Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a633030303a3a2f33352d3438203d3e203133333335.roa
File:                     323830333a663830303a633030303a3a2f33352d3438203d3e203133333335.roa (raw, json)
Hash identifier:          AX6F6B0kHthq3h22PKS1jojSnp9dZfHcVXZSbTWr5A8=
Subject key identifier:   DA:E4:9E:30:1D:13:DC:6C:2C:EC:80:16:29:3C:FC:0D:A4:2D:75:C1
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       46BC161C2971B52E00A10AE7BFBBDE85E7DAE912
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a633030303a3a2f33352d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:04 +0000
ROA not before:           Wed 27 Aug 2025 16:15:04 +0000
ROA not after:            Wed 26 Aug 2026 16:20:04 +0000
asID:                     13335
IP address blocks:        2803:f800:c000::/35 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bc:16:1c:29:71:b5:2e:00:a1:0a:e7:bf:bb:de:85:e7:da:e9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:04 2025 GMT
            Not After : Aug 26 16:20:04 2026 GMT
        Subject: CN=DAE49E301D13DC6C2CEC8016293CFC0DA42D75C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:2a:28:c0:2c:0f:b5:52:af:2f:bb:f7:22:
                    e0:4a:09:26:3c:6b:c3:cf:d8:30:87:d2:25:54:43:
                    ce:9b:c1:58:97:80:28:8a:92:be:0c:17:bc:25:63:
                    90:b1:56:19:15:ab:a6:18:63:db:3e:e1:5e:f4:c7:
                    51:de:3d:16:34:19:74:9d:b5:4b:28:75:42:53:22:
                    41:b2:0c:21:47:95:44:3e:ac:94:0c:1c:40:fe:3a:
                    42:28:a9:ef:93:c2:1a:d5:28:92:58:c5:f4:e7:05:
                    df:d2:af:e1:7a:8b:fc:c7:e3:0e:b1:a4:77:35:a8:
                    b5:74:a9:1d:26:af:44:39:d1:d4:aa:35:42:1f:b1:
                    5c:c9:50:05:dd:fc:2b:96:c4:f2:3f:fa:37:95:e3:
                    f6:7e:0d:8e:0d:4c:e2:08:1c:b5:c6:7b:6e:f8:56:
                    2d:9b:89:8b:af:15:35:65:ca:9a:8d:cd:b8:38:f4:
                    4f:ef:74:e9:93:ab:e7:d8:76:89:ba:87:39:03:88:
                    e9:e7:58:5d:25:4b:39:be:74:1c:40:89:62:24:11:
                    f3:64:23:72:a2:39:b5:10:4d:b0:7b:55:31:3c:88:
                    9d:a7:94:60:9e:64:16:06:84:6b:43:0f:5d:6e:02:
                    3f:c4:a2:6d:47:3b:d5:56:12:e9:35:9c:ce:53:68:
                    60:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E4:9E:30:1D:13:DC:6C:2C:EC:80:16:29:3C:FC:0D:A4:2D:75:C1
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a633030303a3a2f33352d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4d:64:eb:6d:18:bb:82:63:b3:0c:10:f1:d6:ba:99:a1:bf:91:
         04:af:47:68:d8:ae:e2:9f:d1:68:59:34:f1:d7:55:8b:5d:e3:
         b1:f2:11:61:27:a7:32:1f:dd:be:2d:eb:78:ca:e7:f2:17:f0:
         d7:ee:94:7e:6b:89:ab:5b:55:3f:2e:47:88:eb:f4:bf:85:f6:
         8d:df:59:84:8f:33:14:a4:d1:0c:cf:96:a2:7d:aa:4d:38:af:
         be:fe:1a:d5:f6:f3:72:1e:02:22:a4:28:72:9b:03:da:5b:ff:
         7a:32:d6:74:7a:2b:a5:bc:9c:d3:00:86:42:d4:58:49:53:96:
         c5:e6:b9:22:18:8c:de:a9:cf:ef:45:21:04:cb:07:f1:fa:96:
         af:05:c5:01:d9:01:32:35:13:71:48:25:6f:a1:44:88:ae:db:
         79:eb:fb:87:25:44:19:dd:8c:4e:14:fa:f6:95:41:ef:6d:98:
         af:a2:dc:a6:46:26:3c:75:b7:48:88:3b:4f:07:a4:4c:78:e0:
         c4:09:c7:22:aa:0a:63:fd:e9:2c:db:9e:a8:1b:a5:17:2e:08:
         85:d5:c1:79:d6:8a:e7:52:bf:a8:44:13:00:9c:61:73:74:45:
         ca:c6:cb:38:4e:59:72:1e:50:b7:5b:0a:55:17:e4:f9:82:b8:
         a8:54:4b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:53:26 2025 by rpki-client