Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666530303a3a2f34302d3438203d3e203133333335.roa
File:                     323830333a663830303a666530303a3a2f34302d3438203d3e203133333335.roa (raw, json)
Hash identifier:          7egcucxd+QhcO+QzZpUyCHz57ZVN9LjEiYPXueECYeI=
Subject key identifier:   22:19:48:18:70:D0:9D:A3:7A:13:94:86:43:5A:1F:8A:6D:F0:58:38
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       5A7569B951FA7BC646C30E5CC8B26A68FB141F22
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666530303a3a2f34302d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:31 +0000
ROA not before:           Wed 29 Jul 2026 16:50:31 +0000
ROA not after:            Wed 28 Jul 2027 16:55:31 +0000
asID:                     13335
IP address blocks:        2803:f800:fe00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:75:69:b9:51:fa:7b:c6:46:c3:0e:5c:c8:b2:6a:68:fb:14:1f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:31 2026 GMT
            Not After : Jul 28 16:55:31 2027 GMT
        Subject: CN=2219481870D09DA37A139486435A1F8A6DF05838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fc:85:80:90:e8:7d:2a:1d:ed:d2:72:1c:0f:
                    6a:b5:44:1e:b7:29:2b:9a:13:c1:ae:9c:f4:7d:eb:
                    29:9e:4d:69:51:37:6b:88:cb:e3:ec:81:67:0e:8d:
                    5e:fc:bc:d5:12:e9:53:f6:3e:69:8b:c0:43:10:1a:
                    c7:bb:04:22:f6:dd:e3:61:e7:1a:b8:7c:f8:93:a6:
                    3d:46:73:1e:8a:40:fb:d3:72:ed:68:57:3d:54:75:
                    aa:7c:fc:6f:17:0e:aa:fd:d1:93:b9:f1:7b:f4:de:
                    ec:8f:6a:52:11:f6:45:9d:45:dd:92:d5:24:16:6e:
                    e6:29:be:d1:e6:b9:10:e9:3b:14:72:b6:cf:88:14:
                    cd:3c:1c:90:e7:f9:c5:9f:cf:f3:f2:62:5e:43:73:
                    d4:fb:50:d6:7f:09:1f:ae:5b:2c:b3:ff:76:b2:bd:
                    cd:0b:92:04:7d:88:d8:e5:06:11:00:8d:fc:32:3f:
                    0d:9b:a3:2a:1a:ea:89:d4:f8:b1:af:97:a8:e2:df:
                    21:ea:a3:b5:4e:64:50:54:6b:55:f6:6c:b7:6f:cd:
                    f6:8c:b4:8e:b1:8d:05:fb:f6:1b:69:59:20:3c:57:
                    18:1c:3e:ac:ca:e7:e2:9d:a7:65:30:b5:87:7e:14:
                    1a:9d:bc:e0:b8:f5:71:73:c9:c0:1a:38:c3:49:34:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:19:48:18:70:D0:9D:A3:7A:13:94:86:43:5A:1F:8A:6D:F0:58:38
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666530303a3a2f34302d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:eb:55:5f:5b:66:5f:63:bc:40:38:79:00:19:cf:2b:48:8d:
         58:d8:fe:38:b1:33:69:17:d7:84:a0:31:b9:eb:b1:28:7d:02:
         79:8a:22:0d:73:a4:2e:b3:d9:0a:9f:5e:08:7f:84:5f:ae:17:
         b0:0a:7b:2c:42:83:6e:0f:5f:14:4b:70:4a:bc:ab:f7:9a:ce:
         0e:5c:b8:f3:fd:6b:e0:18:4e:ce:d6:0e:86:88:26:90:47:37:
         e8:60:6d:6f:97:cf:93:92:a0:25:fa:35:89:76:3d:37:28:fa:
         c7:b6:e7:cc:38:3e:43:cb:ec:c0:a8:c9:27:7b:8e:3c:92:d4:
         13:67:0d:61:1f:9d:29:5f:0d:c8:32:ef:34:64:fb:58:b3:d3:
         d6:5c:86:33:6a:00:24:ed:42:bf:17:ad:74:89:ba:de:4c:3a:
         8a:21:cb:33:0e:2a:c2:6c:e5:74:bb:86:df:23:48:6b:d6:4c:
         05:ee:68:06:8f:47:d5:dd:5f:f4:cd:16:ac:d5:8c:26:12:a2:
         a3:e9:32:30:30:83:2c:e1:e0:18:44:91:83:cb:43:63:1f:e7:
         1e:f5:81:6a:ba:b9:bd:e1:1d:8f:65:3f:97:bc:ea:56:6f:78:
         88:b8:90:9e:74:c1:a6:a8:7e:a7:89:7d:2f:36:5f:0a:89:b0:
         df:d9:e1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:46:00 2026 by rpki-client