Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3830303a3a2f33372d3438203d3e203133333335.roa
File:                     323830333a663830303a3830303a3a2f33372d3438203d3e203133333335.roa (raw, json)
Hash identifier:          oI46+Uj9TZaTDY9SWDu2Vo/PwkCeaVjW3ZOYaC9nakc=
Subject key identifier:   7C:41:D4:AB:6E:D1:26:DB:B9:5F:0E:97:00:03:5A:B5:41:C7:3F:02
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       0AB38BD5D5786E1B09BF05F38ADF88E448641B17
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3830303a3a2f33372d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:36 +0000
ROA not before:           Wed 29 Jul 2026 16:50:36 +0000
ROA not after:            Wed 28 Jul 2027 16:55:36 +0000
asID:                     13335
IP address blocks:        2803:f800:800::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b3:8b:d5:d5:78:6e:1b:09:bf:05:f3:8a:df:88:e4:48:64:1b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:36 2026 GMT
            Not After : Jul 28 16:55:36 2027 GMT
        Subject: CN=7C41D4AB6ED126DBB95F0E9700035AB541C73F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:20:a3:7f:3a:7c:38:e3:8d:9f:5b:4d:12:
                    ef:4e:00:4c:69:50:aa:dc:33:b0:75:09:3a:a8:4e:
                    3f:30:ac:a7:07:1f:8c:70:1f:88:d0:bd:42:c5:91:
                    58:e7:17:ba:c5:55:4b:7e:92:46:e5:8b:f1:84:a1:
                    c0:ad:e5:10:91:46:8d:72:fa:88:f7:d3:cc:be:29:
                    b7:8e:b0:9e:8c:41:04:1b:14:77:81:32:00:7f:df:
                    14:a8:ee:6a:f8:b1:0a:cd:e6:91:2c:4b:13:ee:3a:
                    56:b8:d1:6c:eb:0b:2a:89:10:90:1c:e8:3d:7a:7d:
                    15:f6:53:ce:94:3d:92:7f:4d:3b:c4:31:a5:d7:28:
                    d1:ec:37:f2:99:7b:27:bb:a8:63:53:8b:3d:b9:c3:
                    24:25:5b:fb:ea:9e:d3:af:e2:a0:29:97:66:37:b7:
                    bd:7c:c6:90:fb:2d:e4:5c:35:24:f3:14:5b:d8:a4:
                    58:1e:f4:19:e4:7e:8e:c2:77:fe:08:f0:ac:31:8a:
                    e8:54:52:c4:38:a5:04:ff:c8:64:cb:b9:78:64:d5:
                    0b:39:dd:5a:12:60:13:22:b9:d8:44:03:8d:53:f5:
                    0f:32:77:c8:86:a5:ae:fe:62:ca:c9:6c:3a:fe:85:
                    ca:92:36:3c:ee:56:91:5e:f4:52:85:20:02:f2:8f:
                    f4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:41:D4:AB:6E:D1:26:DB:B9:5F:0E:97:00:03:5A:B5:41:C7:3F:02
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3830303a3a2f33372d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         ae:3f:26:96:df:24:42:8f:1b:f5:d6:4b:08:14:a7:d1:60:6a:
         16:90:c9:cd:c3:ac:07:2a:7e:0b:30:ef:2b:c9:74:5f:2c:40:
         d5:90:f3:46:d7:7b:33:1e:49:35:a4:9c:ab:26:18:16:ab:e6:
         2e:27:d7:0b:01:3a:5a:d0:e6:05:93:06:d9:92:56:27:eb:54:
         63:40:06:57:3e:69:3f:ec:7b:33:5d:e9:de:fc:84:e7:55:0e:
         3b:24:f7:bd:af:fe:02:8d:60:89:39:ad:90:3a:58:2f:f8:97:
         8f:03:b4:66:c3:d5:9a:ab:42:dd:bc:3a:f7:28:8e:65:c5:37:
         df:85:ce:6f:00:f7:e8:7d:77:85:4d:c2:62:78:c0:75:77:71:
         49:5f:26:6c:54:3b:30:23:23:29:05:f2:d0:08:85:83:5c:bd:
         c6:cc:29:d8:d8:03:67:e6:68:a3:8d:ae:b3:80:6f:90:d5:9c:
         d7:b9:fb:46:03:66:8a:66:08:a1:25:82:e7:34:96:27:c3:6c:
         81:72:b1:f6:9b:21:fb:c2:c6:eb:77:b6:c1:f7:f1:ce:0b:02:
         5c:ae:f1:8a:59:6e:78:b1:4c:13:13:dc:79:a0:64:bb:21:9d:
         03:1a:9f:c6:e6:ec:c1:e7:fe:ea:6e:0f:f1:db:08:4f:b1:4e:
         c5:b0:cd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:34:28 2026 by rpki-client