Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666663303a3a2f34332d3438203d3e203133333335.roa
File:                     323830333a663830303a666663303a3a2f34332d3438203d3e203133333335.roa (raw, json)
Hash identifier:          NCMADFEDb8qSjI+iyGo0fkanXRscdWzgBOReOAM+DAs=
Subject key identifier:   00:BA:C3:99:BF:CB:17:18:24:1C:69:6F:77:35:31:28:3F:4C:74:71
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       1C24AD0B8695BFB5ED27AE10F5FD489AC944B7FD
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666663303a3a2f34332d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:08 +0000
ROA not before:           Wed 27 Aug 2025 16:15:08 +0000
ROA not after:            Wed 26 Aug 2026 16:20:08 +0000
asID:                     13335
IP address blocks:        2803:f800:ffc0::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:24:ad:0b:86:95:bf:b5:ed:27:ae:10:f5:fd:48:9a:c9:44:b7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:08 2025 GMT
            Not After : Aug 26 16:20:08 2026 GMT
        Subject: CN=00BAC399BFCB1718241C696F773531283F4C7471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0a:6d:b8:bc:87:b8:23:da:91:ee:8d:19:dd:
                    38:4b:6d:28:08:09:6e:2d:02:10:41:95:2b:a2:65:
                    a5:f8:af:ed:d0:c6:6f:9e:fd:9f:43:d5:25:00:c8:
                    6c:df:0e:19:04:2a:aa:a0:85:bb:07:c7:4a:c4:89:
                    2e:2f:f2:cf:7e:7b:45:76:78:fe:03:a5:e1:41:b5:
                    8a:02:6b:2a:29:6b:28:5a:31:6f:67:ae:40:14:30:
                    21:db:4b:37:44:36:eb:0f:9d:cc:f3:e0:9b:96:4c:
                    91:6e:fe:0a:12:9b:b8:f9:1d:ed:11:ce:e6:58:93:
                    75:5c:7a:40:e5:cc:17:3c:be:6a:32:ee:c8:80:8b:
                    75:1b:9d:13:88:cb:71:f5:50:d8:09:35:b7:fa:64:
                    00:74:7f:ba:68:8d:99:d2:98:a5:b9:12:cf:13:79:
                    46:ca:b7:63:02:09:34:7e:90:68:73:b5:38:c6:4e:
                    d0:09:e9:f7:41:f2:5e:bf:1f:11:a8:16:0c:3c:0a:
                    80:29:ad:df:6f:b5:5c:ec:d4:38:ed:cb:a7:cf:81:
                    c4:df:0d:e6:c4:ce:df:05:40:85:09:85:28:a5:f0:
                    a6:71:b3:fc:7e:64:6e:61:d0:9b:01:67:6e:cc:c6:
                    ff:83:a4:d2:1f:dc:bc:b9:c3:9d:0a:a8:c7:65:08:
                    4e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BA:C3:99:BF:CB:17:18:24:1C:69:6F:77:35:31:28:3F:4C:74:71
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666663303a3a2f34332d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:ffc0::/43

    Signature Algorithm: sha256WithRSAEncryption
         b1:7c:bb:20:95:d4:2d:d0:d5:0c:79:47:48:b5:fd:9a:25:6b:
         36:77:b6:d2:aa:d5:dc:cd:a0:83:7a:de:e9:c4:74:33:e8:61:
         d0:8a:a2:18:7b:c9:a0:ba:ef:07:56:df:b1:c5:f0:72:d5:52:
         be:49:69:fa:16:75:7b:78:29:ba:e8:43:94:60:5e:df:96:7d:
         da:0a:af:7c:9f:6c:8d:0d:42:22:43:36:d4:23:8a:2d:1e:c4:
         cb:03:63:05:f3:52:2d:ca:51:54:74:a2:bb:d6:6e:41:6a:01:
         f2:6c:55:cc:2e:a6:21:5c:f1:54:f7:fa:bf:10:c5:90:be:56:
         19:da:e7:d1:d6:8d:9b:51:68:99:84:12:57:6e:06:f2:df:a2:
         58:3b:69:bd:18:53:b5:b5:32:53:9a:e1:0b:39:84:15:8a:c9:
         79:f1:14:a4:26:77:4c:69:5f:e2:3c:1d:a6:3f:a0:5b:9a:5f:
         bb:ad:3c:1d:2a:3c:61:1a:f3:8e:53:94:f9:e2:54:0a:f4:9a:
         39:fe:88:f1:2d:3e:62:94:4b:78:6d:95:d2:78:d9:b7:99:9c:
         61:a8:16:84:ce:a2:19:b4:14:5a:da:63:df:85:53:87:f4:d1:
         46:00:d1:f6:d0:91:98:9b:94:c3:e6:b7:9b:d1:dd:a9:1c:a1:
         8d:03:66:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:44 2025 by rpki-client