Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3a2f33322d3438203d3e203133333335.roa
File:                     323830333a663830303a3a2f33322d3438203d3e203133333335.roa (raw, json)
Hash identifier:          ojm7W2MKUc82W3IdHZRXdZ7vbNvOcxMIAppW/nihxIo=
Subject key identifier:   EC:5C:B5:E9:29:7C:75:DC:52:44:3F:70:CE:DA:22:76:74:39:02:5E
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       1569B3DAF95CCA5C2D98CE739A6303241CF1417C
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3a2f33322d3438203d3e203133333335.roa
Signing time:             Mon 31 Mar 2025 16:13:22 +0000
ROA not before:           Mon 31 Mar 2025 16:08:22 +0000
ROA not after:            Mon 30 Mar 2026 16:13:22 +0000
asID:                     13335
IP address blocks:        2803:f800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:69:b3:da:f9:5c:ca:5c:2d:98:ce:73:9a:63:03:24:1c:f1:41:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Mar 31 16:08:22 2025 GMT
            Not After : Mar 30 16:13:22 2026 GMT
        Subject: CN=EC5CB5E9297C75DC52443F70CEDA22767439025E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:7b:3a:79:a4:44:0e:f5:1a:23:8c:ef:b4:
                    7c:c4:ed:6d:38:00:f9:dc:b8:12:df:47:82:46:f6:
                    ae:27:e2:70:fa:b8:79:13:ff:28:0b:ed:da:65:51:
                    fa:a2:d3:2b:34:de:54:21:cb:1d:44:62:0b:a3:26:
                    f1:13:4c:b7:81:15:f1:6f:db:f9:05:e4:cd:32:28:
                    c2:da:18:74:10:3e:9e:1b:ac:4b:37:75:4b:60:12:
                    9c:bb:7c:fc:0c:45:60:e1:25:16:30:bc:72:5c:d6:
                    62:b2:b4:c0:ea:55:84:75:54:a7:13:f7:11:64:17:
                    b4:bf:db:79:5a:63:50:3e:58:d6:71:c9:e6:6e:71:
                    68:6d:56:72:b0:b6:7f:88:c0:e2:05:82:45:f3:93:
                    f4:3c:a3:3e:e4:7b:b6:cb:e7:42:53:b6:8f:87:a6:
                    69:64:c8:a2:9d:d6:1e:59:7c:da:75:04:48:20:00:
                    79:13:fa:b2:96:d4:ff:97:56:1b:27:8d:ea:3d:53:
                    b8:0a:21:77:d8:d7:50:be:f3:3f:9e:28:ea:92:60:
                    86:fc:f3:8e:db:c7:3f:e8:f7:67:0a:53:aa:8d:df:
                    30:2d:cd:d5:11:37:dd:60:ba:55:73:8e:e9:c2:32:
                    f2:96:80:9c:58:4a:25:44:7e:b0:ce:47:15:08:a7:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5C:B5:E9:29:7C:75:DC:52:44:3F:70:CE:DA:22:76:74:39:02:5E
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3a2f33322d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:2a:6c:a5:e8:d3:2e:29:4e:63:2f:50:80:d0:84:cb:95:dd:
         1c:39:c9:30:91:8c:ac:ca:60:cb:08:4f:af:6f:a1:88:93:4b:
         a4:c7:b4:5e:9e:bb:d3:07:d3:e9:e3:eb:b3:5c:97:86:65:5b:
         b7:d8:36:84:e7:0c:d2:e3:55:72:18:c9:8c:ca:0e:04:86:c9:
         17:42:b8:5c:69:b0:6c:a1:a9:38:d5:7e:80:da:ce:6f:be:09:
         8d:c3:24:22:20:3d:5b:75:74:f7:93:f7:ce:c8:40:3c:df:7a:
         bc:ff:3d:ee:b7:d3:99:33:6f:71:f7:2d:32:53:64:50:01:b4:
         e6:86:a9:c0:a5:fe:54:2f:f1:d3:a6:0b:76:39:53:66:73:bf:
         43:67:8b:74:a7:b6:f4:5b:4c:1b:db:b8:d9:26:54:7b:2e:49:
         e8:80:ec:0c:f9:a9:cb:db:c2:80:ab:a5:dc:ba:6a:32:c5:37:
         ec:14:e0:58:81:13:9f:a5:0b:6c:7d:56:6e:cb:6c:c0:1d:15:
         c1:24:bc:af:d4:05:41:67:3c:1e:d8:fb:3a:c0:a1:8e:28:35:
         5b:09:33:81:b4:5b:dd:75:1b:26:e6:58:d6:84:6a:72:e3:e1:
         cf:d1:35:37:a7:87:0b:82:5c:97:2c:3f:6c:1e:da:68:57:c1:
         2d:0c:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:05 2025 by rpki-client