Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666638303a3a2f34322d3438203d3e203133333335.roa
File:                     323830333a663830303a666638303a3a2f34322d3438203d3e203133333335.roa (raw, json)
Hash identifier:          u2GLJIXzppRmH6oqioS6akkfhgQhWTXWiPWuAgJJEoA=
Subject key identifier:   43:E3:8F:A3:5D:9F:D0:88:3B:C2:98:2A:21:AC:C8:02:BC:1E:D8:D4
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       79ABD53309352794DE4DC072EDD51B4396F186FB
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666638303a3a2f34322d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:00 +0000
ROA not before:           Wed 27 Aug 2025 16:15:00 +0000
ROA not after:            Wed 26 Aug 2026 16:20:00 +0000
asID:                     13335
IP address blocks:        2803:f800:ff80::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ab:d5:33:09:35:27:94:de:4d:c0:72:ed:d5:1b:43:96:f1:86:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:00 2025 GMT
            Not After : Aug 26 16:20:00 2026 GMT
        Subject: CN=43E38FA35D9FD0883BC2982A21ACC802BC1ED8D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:95:9a:49:ac:e7:ec:ae:99:17:16:59:86:
                    a6:aa:ef:b7:90:15:7e:bc:d6:52:27:70:13:d4:c7:
                    55:01:49:7a:8d:64:6c:01:33:c0:d6:b2:81:e6:c1:
                    d0:d9:c8:82:a3:66:13:38:72:dd:b3:3f:b8:a9:9c:
                    ea:e9:6a:0c:38:15:35:a5:db:f2:a1:0c:22:26:85:
                    e6:c4:e1:f6:fc:73:3d:b3:a5:8e:cb:f8:72:39:fc:
                    71:01:b7:0a:23:99:83:60:fe:df:df:e1:3e:59:46:
                    d2:b7:47:77:8c:87:41:ba:68:5d:5a:db:9c:53:da:
                    c9:86:41:b0:f5:d6:a8:f0:0e:eb:70:b4:9e:e6:32:
                    35:05:0f:07:94:31:1a:22:e4:0e:b7:86:e3:f5:37:
                    d6:dc:c7:5b:9b:35:aa:38:d0:3d:88:b5:7a:ed:db:
                    10:b7:e9:aa:28:2b:62:39:45:22:5e:c9:2b:5e:c8:
                    31:b3:f3:60:6e:66:69:92:56:04:4e:2f:de:61:48:
                    90:99:ae:a9:e3:4e:b4:f7:79:25:5b:4d:f2:c0:1a:
                    d7:04:98:d7:24:35:1d:46:20:0a:90:84:fc:fd:1c:
                    3a:e0:95:c7:98:fa:36:bc:b8:83:0e:29:79:56:a3:
                    c5:35:c8:ae:b7:b4:d4:47:c4:c0:00:76:a6:ca:0c:
                    ac:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E3:8F:A3:5D:9F:D0:88:3B:C2:98:2A:21:AC:C8:02:BC:1E:D8:D4
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666638303a3a2f34322d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:ff80::/42

    Signature Algorithm: sha256WithRSAEncryption
         b4:ff:0c:39:1e:f6:9b:99:95:c5:c0:94:e5:d2:e7:ce:35:cf:
         5e:8f:2c:16:70:04:00:0d:98:53:b4:e2:cf:5c:a7:0d:d8:91:
