Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666383a3a2f34362d3438203d3e203133333335.roa
File:                     323830333a663830303a666666383a3a2f34362d3438203d3e203133333335.roa (raw, json)
Hash identifier:          61XS8HXCTt3Gwtear7mlKVNcptXXHjQm6Ds1KdNiF1w=
Subject key identifier:   98:CB:60:E1:30:0A:D1:B8:32:9B:7C:9D:1C:FF:23:C2:C6:34:DB:FB
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       70FDC2638A082288F25533CDF3562893FFA03A31
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666383a3a2f34362d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:29 +0000
ROA not before:           Wed 29 Jul 2026 16:50:29 +0000
ROA not after:            Wed 28 Jul 2027 16:55:29 +0000
asID:                     13335
IP address blocks:        2803:f800:fff8::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fd:c2:63:8a:08:22:88:f2:55:33:cd:f3:56:28:93:ff:a0:3a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:29 2026 GMT
            Not After : Jul 28 16:55:29 2027 GMT
        Subject: CN=98CB60E1300AD1B8329B7C9D1CFF23C2C634DBFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:09:66:38:c4:dc:f4:41:11:c6:4d:eb:26:5b:
                    6c:56:b9:2a:4c:eb:5a:e6:fb:1e:53:ea:cd:8d:1f:
                    a6:f7:06:62:d2:2f:da:94:e6:16:19:34:0a:5b:18:
                    2f:f8:6d:26:93:22:71:b3:5d:fa:d2:67:dc:1b:e9:
                    dc:a8:e6:5c:75:f4:5f:e2:b5:22:b1:6b:af:1d:b2:
                    e0:40:3f:d9:ae:39:15:b7:f5:8e:18:83:de:1f:b0:
                    4b:3d:0c:d5:6b:63:a5:a7:34:cf:99:16:ee:1e:73:
                    04:49:5c:12:f1:63:8a:0f:e0:0c:1d:61:df:a3:8f:
                    ee:68:f5:ab:00:10:11:47:dd:a9:29:f0:7e:02:58:
                    b2:d8:66:ee:63:e1:99:ad:72:ab:dd:05:c8:80:be:
                    98:d2:fb:ea:f6:71:db:7f:97:72:ec:38:eb:5f:63:
                    29:7c:39:1e:20:3c:55:c2:cd:19:99:34:2f:6e:2c:
                    3c:43:06:ef:cb:8c:4f:c8:0a:f5:7d:96:a0:dd:08:
                    a2:22:26:d1:cf:33:56:5d:8c:da:27:12:af:a5:17:
                    21:da:96:f4:de:a8:10:21:aa:c0:5a:77:0b:50:ff:
                    36:26:da:41:27:19:19:93:33:6b:cc:ea:8b:22:07:
                    95:24:07:56:bb:5e:45:9d:cc:1d:5c:2a:f0:76:57:
                    ab:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CB:60:E1:30:0A:D1:B8:32:9B:7C:9D:1C:FF:23:C2:C6:34:DB:FB
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666383a3a2f34362d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:fff8::/46

    Signature Algorithm: sha256WithRSAEncryption
         3c:57:1a:eb:4e:e5:83:52:3e:9e:6a:ff:c8:6e:ed:d3:00:fa:
         3d:28:5d:d3:df:87:ee:5d:e4:2a:8d:b7:7b:f8:41:fb:9a:9b:
         bb:71:5f:e6:d3:af:f4:06:0f:2f:ec:98:71:98:67:fb:54:28:
         3b:93:4e:e9:5f:f8:2f:2a:67:0c:9e:5e:65:d7:27:7d:a7:a7:
         f4:33:02:97:03:35:20:1c:03:22:88:6c:d6:5a:22:fd:51:b3:
         1a:6d:95:41:ce:82:d9:47:09:b6:b5:8e:06:97:11:ca:8d:0e:
         8d:32:9d:c2:12:8a:53:fd:a1:6b:48:11:08:02:78:0b:16:d7:
         b5:99:c5:4f:9b:08:56:a5:b4:be:1d:25:36:37:da:f7:2e:7f:
         a9:af:ec:31:24:44:26:76:da:82:c2:06:fc:c4:41:7f:fc:8f:
         74:03:07:33:01:c0:3f:6c:98:f0:9e:b8:0f:d9:b1:5d:f8:84:
         4b:f1:59:58:f5:db:21:1b:c2:95:72:c4:61:4e:ef:37:83:4c:
         57:cb:3c:38:b4:36:49:cd:34:fd:74:4f:a1:af:93:24:11:bd:
         3e:69:37:d9:83:6e:6a:9d:4b:9a:b4:3e:a7:19:ba:9f:57:4e:
         8f:e7:e1:05:ab:04:fa:9b:dd:56:c2:48:d2:d0:c1:bc:0f:50:
         3e:fa:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:46:13 2026 by rpki-client