Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a383030303a3a2f33342d3438203d3e203133333335.roa
File:                     323830333a663830303a383030303a3a2f33342d3438203d3e203133333335.roa (raw, json)
Hash identifier:          6XaZzttNtU+c6w9hpcCscYH/lKelW670dTf/WhkEXKg=
Subject key identifier:   9F:C7:24:B7:02:86:76:54:B3:04:5E:EB:35:43:78:44:3E:51:42:28
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       5B352FAB74361685D3F60817A3EA4AE5E9948FAC
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a383030303a3a2f33342d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:31 +0000
ROA not before:           Wed 29 Jul 2026 16:50:31 +0000
ROA not after:            Wed 28 Jul 2027 16:55:31 +0000
asID:                     13335
IP address blocks:        2803:f800:8000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:35:2f:ab:74:36:16:85:d3:f6:08:17:a3:ea:4a:e5:e9:94:8f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:31 2026 GMT
            Not After : Jul 28 16:55:31 2027 GMT
        Subject: CN=9FC724B702867654B3045EEB354378443E514228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:4f:7d:44:3a:72:da:b3:6e:2f:1a:e3:7c:
                    b2:42:98:ae:bb:e4:9a:00:38:48:4f:2d:8f:b7:e9:
                    34:46:b9:97:e3:1c:df:1b:92:99:34:b6:91:19:3c:
                    92:b0:e7:32:6b:c8:bc:94:cf:73:d4:9b:ad:e0:5b:
                    5b:2d:7b:8e:1d:63:7d:31:8f:26:3a:dd:e9:8e:d5:
                    46:44:a9:d9:ca:29:99:9c:45:97:98:ca:5a:b2:c2:
                    a0:10:f1:ae:e1:97:63:8b:82:f3:0b:66:da:2b:bc:
                    98:4b:77:75:20:ae:42:86:fe:d6:7a:a6:a7:89:26:
                    d8:e4:2f:00:3e:d9:fd:4c:8f:05:33:73:54:c4:34:
                    a1:86:6f:33:f3:f4:d1:c9:38:45:c4:35:5b:b5:c6:
                    2c:27:84:dd:87:54:cd:cf:67:14:5f:cf:87:67:77:
                    21:a4:30:5d:b8:55:2b:bc:ce:28:5c:b7:7e:0e:95:
                    0b:ee:14:85:4e:21:98:44:7b:f6:3c:08:04:36:9e:
                    12:18:ad:8e:72:b8:30:1d:77:98:b2:9e:f8:5a:07:
                    12:95:12:19:d6:48:32:cd:9e:18:a4:44:e2:96:11:
                    e0:b5:5a:d0:c9:9e:6f:22:85:a0:21:99:12:28:cf:
                    00:9f:fd:7b:64:52:0a:35:bb:76:08:f7:fc:2e:89:
                    ef:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C7:24:B7:02:86:76:54:B3:04:5E:EB:35:43:78:44:3E:51:42:28
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a383030303a3a2f33342d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b5:56:8d:f3:47:14:03:e7:51:9b:b2:1e:48:1e:4a:7a:fc:b8:
         11:4c:ea:d3:a0:f0:0d:74:73:55:50:be:75:c4:17:6a:e3:1c:
         d4:8c:bc:50:99:e3:4b:d0:dd:e6:2f:dd:45:99:62:b8:65:59:
         12:11:7e:8d:88:02:40:8f:3c:92:26:a0:43:21:c7:81:82:ca:
         c5:24:b0:3a:83:35:18:56:14:e8:e5:e5:03:ac:08:8c:42:cb:
         b2:63:7c:39:3e:8e:9d:38:21:0a:12:ac:ca:80:21:46:e8:10:
         49:4b:6b:b6:49:b1:ca:dc:4a:5e:6c:ab:ef:a8:7f:e8:ec:7f:
         c5:86:24:73:0b:61:68:09:e1:23:9a:1c:8a:bd:9d:91:46:b1:
         c2:c9:8f:a1:0e:2d:2a:60:d9:8e:07:bd:39:0a:7b:17:df:72:
         c4:8d:cb:01:28:13:b7:1a:a5:61:39:ce:df:1b:86:e7:01:57:
         3f:35:0e:16:6c:22:a5:a5:14:70:62:0e:81:29:aa:4c:30:ab:
         14:31:c6:60:8a:34:4a:af:ce:0f:2a:60:73:f2:df:4f:de:63:
         e2:5e:a0:37:2e:51:fb:63:2f:24:22:78:8e:d7:da:22:8e:81:
         b9:4b:de:79:ef:a8:1a:22:fa:ad:25:96:20:e4:11:9d:96:ff:
         70:8d:a1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:45:59 2026 by rpki-client