         34:c1:b7:fc:ae:35:b2:f7:98:05:37:f9:70:9e:3f:03:c1:98:
         e4:e4:e3:fb:d6:3d:7c:76:c0:c5:2d:52:cc:af:b0:86:5e:f0:
         96:ad:4a:a6:24:0f:97:04:c9:16:ca:25:c0:99:fa:c9:30:da:
         79:63:bb:27:9a:c8:2d:b8:72:2c:bd:8c:15:aa:63:5d:59:fb:
         85:06:34:1c:33:61:32:81:ee:7d:01:9b:03:5b:9e:75:36:4a:
         75:d6:73:19:53:46:d3:54:fd:d9:f5:f9:5f:4b:a9:89:1f:bb:
         9a:2f:4b:36:12:1d:3f:37:b9:89:33:db:a0:18:af:db:2e:fa:
         45:fa:7b:09:ac:5c:4a:b7:31:fc:b2:67:b3:21:42:3d:24:f1:
         6b:6b:29:59:d1:21:4a:4e:49:47:fa:a1:86:4a:56:3e:90:65:
         ed:67:50:16:1f:19:d8:0c:27:00:fd:a7:fc:6e:de:99:79:17:
         b5:48:f6:a0:28:47:ae:13:a6:4b:9c:16:27:ff:eb:d9:17:4b:
         19:db:80:fb:d8:7b:65:ec:06:3f:bd:39:2b:68:0c:e1:74:79:
         2c:88:8c:a5
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUeavVMwk1J5TeTcBy7dUbQ5bxhvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNBRUVEN0NCOTkwQzREMzc0NTcyNTFDNjQ2QzM1NUE5
MTY5ODRBMDAeFw0yNTA4MjcxNjE1MDBaFw0yNjA4MjYxNjIwMDBaMDMxMTAvBgNV
BAMTKDQzRTM4RkEzNUQ5RkQwODgzQkMyOTgyQTIxQUNDODAyQkMxRUQ4RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8pWaSazn7K6ZFxZZhqaq77eQ
FX681lIncBPUx1UBSXqNZGwBM8DWsoHmwdDZyIKjZhM4ct2zP7ipnOrpagw4FTWl
2/KhDCImhebE4fb8cz2zpY7L+HI5/HEBtwojmYNg/t/f4T5ZRtK3R3eMh0G6aF1a
25xT2smGQbD11qjwDutwtJ7mMjUFDweUMRoi5A63huP1N9bcx1ubNao40D2ItXrt
2xC36aooK2I5RSJeySteyDGz82BuZmmSVgROL95hSJCZrqnjTrT3eSVbTfLAGtcE
mNckNR1GIAqQhPz9HDrglceY+ja8uIMOKXlWo8U1yK63tNRHxMAAdqbKDKxfAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUQ+OPo12f0Ig7wpgqIazIArwe2NQwHwYDVR0j
BBgwFoAUbK7tfLmQxNN0VyUcZGw1WpFphKAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OUUxMUE0RkQ3NkZBMzE4OEEwODdFNzkyQTk2MTFDNTBG
NDA0RDNDOUVENDNDOEVEQUQyRjVGMEI4RUYyRkJELzAvNkNBRUVEN0NCOTkwQzRE
Mzc0NTcyNTFDNjQ2QzM1NUE5MTY5ODRBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Q0FFRUQ3Q0I5OTBDNEQzNzQ1
NzI1MUM2NDZDMzU1QTkxNjk4NEEwLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTlFMTFBNEZENzZGQTMxODhBMDg3RTc5MkE5NjExQzUwRjQwNEQzQzlF
RDQzQzhFREFEMkY1RjBCOEVGMkZCRC8wLzMyMzgzMDMzM2E2NjM4MzAzMDNhNjY2
NjM4MzAzYTNhMmYzNDMyMmQzNDM4MjAzZDNlMjAzMTMzMzMzMzM1LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAP4AP+AMA0GCSqGSIb3DQEBCwUAA4IBAQC0/ww5HvabmZXFwJTl0ufONc9e
jywWcAQADZhTtOLPXKcN2JE0wbf8rjWy95gFN/lwnj8DwZjk5OP71j18dsDFLVLM
r7CGXvCWrUqmJA+XBMkWyiXAmfrJMNp5Y7snmsgtuHIsvYwVqmNdWfuFBjQcM2Ey
ge59AZsDW551Nkp11nMZU0bTVP3Z9flfS6mJH7uaL0s2Eh0/N7mJM9ugGK/bLvpF
+nsJrFxKtzH8smezIUI9JPFraylZ0SFKTklH+qGGSlY+kGXtZ1AWHxnYDCcA/af8
bt6ZeRe1SPagKEeuE6ZLnBYn/+vZF0sZ24D72Htl7AY/vTkraAzhdHksiIyl
-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:43 2025 by rpki-client