Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3830303a3a2f33372d3438203d3e203133333335.roa
File:                     323830333a663830303a3830303a3a2f33372d3438203d3e203133333335.roa (raw, json)
Hash identifier:          5ZD3DVYssql6pr1vLsuZDNu21NC41q84xXrI5M2HLK8=
Subject key identifier:   43:5A:84:AF:F5:CF:CC:DE:73:8A:1D:7E:2E:AF:F0:40:B7:F5:50:E0
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       3A2345508CF8109C00DA8EF18C77E73BB4E6425D
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3830303a3a2f33372d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:05 +0000
ROA not before:           Wed 27 Aug 2025 16:15:05 +0000
ROA not after:            Wed 26 Aug 2026 16:20:05 +0000
asID:                     13335
IP address blocks:        2803:f800:800::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:23:45:50:8c:f8:10:9c:00:da:8e:f1:8c:77:e7:3b:b4:e6:42:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:05 2025 GMT
            Not After : Aug 26 16:20:05 2026 GMT
        Subject: CN=435A84AFF5CFCCDE738A1D7E2EAFF040B7F550E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:9c:92:c5:f1:c9:48:9f:c9:d0:16:7c:b1:
                    b6:29:5d:b3:d0:0a:4e:d6:c3:b5:73:8d:df:79:b7:
                    34:ba:7e:68:25:d5:aa:aa:4c:de:5f:8e:71:b7:47:
                    2b:c5:12:21:d6:7c:f9:59:8e:4a:1b:55:62:28:c7:
                    0d:4d:9f:c6:70:23:71:f8:ef:68:9a:00:2a:66:f0:
                    bf:c2:70:8f:fd:9a:15:e5:6b:c8:fd:ca:79:e8:db:
                    28:1a:d2:3a:ab:26:95:90:64:e1:e3:ac:78:f5:1e:
                    47:0c:b9:86:65:87:ab:7c:a4:36:cd:4f:f8:e5:15:
                    ae:73:ce:d2:dd:22:4e:87:15:f8:c7:7f:9a:31:16:
                    22:32:c8:56:2c:40:5d:15:f5:35:a3:ef:42:47:8e:
                    64:a8:d4:75:cb:b7:60:c4:98:8f:79:a5:3c:5d:e7:
                    83:31:92:4d:e4:3f:c7:ed:8f:e1:57:50:ee:eb:6f:
                    fb:31:8f:75:47:b9:99:ea:50:78:0f:14:a4:40:db:
                    f1:89:2c:98:79:56:1c:60:81:df:53:2f:b5:1c:5e:
                    9f:7a:c3:37:c7:5c:19:bb:b6:27:f3:e5:12:ad:76:
                    eb:e9:7a:a1:30:07:cc:2d:0d:aa:c7:ae:8c:37:8b:
                    82:01:0f:54:b5:8f:89:d3:d2:df:e1:b3:df:dd:06:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5A:84:AF:F5:CF:CC:DE:73:8A:1D:7E:2E:AF:F0:40:B7:F5:50:E0
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3830303a3a2f33372d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         28:37:bb:d9:16:72:3e:63:b9:e6:d9:a1:c1:f5:85:ee:47:05:
         9f:0b:18:1e:57:ef:27:69:7c:fd:8f:d6:a2:f7:3f:76:1a:18:
         97:e2:41:c8:f5:c5:cf:4e:94:01:09:6e:c7:2d:b5:c5:d2:01:
