Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a663030303a3a2f33372d3438203d3e203133333335.roa
File:                     323830333a663830303a663030303a3a2f33372d3438203d3e203133333335.roa (raw, json)
Hash identifier:          mWzLffVI89nuU/YpFtFLDhvHMibe+U7M5nzrVPdu5Fo=
Subject key identifier:   3F:9B:1C:69:96:DD:40:5F:12:CA:7F:D0:3B:FE:3F:AA:74:BC:7C:79
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       50AB817B0DA060A9311F795640D38E38C23640AF
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a663030303a3a2f33372d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:06 +0000
ROA not before:           Wed 27 Aug 2025 16:15:06 +0000
ROA not after:            Wed 26 Aug 2026 16:20:06 +0000
asID:                     13335
IP address blocks:        2803:f800:f000::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ab:81:7b:0d:a0:60:a9:31:1f:79:56:40:d3:8e:38:c2:36:40:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:06 2025 GMT
            Not After : Aug 26 16:20:06 2026 GMT
        Subject: CN=3F9B1C6996DD405F12CA7FD03BFE3FAA74BC7C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:f0:16:36:84:f4:42:f4:90:f9:e6:3b:2a:
                    dc:29:2b:ce:74:7c:7b:d3:45:1a:a6:d0:f3:8f:3b:
                    af:33:7a:b3:ca:f5:b2:5b:6f:6a:99:8c:f4:cc:33:
                    79:2b:87:00:01:28:e8:c6:32:2f:96:9c:58:02:20:
                    26:3c:a4:f4:6c:c6:aa:4f:e8:e5:4d:48:ba:f9:35:
                    8f:24:6b:fa:94:41:50:4d:4c:e4:9e:37:4b:2d:e9:
                    d3:8c:eb:5f:d3:3a:d4:d6:f3:be:d1:62:de:76:31:
                    11:08:7f:dc:72:a4:67:db:01:c2:13:e9:05:e1:c4:
                    69:13:76:41:c6:5b:55:57:91:ea:0a:57:c2:6a:54:
                    24:9a:5a:13:03:48:55:2b:ff:5f:91:e2:d2:4b:d7:
                    43:97:ff:7b:f2:a0:4e:75:b3:b5:7c:7d:46:32:60:
                    0c:06:3e:bb:49:3a:ef:5f:4d:06:cf:10:68:2d:fb:
                    a8:4c:93:c7:5c:c7:ed:51:26:2b:9f:79:dc:56:91:
                    38:e3:5a:9f:5c:44:21:f1:26:88:c5:87:3b:ba:2a:
                    26:fc:eb:34:4e:bd:a6:f4:53:7b:73:95:73:a6:25:
                    44:a1:4f:d0:1c:27:14:dc:9f:89:da:8a:7a:7c:04:
                    e2:fd:06:7d:65:82:1e:c1:92:0e:89:25:f0:b5:1f:
                    de:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9B:1C:69:96:DD:40:5F:12:CA:7F:D0:3B:FE:3F:AA:74:BC:7C:79
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a663030303a3a2f33372d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:f000::/37

    Signature Algorithm: sha256WithRSAEncryption
         5a:09:79:dd:54:dc:a6:f9:a2:2e:f8:11:86:58:3b:13:96:0c:
         6d:82:32:29:31:07:06:e6:62:bb:c8:13:f0:b3:b8:c5:1a:6d:
         4b:fc:93:42:64:39:cf:37:6e:54:10:1a:13:cd:5b:c9:fe:3b:
         eb:49:47:00:fa:ef:3f:f1:7e:28:be:db:2e:8e:67:94:d0:f2:
         41:2f:d3:95:33:bb:9f:dc:32:de:1f:f5:7a:dd:04:17:38:96:
         ab:27:f2:fb:62:59:40:da:ae:c8:0e:5b:c2:35:a1:f9:7d:e8:
         6e:c9:b1:8a:5a:ff:05:0c:47:7e:8a:20:c6:99:bc:2c:fe:1a:
         f1:82:e0:56:78:26:6a:ab:c5:7e:57:ba:dd:b1:e3:17:b4:6e:
         52:c1:d3:87:7b:eb:ee:8a:71:85:7d:a6:6e:a6:b2:89:4a:63:
         89:52:c8:97:d5:5e:3b:7f:02:a1:7f:05:65:ec:77:71:ee:d1:
         ac:83:75:28:d8:e2:ee:f7:8e:98:8f:7a:83:f0:fa:a0:04:ec:
         a3:02:8b:8f:39:7f:b2:e6:f6:3b:65:10:2e:94:3d:fd:63:db:
         63:85:7f:96:53:03:16:1d:57:dd:84:8c:7c:e9:79:11:0f:16:
         f5:a2:0f:91:25:5b:25:ba:82:e9:5b:2b:4b:62:2c:c7:9d:c2:
         bb:5f:97:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:53:26 2025 by rpki-client