Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666303a3a2f34352d3438203d3e203133333335.roa
File:                     323830333a663830303a666666303a3a2f34352d3438203d3e203133333335.roa (raw, json)
Hash identifier:          ss9MPC2Nygd7kguqyJ7GAy9ty3R0e5ZxA9512x0Di8w=
Subject key identifier:   C4:C4:04:BA:B8:96:96:24:3F:BB:DF:A5:36:90:2B:D3:AB:CD:1B:A7
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       5785BAE1BC517041A5D4F464DC8EA963A4AF2AF6
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666303a3a2f34352d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:06 +0000
ROA not before:           Wed 27 Aug 2025 16:15:06 +0000
ROA not after:            Wed 26 Aug 2026 16:20:06 +0000
asID:                     13335
IP address blocks:        2803:f800:fff0::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:85:ba:e1:bc:51:70:41:a5:d4:f4:64:dc:8e:a9:63:a4:af:2a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:06 2025 GMT
            Not After : Aug 26 16:20:06 2026 GMT
        Subject: CN=C4C404BAB89696243FBBDFA536902BD3ABCD1BA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2d:a3:3b:12:ef:45:8f:23:91:92:3d:8f:eb:
                    81:c8:e8:ad:1e:ed:63:4d:cc:ae:30:d7:9e:79:92:
                    22:b7:6e:38:b5:72:42:88:20:36:a3:e3:7f:f5:13:
                    f2:56:5f:6b:56:3d:9e:d8:66:c1:73:24:7b:30:bc:
                    6b:90:bf:6c:a3:86:39:ca:d7:da:e4:8b:46:60:d9:
                    a7:c0:98:83:c8:17:dc:72:5e:8e:19:ea:db:fb:ad:
                    b8:d1:cd:32:fd:03:9d:ae:84:73:9a:49:f1:4d:57:
                    77:a7:8a:35:5b:89:60:b5:1f:6b:4d:6d:00:dc:af:
                    18:54:15:36:d1:f9:d9:2d:3c:47:ab:17:16:4f:c3:
                    83:ec:c6:58:71:41:f7:4f:96:9a:cb:3d:bc:36:c9:
                    97:79:4d:7a:6d:a2:95:6d:a3:aa:6c:36:24:27:67:
                    52:90:2f:28:d6:14:29:8a:5e:79:2c:37:ff:90:58:
                    07:1a:3e:b9:d7:aa:ab:a5:a1:ea:fd:98:07:31:92:
                    48:d8:3e:ef:a9:c0:1d:46:04:65:53:6f:65:4a:f5:
                    d9:f4:30:b2:20:f5:84:05:d9:a2:65:5f:74:3b:15:
                    0e:74:fc:eb:25:37:65:c0:4d:3d:82:4f:47:64:77:
                    0b:0f:16:45:bc:f2:53:31:3e:bc:52:93:af:43:2b:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C4:04:BA:B8:96:96:24:3F:BB:DF:A5:36:90:2B:D3:AB:CD:1B:A7
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666303a3a2f34352d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:fff0::/45

    Signature Algorithm: sha256WithRSAEncryption
         62:e4:85:e0:8b:2f:de:68:c5:36:d1:9e:5e:49:b0:46:64:72:
         bf:a7:05:06:a3:cc:15:ab:51:38:57:a4:7d:ff:f7:f8:9e:d1:
         f2:6b:88:68:0c:be:07:e3:d6:03:3b:e3:5e:06:88:aa:64:aa:
         5f:43:d4:d0:d5:85:2b:a7:53:45:6e:46:df:a0:d6:bb:71:8f:
         f4:b3:c3:fc:6a:49:1b:b7:0d:1d:91:73:c5:09:60:1a:84:01:
         b5:42:52:07:a4:5d:8b:9e:27:41:2d:a0:9e:48:b2:7b:48:a9:
         70:a2:06:79:7c:51:c8:d9:28:a2:6e:d4:a2:d8:d8:c9:41:6b:
         7f:88:1e:19:0e:52:b9:d2:11:1d:52:09:eb:37:35:41:11:f7:
         86:ae:78:18:70:db:d5:b9:bb:d0:04:10:a7:68:7e:be:17:05:
         40:2a:ba:bf:f4:c0:db:9e:9d:a6:e1:c7:19:0c:09:0a:cd:f7:
         40:3b:6b:08:cc:58:f3:a0:ca:53:dc:59:6c:74:c2:ec:06:51:
         52:1a:14:c2:c3:c3:02:ff:0d:31:f9:45:f6:9f:36:ec:c4:de:
         65:8a:34:88:38:26:67:6e:ac:95:6f:3b:c8:a1:13:d5:aa:59:
         bf:6a:d0:db:25:34:2e:f8:7e:31:70:da:25:e1:7b:74:7c:37:
         bf:1c:a0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:43 2025 by rpki-client