Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666665303a3a2f34342d3438203d3e203133333335.roa
File:                     323830333a663830303a666665303a3a2f34342d3438203d3e203133333335.roa (raw, json)
Hash identifier:          25MW0UBf3ClgpdePlaHnABHN2xPwI+ggzc2stx1duXM=
Subject key identifier:   94:D0:90:B4:86:BF:C9:0B:98:1C:48:4C:1F:BE:E5:01:0E:4F:D4:57
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       0E0B464F04E060986D548EF5C3F007B8C8697936
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666665303a3a2f34342d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:34 +0000
ROA not before:           Wed 29 Jul 2026 16:50:34 +0000
ROA not after:            Wed 28 Jul 2027 16:55:34 +0000
asID:                     13335
IP address blocks:        2803:f800:ffe0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0b:46:4f:04:e0:60:98:6d:54:8e:f5:c3:f0:07:b8:c8:69:79:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:34 2026 GMT
            Not After : Jul 28 16:55:34 2027 GMT
        Subject: CN=94D090B486BFC90B981C484C1FBEE5010E4FD457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:60:b1:4f:f6:65:be:51:5b:13:4c:32:02:
                    b1:51:96:0b:05:39:df:b5:c1:e3:e5:cf:2a:9b:a9:
                    c9:cc:f2:15:ff:52:71:ef:03:0a:5a:82:8b:61:4c:
                    2e:6c:2b:cf:c7:19:a4:b2:e2:32:c2:d5:d3:78:17:
                    53:01:d5:fb:7d:17:cf:a5:b8:84:02:4e:d4:eb:f0:
                    8c:c3:cd:c1:42:b8:80:5a:d2:88:60:b8:2b:85:9e:
                    a9:b6:b0:ee:8a:fb:c4:75:af:8c:f5:70:97:53:5b:
                    de:a1:30:b7:cf:5d:fe:7d:70:37:03:f9:c9:0f:5d:
                    16:90:af:4c:2e:2a:31:9c:40:cc:7e:fe:6d:e3:bb:
                    53:33:02:bb:cf:f2:87:5e:60:ca:32:1d:cc:9f:0f:
                    9a:a4:25:a2:33:f6:5c:34:b4:5b:3c:37:06:70:9c:
                    fe:88:1b:3e:dc:db:7a:8a:af:b1:ad:a4:1a:d0:e6:
                    f9:5b:9e:b3:89:b1:e0:2c:a6:24:b8:12:41:01:7c:
                    b5:f8:61:0c:ce:a1:7e:71:32:29:62:6f:3d:8b:ae:
                    70:91:35:ea:7b:d7:5d:80:9f:c7:8e:1d:f6:4e:00:
                    de:6b:9c:5d:db:8c:17:7e:74:f6:27:ec:d1:d6:03:
                    e9:17:84:4a:ea:a4:ce:a6:73:11:15:33:5f:a0:11:
                    82:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D0:90:B4:86:BF:C9:0B:98:1C:48:4C:1F:BE:E5:01:0E:4F:D4:57
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666665303a3a2f34342d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:ffe0::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:9e:8f:ba:6f:1d:bf:0b:51:5e:62:41:4f:0f:6f:dd:15:ac:
         9b:06:a2:b3:75:59:c7:af:a5:c6:4a:84:84:48:0c:55:8f:e8:
         95:7e:97:24:52:63:64:4a:71:9e:f0:e2:16:45:29:47:5e:2c:
         32:a8:f2:9b:3e:aa:b8:dc:4b:da:da:8d:d4:a4:71:f5:0c:b0:
         8b:28:7d:6c:e7:e5:93:5c:c5:92:d9:7f:c8:b2:3a:f2:cd:a8:
         ee:54:32:5f:81:bd:9e:b5:c4:5b:f4:c1:ba:04:a7:c4:30:db:
         cd:6c:f1:6c:ea:44:d8:0a:dd:25:18:0c:0f:34:5f:30:8f:88:
         36:a7:66:94:69:ec:93:a2:ed:6e:36:3a:b2:d6:dc:82:c7:5a:
         05:bb:c5:4b:1c:d1:d8:3f:ce:e6:4b:81:7f:b6:0e:dc:ff:4e:
         15:91:4b:35:34:7b:3b:50:41:67:24:9b:b8:ce:c9:99:57:ae:
         05:86:84:0d:5a:81:fb:d1:b2:fa:5e:ab:2d:81:2e:0b:ad:ba:
         47:db:86:86:08:f8:0c:fa:13:a1:6d:71:6c:cf:bf:26:bc:ea:
         15:78:50:87:0f:07:2c:76:42:94:96:87:65:97:74:75:6f:07:
         52:0f:44:af:8b:3c:e6:7f:9b:df:d9:55:a6:74:b2:ac:b1:49:
         bb:25:02:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:46:10 2026 by rpki-client