Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3a2f34322d3438203d3e203133333335.roa
File:                     323830333a663830303a3a2f34322d3438203d3e203133333335.roa (raw, json)
Hash identifier:          j1xjF+5vrP7UqyQUgfuclgy1zeZpbystbkC9+XdSh5g=
Subject key identifier:   9E:5F:47:21:CC:E6:12:0C:73:39:22:CC:84:54:69:E1:3C:AD:13:FE
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       5FDED2472D120786EC9B0A784C56D1E2B1BBBE1A
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3a2f34322d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:37 +0000
ROA not before:           Wed 29 Jul 2026 16:50:37 +0000
ROA not after:            Wed 28 Jul 2027 16:55:37 +0000
asID:                     13335
IP address blocks:        2803:f800::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:de:d2:47:2d:12:07:86:ec:9b:0a:78:4c:56:d1:e2:b1:bb:be:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:37 2026 GMT
            Not After : Jul 28 16:55:37 2027 GMT
        Subject: CN=9E5F4721CCE6120C733922CC845469E13CAD13FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2a:8f:89:7a:8c:34:9a:a8:c3:12:2d:66:d5:
                    a9:03:5b:4c:2d:47:86:96:ba:0f:e5:52:8e:3c:36:
                    54:ab:7b:5d:54:bc:a5:d9:60:2f:07:7f:18:50:8a:
                    ae:4d:4a:b1:51:ec:63:d5:49:09:8d:80:3e:ec:dc:
                    f1:c9:5d:1a:a4:13:59:6d:61:f3:7b:0b:38:a4:4e:
                    ad:12:75:c7:e5:fb:f8:40:97:3f:15:b7:26:1a:00:
                    b6:ea:34:53:45:78:f1:0d:6d:cc:4a:0b:bd:7e:b7:
                    cb:9a:dc:70:6f:e6:ce:c9:a6:cf:5d:60:57:64:da:
                    ce:b0:03:0e:25:7d:c3:63:6a:51:f1:55:fb:31:37:
                    3f:60:8e:ab:78:2f:22:3d:1f:24:5b:4b:f3:4a:21:
                    48:03:f1:0e:41:d5:05:92:1e:a3:5b:c9:76:39:76:
                    7c:59:02:b9:e1:a5:54:cb:52:33:35:62:88:a6:46:
                    b7:36:c5:09:92:5b:5a:62:2e:92:8f:44:36:77:fa:
                    54:9f:9a:fc:e2:9f:17:71:be:2d:02:c8:0d:df:98:
                    7d:5f:2a:94:2e:fd:c9:95:96:ab:3f:88:67:c8:f6:
                    df:b5:a0:1d:e2:95:94:be:4f:55:1b:7a:86:ca:2d:
                    e7:41:20:5b:54:c8:f0:6a:13:4b:4d:9f:5b:6f:21:
                    eb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5F:47:21:CC:E6:12:0C:73:39:22:CC:84:54:69:E1:3C:AD:13:FE
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3a2f34322d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800::/42

    Signature Algorithm: sha256WithRSAEncryption
         a6:8b:eb:04:df:ac:5c:10:05:b4:70:cd:b6:a9:8d:b7:58:88:
         bc:7d:f6:ee:08:1b:f2:44:08:55:3a:38:6d:13:c9:2e:f5:db:
         0a:21:d5:89:16:f5:0f:e6:ea:7a:5c:32:99:d4:15:14:b0:34:
         cb:29:45:6a:06:33:a2:90:ab:28:19:46:3a:d1:df:f1:64:72:
         6f:7b:cf:c8:8c:af:3d:c8:c0:2b:f7:07:52:be:bb:a6:ee:c2:
         d3:7e:47:d6:f7:1d:e2:30:9f:7f:2d:a8:d2:ec:a7:eb:2b:b2:
         5e:6e:b4:7a:e2:42:13:c0:6e:9b:54:be:84:86:28:66:53:a6:
         9d:33:25:29:f3:be:e1:86:90:2c:02:eb:5e:ea:1a:f1:64:b5:
         79:28:20:2a:69:b7:16:60:97:7c:41:fb:dd:21:ce:07:ea:77:
         f2:a8:cd:89:d8:57:45:eb:02:9f:6c:45:9e:e3:37:77:bb:93:
         95:05:40:dd:f6:40:98:79:ab:b7:67:70:7c:a3:52:ba:a7:6b:
         0a:f3:f2:87:ca:8b:8d:4c:12:d4:58:fd:a6:40:89:d5:37:5d:
         91:ee:f1:34:1c:f1:72:d4:34:12:94:96:45:ad:de:b6:19:e7:
         5e:f5:cc:44:aa:cd:cc:42:c6:91:78:bc:e3:ab:11:0f:80:58:
         e9:62:42:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:36:11 2026 by rpki-client