Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a36303a3a2f34332d3438203d3e203133333335.roa
File:                     323830333a663830303a36303a3a2f34332d3438203d3e203133333335.roa (raw, json)
Hash identifier:          JwxxWOCD9T7LkhDlgfvhnmR1RP9yn1LbL1qgsD/0+GA=
Subject key identifier:   BF:33:82:C2:AE:F8:97:FE:85:A6:94:5E:75:57:24:F1:0F:DA:90:B6
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       14EEEC82B68595D9D0AFDB308F4EAC7F7AA3C9BE
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a36303a3a2f34332d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:08 +0000
ROA not before:           Wed 27 Aug 2025 16:15:08 +0000
ROA not after:            Wed 26 Aug 2026 16:20:08 +0000
asID:                     13335
IP address blocks:        2803:f800:60::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ee:ec:82:b6:85:95:d9:d0:af:db:30:8f:4e:ac:7f:7a:a3:c9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:08 2025 GMT
            Not After : Aug 26 16:20:08 2026 GMT
        Subject: CN=BF3382C2AEF897FE85A6945E755724F10FDA90B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:49:1a:83:29:02:14:a6:b1:23:69:e4:2e:
                    23:4d:48:e4:c3:4c:37:93:bb:fa:be:dc:c0:90:06:
                    66:89:d4:01:48:82:fa:f7:6a:3f:0d:dc:30:77:0d:
                    00:30:57:02:8e:77:cd:a6:3d:5a:f4:41:4a:2e:6a:
                    44:b1:81:46:21:9e:1b:ec:e3:fd:90:b7:c6:c5:23:
                    c5:e8:0a:68:ee:04:fd:95:4b:9e:48:22:a1:df:ae:
                    c9:75:ec:31:4f:16:99:65:37:23:a3:6a:ae:65:80:
                    49:5c:81:1f:1f:89:0c:68:18:40:18:3c:4e:ee:a4:
                    3d:ce:fd:29:0b:88:8d:cd:56:90:cd:35:aa:ef:ce:
                    4a:af:0d:00:0c:00:db:70:05:90:4b:e0:f3:0f:25:
                    0e:3b:19:08:7e:13:e2:a9:9c:0e:b1:fc:25:90:d2:
                    81:4e:28:5a:a4:b5:ef:ca:26:f6:fb:3f:74:4a:af:
                    43:81:a8:da:d8:f5:12:d9:ae:74:b3:6f:76:ac:99:
                    b4:14:ba:70:4c:1e:a0:2b:32:87:6d:85:4d:5c:06:
                    ce:83:2d:86:03:7b:10:fb:c2:a1:2f:a0:e7:ea:2a:
                    fc:01:84:72:5e:1f:36:2e:8b:b8:a1:8d:6c:07:d4:
                    d3:be:4e:51:55:6e:cd:e9:39:ae:2b:77:46:fb:33:
                    8d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:33:82:C2:AE:F8:97:FE:85:A6:94:5E:75:57:24:F1:0F:DA:90:B6
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a36303a3a2f34332d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:60::/43

    Signature Algorithm: sha256WithRSAEncryption
         72:b5:7b:0f:77:73:4e:24:f0:ae:42:51:12:a8:cb:40:30:37:
         a1:c0:32:7a:2c:a5:18:6e:b8:c6:d3:60:3a:df:fb:d0:b8:37:
         6d:55:96:e9:68:66:66:b5:1d:fd:22:ce:43:dd:bc:6e:f2:4d:
         6a:2b:49:8d:fc:66:b3:ce:a6:14:d0:56:33:11:14:34:c6:5a:
         a7:5e:1a:e6:c9:0c:fc:da:f2:5a:19:80:27:c7:a8:6c:37:97:
         44:18:53:8c:ae:92:30:43:e9:e1:13:5d:3b:4b:5f:00:ca:e0:
         13:7e:33:99:f1:15:42:7c:be:f5:b7:41:7f:d9:f1:47:b4:0c:
         80:d1:14:87:1d:78:8d:fb:2d:10:d1:a5:98:c3:23:00:e6:11:
         ba:c5:98:c1:74:c5:1f:a1:e8:93:75:8e:3b:bf:77:ea:25:93:
         8d:b9:b9:d1:3e:02:45:b8:d5:ee:28:fd:06:0a:6f:35:5a:28:
         ab:6f:71:08:9f:76:0f:14:f0:d1:f2:bb:37:01:49:bc:08:c8:
         b9:51:e7:e5:da:34:27:3d:d3:a3:d0:02:07:55:35:43:ff:a0:
         5e:92:8b:9a:b7:b6:e8:8b:51:8a:f5:32:96:1f:05:b9:2c:12:
         71:b1:4c:69:f4:4b:ef:43:f0:de:ec:15:df:4d:73:7c:93:c5:
         13:c4:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:45 2025 by rpki-client