Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a383030303a3a2f33342d3438203d3e203133333335.roa
File:                     323830333a663830303a383030303a3a2f33342d3438203d3e203133333335.roa (raw, json)
Hash identifier:          YE0DcQwonFd7Wy+wwhvEMu52XpMZc1gl+uexH/RdkeQ=
Subject key identifier:   A5:A4:59:C2:E7:D0:9E:1C:F5:89:B5:BC:20:E8:A7:B6:70:A2:F0:AD
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       472E73AAC3B942C24CF2C7777EDFED80EC4675D0
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a383030303a3a2f33342d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:03 +0000
ROA not before:           Wed 27 Aug 2025 16:15:03 +0000
ROA not after:            Wed 26 Aug 2026 16:20:03 +0000
asID:                     13335
IP address blocks:        2803:f800:8000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2e:73:aa:c3:b9:42:c2:4c:f2:c7:77:7e:df:ed:80:ec:46:75:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:03 2025 GMT
            Not After : Aug 26 16:20:03 2026 GMT
        Subject: CN=A5A459C2E7D09E1CF589B5BC20E8A7B670A2F0AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:d6:01:af:40:e4:bd:0a:a6:33:3d:90:f7:
                    ef:74:4c:93:7d:c3:25:1c:0e:94:0b:f3:bf:3a:37:
                    6e:14:6f:f4:91:96:b4:0e:0b:32:90:5a:01:44:d1:
                    00:72:c4:65:3f:76:6a:50:2c:e2:d7:a9:3a:3b:a5:
                    a8:0b:aa:bb:b2:8e:ca:06:dc:33:fc:1c:9e:ab:77:
                    ff:4d:c2:63:c6:2d:d8:10:78:5a:7d:fe:cc:50:3a:
                    2e:46:7a:0d:b9:58:a8:e6:a3:01:60:06:18:58:10:
                    b0:31:e1:fb:99:51:d5:04:36:eb:f4:c4:e8:63:d7:
                    45:3d:6c:09:a6:26:9e:23:c2:fb:25:53:59:69:28:
                    32:f1:f1:a5:9c:a5:35:8c:9d:29:1f:88:38:c9:3f:
                    17:48:a2:3b:54:a0:fb:e0:81:28:95:ba:ab:87:ba:
                    04:57:7a:bc:73:6e:22:f0:b7:b9:6c:5b:39:e3:39:
                    be:fa:dd:64:d0:41:34:b8:02:6b:32:1f:9d:8f:64:
                    a0:de:0f:bc:85:88:59:fc:b5:ad:16:7e:02:93:77:
                    25:3c:14:af:aa:f7:62:e5:b8:c0:fb:74:74:39:97:
                    96:02:2f:a3:8e:2d:05:e1:8b:cc:d5:61:0f:cd:a8:
                    f7:2c:67:67:94:f1:e7:2d:5b:9d:18:11:5d:49:6f:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A4:59:C2:E7:D0:9E:1C:F5:89:B5:BC:20:E8:A7:B6:70:A2:F0:AD
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a383030303a3a2f33342d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2f:a4:04:55:fa:6a:82:54:cc:ec:60:8e:4d:d3:3a:22:e4:14:
         d3:08:85:7e:60:0b:6e:25:63:a1:7f:83:9c:74:12:71:e3:37:
         31:a3:82:6d:33:b0:59:6b:eb:79:ea:2a:f7:b2:f4:6b:0e:85:
         d2:ce:b8:ea:be:25:e6:3a:0d:aa:77:0d:c8:96:56:02:5c:e7:
         61:f3:dc:50:49:01:a7:76:16:b3:0c:79:b9:05:da:c9:86:69:
         63:0e:0d:0b:da:75:ca:98:ab:cf:c0:4c:4e:07:2c:7d:a3:99:
         4b:6e:16:59:36:a5:8c:af:ec:b4:c2:e5:51:b3:a1:64:5d:a7:
         e3:78:f2:47:ec:a9:27:bd:c2:d3:94:99:27:02:4f:c4:a9:c4:
         e0:cc:68:b6:50:ba:5e:54:0c:70:15:fa:73:de:aa:60:00:01:
         a5:82:c3:5c:aa:c1:9f:ff:9d:9c:f3:a5:74:0c:56:9a:eb:39:
         66:ff:21:86:74:b1:0b:5c:36:b4:0f:fb:3b:4e:e8:5d:9d:c8:
         10:97:90:d1:d2:95:81:5d:04:5c:92:57:f3:ca:b0:51:a6:0e:
         5c:dc:63:d5:40:25:a4:c8:07:5f:af:11:a9:c2:15:d1:57:68:
         e7:4d:5e:5e:bc:d7:6f:e3:cc:0b:f9:67:c7:19:8c:53:bc:c9:
         4a:56:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:44 2025 by rpki-client