Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666638303a3a2f34322d3438203d3e203133333335.roa
File:                     323830333a663830303a666638303a3a2f34322d3438203d3e203133333335.roa (raw, json)
Hash identifier:          kHUI5oRvpSqBWsuWKZTOBGYbWx2NwSguLw2Km2FHyrM=
Subject key identifier:   A5:71:5D:8D:4F:92:52:B1:7B:92:4B:CF:C1:8B:FE:1A:EE:EF:DB:40
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       721E8FD71D2A1B8835F99EE44B8C5AABA87A0494
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666638303a3a2f34322d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:38 +0000
ROA not before:           Wed 29 Jul 2026 16:50:38 +0000
ROA not after:            Wed 28 Jul 2027 16:55:38 +0000
asID:                     13335
IP address blocks:        2803:f800:ff80::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1e:8f:d7:1d:2a:1b:88:35:f9:9e:e4:4b:8c:5a:ab:a8:7a:04:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:38 2026 GMT
            Not After : Jul 28 16:55:38 2027 GMT
        Subject: CN=A5715D8D4F9252B17B924BCFC18BFE1AEEEFDB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:14:be:f2:c8:4a:7d:7c:d5:af:a7:40:95:
                    7b:29:82:ee:c5:58:36:94:4a:52:29:22:fe:83:7c:
                    6f:0c:98:f7:5a:40:5c:5d:88:9d:3c:c2:f5:61:6a:
                    47:9a:11:72:51:cf:91:1d:14:e6:53:a5:09:42:0e:
                    36:48:89:1c:a9:61:8c:6f:7c:bf:1a:c7:23:43:fb:
                    12:45:13:b2:ce:86:99:07:2a:a7:74:c8:34:2b:6c:
                    53:fd:2b:e2:9f:42:f5:c6:b4:07:e2:01:e8:f7:e0:
                    0b:4b:5e:c2:fd:8a:1f:a8:cc:31:e3:92:fe:2a:e0:
                    31:e2:c2:84:1c:ca:72:6b:6f:5d:d3:18:5d:f0:ad:
                    29:2c:43:12:f8:93:98:9d:37:46:59:ee:3c:85:fc:
                    39:2b:d2:0a:40:5a:65:ea:16:09:99:71:98:c7:96:
                    83:ae:91:33:97:b6:73:37:f4:02:b6:85:09:c8:ad:
                    af:03:8c:f4:bb:7b:30:c9:08:fe:db:1e:a5:77:d5:
                    51:f2:29:2e:40:12:39:6a:81:49:23:ef:ce:58:3b:
                    4d:e8:01:a0:53:e3:58:fd:fa:75:3b:53:ba:55:26:
                    31:40:17:d5:04:8c:5a:95:fe:1c:9b:a7:7f:a3:39:
                    55:b6:0e:a4:77:d6:b7:03:ef:21:ee:46:73:ab:e5:
                    12:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:71:5D:8D:4F:92:52:B1:7B:92:4B:CF:C1:8B:FE:1A:EE:EF:DB:40
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666638303a3a2f34322d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:ff80::/42

    Signature Algorithm: sha256WithRSAEncryption
         24:eb:43:ea:3a:3a:d7:b2:89:58:5e:db:15:59:2e:f3:34:a3:
         4a:ce:31:14:7c:ff:f5:63:91:be:8f:2a:80:dc:ec:8f:a1:75:
         99:5f:ff:48:83:a2:fd:6f:05:29:a0:49:fb:4c:c3:15:c1:1e:
         7e:97:17:38:14:d0:3a:a1:c4:f4:98:3a:39:13:5b:f9:8f:37:
         17:82:55:f0:7b:a0:ac:b7:6f:33:18:b8:06:40:1e:b9:11:c3:
         b5:50:3f:36:e6:f1:e8:58:c0:2c:a3:50:d5:76:89:5c:6b:2c:
         3e:cb:6f:c6:ac:b2:c3:08:9b:57:43:59:0d:06:17:24:6d:67:
         1e:ef:64:38:36:ad:58:a9:6f:f6:9e:00:55:10:39:99:ae:8c:
         45:4d:62:3e:dd:a5:e6:5f:0a:ce:e0:f5:40:33:7d:50:a3:1d:
         ce:20:42:60:a7:64:d0:97:dd:fb:d7:84:6e:be:bb:26:3d:b8:
         9d:eb:fc:5f:e4:47:df:3c:70:f0:e1:4c:4c:82:0e:5d:eb:43:
         cb:07:46:d0:f1:e5:6d:7c:3d:43:fa:50:0c:b6:16:93:d4:d5:
         8b:2d:c4:dc:af:ee:a6:9c:a4:4c:ed:a6:9a:3e:db:48:c6:07:
         e0:97:71:6b:32:19:9b:5b:91:ba:59:24:ab:47:78:29:a9:70:
         28:73:90:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:46:13 2026 by rpki-client