxJokU/BBuADkW9+wpZgO1D5t1pgevTwg9btEBGjI5hX
Atd9DwcjpPvLomSOvogukHHJz3vtCT77T9kl037RIHKv9dKO13EfjlGmuuogKaSo
VjD41rYZQ8m9hB70yJ8R2ZpXO9aVY+NMYECqw4hrmJfAXFxsQKBahqFfkjE7KMhD
eK/CmKNaPkRjTYL/8cNg4TOTwbcFiwrCLeuNgmZh0IBVJfw0By7NEw==
-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:45 2025 by rpki-client