Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666630303a3a2f34312d3438203d3e203133333335.roa
File:                     323830333a663830303a666630303a3a2f34312d3438203d3e203133333335.roa (raw, json)
Hash identifier:          akvbZLpQH+6Nnkpi6JUwoQFzRN9L4740uZUKUDBZMkQ=
Subject key identifier:   6C:F9:27:7D:81:D0:6A:0D:BD:E5:D9:16:AD:B9:11:CC:73:04:36:EC
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       52F2CFA0F4818B7CE23D6362E7773068A7EDE0F0
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666630303a3a2f34312d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:07 +0000
ROA not before:           Wed 27 Aug 2025 16:15:07 +0000
ROA not after:            Wed 26 Aug 2026 16:20:07 +0000
asID:                     13335
IP address blocks:        2803:f800:ff00::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f2:cf:a0:f4:81:8b:7c:e2:3d:63:62:e7:77:30:68:a7:ed:e0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:07 2025 GMT
            Not After : Aug 26 16:20:07 2026 GMT
        Subject: CN=6CF9277D81D06A0DBDE5D916ADB911CC730436EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:65:f8:9b:a9:c0:c6:cf:5f:21:8d:03:e4:
                    2c:aa:d5:75:0a:a8:40:0c:fb:4c:7e:ca:8f:91:0e:
                    a0:f8:b3:08:4b:36:4b:cf:7b:2c:25:3e:fe:b2:a9:
                    58:d4:c6:1f:b2:44:81:2a:ea:3a:1b:18:8c:08:6a:
                    6e:1e:e2:3d:e6:dd:df:c4:6d:57:19:79:08:88:86:
                    79:e2:dd:62:3c:dd:26:77:e0:f5:17:18:c7:e9:e2:
                    d7:0f:3c:89:99:1e:1d:2d:fd:61:40:26:e8:05:35:
                    46:1d:4e:9a:7a:dd:f5:15:87:f0:12:5f:98:6e:42:
                    db:a5:47:33:db:d6:14:4d:69:8b:bc:89:61:0d:95:
                    7a:c9:45:60:68:89:75:b3:6f:52:90:98:9b:ac:94:
                    2a:29:04:e7:d1:a8:61:be:c1:70:38:95:dc:ff:c8:
                    5c:e7:a9:e5:d7:82:81:a4:7c:24:ad:a1:a2:d6:95:
                    bc:c0:b7:02:c5:22:77:42:57:00:06:56:8f:f7:db:
                    f0:11:93:54:14:a7:89:c9:4c:ea:c6:d4:e6:79:45:
                    54:3f:34:86:ec:05:c9:14:a2:3c:78:68:d7:77:87:
                    87:dc:d9:4b:4c:de:1b:11:57:10:b1:93:43:eb:cc:
                    0e:81:7a:b1:b5:9a:06:81:14:86:01:89:74:7d:3d:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F9:27:7D:81:D0:6A:0D:BD:E5:D9:16:AD:B9:11:CC:73:04:36:EC
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666630303a3a2f34312d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:ff00::/41

    Signature Algorithm: sha256WithRSAEncryption
         a9:e6:cd:24:5c:51:b9:24:ea:1d:64:45:ee:49:7e:2a:66:84:
         cc:6d:4b:e5:c0:20:67:33:75:75:bc:06:9b:f2:4e:40:3a:40:
         72:09:29:ff:92:7f:94:93:d8:4e:f8:f1:c2:54:bf:57:c8:5d:
         58:30:d6:11:25:b5:77:08:e6:6e:ad:b4:e8:df:83:3d:bc:33:
         5a:ac:da:af:1a:da:0a:16:58:19:ad:2d:05:d9:a0:c8:bd:78:
         4d:be:12:9b:9c:8b:81:d4:95:6a:ef:69:fe:33:14:0b:c1:75:
         dc:e2:51:5f:da:9d:5f:88:44:08:ff:8a:e9:db:93:9c:1b:9c:
         8d:c3:68:03:4f:98:01:6c:0e:ea:f3:1b:b4:93:22:aa:04:cf:
         8f:a7:78:b0:f6:7e:98:fc:bc:75:75:ce:0f:41:80:e6:42:02:
         7a:6d:5b:bc:b0:21:04:1c:f4:67:f1:af:e4:a2:d1:13:31:7e:
         05:46:ba:76:5a:cd:1c:6d:84:a3:0c:57:77:e7:59:19:46:32:
         99:ba:60:ee:29:77:5e:3e:f3:7e:ad:3f:cc:75:37:a2:32:23:
         fe:d0:df:60:61:69:c5:a3:d3:e1:25:8f:9b:6f:55:81:6f:ac:
         82:bd:5a:e3:59:8a:9a:c0:41:4d:4c:95:8e:0c:68:2c:70:9c:
         72:ea:d5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:43 2025 by rpki-client