Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666383a3a2f34362d3438203d3e203133333335.roa
File:                     323830333a663830303a666666383a3a2f34362d3438203d3e203133333335.roa (raw, json)
Hash identifier:          z0ejiKq5RUW0ZMpw8YJYQYBciygmZe/ODt73D1XdBqQ=
Subject key identifier:   F7:F0:19:97:8B:32:A4:FF:52:F1:D7:2C:C8:F2:E2:F5:0B:45:0D:42
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       445BCCEC9A1A95CBC9FB64D183B401B941DEE680
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666383a3a2f34362d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:02 +0000
ROA not before:           Wed 27 Aug 2025 16:15:02 +0000
ROA not after:            Wed 26 Aug 2026 16:20:02 +0000
asID:                     13335
IP address blocks:        2803:f800:fff8::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5b:cc:ec:9a:1a:95:cb:c9:fb:64:d1:83:b4:01:b9:41:de:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:02 2025 GMT
            Not After : Aug 26 16:20:02 2026 GMT
        Subject: CN=F7F019978B32A4FF52F1D72CC8F2E2F50B450D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:bd:b9:3e:43:e7:6a:45:2a:da:3b:e2:60:
                    ea:c3:51:ac:9b:3a:aa:78:66:d9:90:02:ab:47:5d:
                    46:b6:04:6e:c1:36:f0:7e:c6:d3:b4:a8:2d:6d:94:
                    2a:d2:13:08:2f:a2:7f:73:3d:50:90:08:d3:b2:03:
                    76:5a:2a:48:cc:c4:17:eb:2b:ec:1c:01:86:fc:9c:
                    b0:04:f8:80:1e:c3:a3:35:3a:dc:35:45:91:3e:6a:
                    dd:c1:62:f4:59:77:5c:81:2e:02:15:62:b3:33:bb:
                    41:d7:55:e0:f7:9e:ed:27:50:1f:24:ce:c5:9f:6e:
                    4b:35:ec:4c:d9:61:6f:f6:5e:37:7b:3c:f1:b5:a0:
                    50:86:56:4d:3d:93:07:87:a8:f5:33:ed:9b:a0:7e:
                    22:89:50:bc:e4:28:e7:0b:a3:bf:c5:32:bd:40:6f:
                    8d:b6:35:8f:5e:60:4f:99:9a:68:2a:07:62:b5:63:
                    10:f0:e3:9e:09:8e:03:d3:ae:ef:f2:01:93:fd:50:
                    d7:df:af:4b:94:f6:fe:c2:2d:34:ae:af:94:74:5d:
                    fc:a1:ba:2c:e7:d1:2d:7e:55:17:38:03:57:0b:41:
                    9b:4f:5a:48:f3:18:6c:ee:e3:b0:56:cb:b1:ca:9c:
                    1d:61:63:f2:68:74:b2:af:64:b9:19:c2:8f:9c:08:
                    4d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F0:19:97:8B:32:A4:FF:52:F1:D7:2C:C8:F2:E2:F5:0B:45:0D:42
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666383a3a2f34362d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:fff8::/46

    Signature Algorithm: sha256WithRSAEncryption
         ab:89:89:6b:fb:03:46:20:ef:06:93:a8:37:69:27:92:fb:ce:
         ff:6d:4f:bf:a6:0a:d3:b4:0b:13:4b:d5:bc:71:a7:5f:83:27:
         08:36:c0:66:29:1c:3f:10:43:ae:2e:3d:29:09:ea:be:b9:05:
         96:34:9b:8a:3a:c5:e9:f3:3e:dc:fb:c9:76:29:bc:21:17:78:
         23:c6:2d:3a:3d:e9:56:3a:67:f0:74:d9:d4:87:30:fd:b7:fe:
         ac:8b:43:f6:78:73:5f:d0:2b:26:a8:68:19:d2:96:f8:92:69:
         09:b9:40:4c:56:73:c4:0b:d0:47:8e:5e:b4:28:60:68:00:52:
         86:b4:9e:13:c8:f6:4a:7d:28:3c:87:13:5d:4e:25:e6:e0:5b:
         9d:af:3f:33:af:a2:df:ac:8b:ce:2e:f0:47:ac:6a:86:40:e0:
         24:3a:a2:11:cb:3d:fa:49:ce:27:33:38:b6:b5:77:71:e6:04:
         2d:bb:d7:bc:de:73:5f:8f:85:c2:c2:77:57:fa:36:ac:c9:9d:
         0b:4e:42:11:92:b6:6d:ed:57:02:d3:62:cd:fb:0e:8a:9a:d5:
         53:60:5b:7e:c4:4b:7b:ec:22:56:54:ac:96:7c:40:22:50:82:
         3a:ad:54:80:b2:ef:16:26:a4:8b:ac:91:a3:40:25:32:a6:07:
         75:0d:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:43 2025 by rpki-client