         b3:59:62:45:4e:3c:6c:e6:ac:48:ed:9a:d4:1b:39:a9:11:cd:
         24:35:cc:6b:47:62:89:ee:ad:8c:a8:68:17:5a:8b:b3:53:0e:
         91:b0:9b:6a:ac:2e:f6:15:4f:38:c1:03:98:4a:d2:41:d0:f1:
         6f:cc:28:9d:d8:92:9b:c0:ca:b4:c1:b0:3e:7c:bd:64:7d:42:
         f0:58:d1:6a:2a:41:61:c6:bf:10:37:00:3e:62:ae:16:3d:b8:
         8d:21:04:27:cc:0a:b8:9b:dc:25:c1:cb:49:f7:45:9a:4c:e8:
         65:67:3f:34:d0:d0:c4:a3:45:63:41:cc:4c:d7:c5:45:d3:88:
         39:f4:b2:60:57:51:a6:b1:1e:34:92:a2:e5:d2:39:76:a5:cc:
         8b:4d:1c:38:c4:7f:58:8d:c0:88:39:e5:7a:17:bc:87:95:46:
         60:7b:cd:e2:df:c7:c4:ec:5a:2d:fe:f5:d0:22:01:fc:e1:be:
         ed:cf:77:64:49:d9:35:97:de:f1:b7:9f:ac:ca:6d:03:6d:9b:
         32:02:3f:04
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUOiNFUIz4EJwA2o7xjHfnO7TmQl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNBRUVEN0NCOTkwQzREMzc0NTcyNTFDNjQ2QzM1NUE5
MTY5ODRBMDAeFw0yNTA4MjcxNjE1MDVaFw0yNjA4MjYxNjIwMDVaMDMxMTAvBgNV
BAMTKDQzNUE4NEFGRjVDRkNDREU3MzhBMUQ3RTJFQUZGMDQwQjdGNTUwRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kJySxfHJSJ/J0BZ8sbYpXbPQ
Ck7Ww7Vzjd95tzS6fmgl1aqqTN5fjnG3RyvFEiHWfPlZjkobVWIoxw1Nn8ZwI3H4
72iaACpm8L/CcI/9mhXla8j9ynno2yga0jqrJpWQZOHjrHj1HkcMuYZlh6t8pDbN
T/jlFa5zztLdIk6HFfjHf5oxFiIyyFYsQF0V9TWj70JHjmSo1HXLt2DEmI95pTxd
54Mxkk3kP8ftj+FXUO7rb/sxj3VHuZnqUHgPFKRA2/GJLJh5Vhxggd9TL7UcXp96
wzfHXBm7tifz5RKtduvpeqEwB8wtDarHrow3i4IBD1S1j4nT0t/hs9/dBoBrAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUQ1qEr/XPzN5zih1+Lq/wQLf1UOAwHwYDVR0j
BBgwFoAUbK7tfLmQxNN0VyUcZGw1WpFphKAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OUUxMUE0RkQ3NkZBMzE4OEEwODdFNzkyQTk2MTFDNTBG
NDA0RDNDOUVENDNDOEVEQUQyRjVGMEI4RUYyRkJELzAvNkNBRUVEN0NCOTkwQzRE
Mzc0NTcyNTFDNjQ2QzM1NUE5MTY5ODRBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Q0FFRUQ3Q0I5OTBDNEQzNzQ1
NzI1MUM2NDZDMzU1QTkxNjk4NEEwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTlFMTFBNEZENzZGQTMxODhBMDg3RTc5MkE5NjExQzUwRjQwNEQzQzlF
RDQzQzhFREFEMkY1RjBCOEVGMkZCRC8wLzMyMzgzMDMzM2E2NjM4MzAzMDNhMzgz
MDMwM2EzYTJmMzMzNzJkMzQzODIwM2QzZTIwMzEzMzMzMzMzNS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
AygD+AAIMA0GCSqGSIb3DQEBCwUAA4IBAQAoN7vZFnI+Y7nm2aHB9YXuRwWfCxge
V+8naXz9j9ai9z92GhiX4kHI9cXPTpQBCW7HLbXF0gGzWWJFTjxs5qxI7ZrUGzmp
Ec0kNcxrR2KJ7q2MqGgXWouzUw6RsJtqrC72FU84wQOYStJB0PFvzCid2JKbwMq0
wbA+fL1kfULwWNFqKkFhxr8QNwA+Yq4WPbiNIQQnzAq4m9wlwctJ90WaTOhlZz80
0NDEo0VjQcxM18VF04g59LJgV1GmsR40kqLl0jl2pcyLTRw4xH9YjcCIOeV6F7yH
lUZge83i38fE7Fot/vXQIgH84b7tz3dkSdk1l97xt5+sym0DbZsyAj8E
-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:44 2025 by rpki-client