Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666653a3a2f34382d3438203d3e203133333335.roa
File:                     323830333a663830303a666666653a3a2f34382d3438203d3e203133333335.roa (raw, json)
Hash identifier:          dXZC13RMfHReqgo9OzbKy4uayByeARTLBasWtHOR0Us=
Subject key identifier:   55:FC:41:11:44:07:50:7B:B8:FE:76:3E:BC:72:50:37:8B:62:3C:84
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       34B76BCE67092B682EFEADDD6722EAEA2AAFAE48
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666653a3a2f34382d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:33 +0000
ROA not before:           Wed 29 Jul 2026 16:50:33 +0000
ROA not after:            Wed 28 Jul 2027 16:55:33 +0000
asID:                     13335
IP address blocks:        2803:f800:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b7:6b:ce:67:09:2b:68:2e:fe:ad:dd:67:22:ea:ea:2a:af:ae:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:33 2026 GMT
            Not After : Jul 28 16:55:33 2027 GMT
        Subject: CN=55FC41114407507BB8FE763EBC7250378B623C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:57:fa:78:8a:52:8e:d7:85:5d:ba:0a:41:
                    c4:ae:94:d3:85:87:c3:2f:b6:1d:a8:b6:74:b2:47:
                    c6:06:ea:62:ac:63:71:a2:46:52:cc:19:4d:13:c0:
                    99:a2:0e:d4:0d:b8:4e:a5:96:f2:e0:98:01:91:85:
                    3d:92:39:70:60:fb:0b:7b:43:95:86:23:a3:fe:cc:
                    4a:6a:d1:0b:88:d3:71:c9:fd:e6:90:8e:6f:da:2b:
                    28:1e:1c:bb:5a:b7:a7:35:28:56:41:db:6f:41:a1:
                    89:bc:a1:dd:54:7f:00:6b:8b:c9:c0:76:92:f5:85:
                    8d:29:6b:83:ba:2f:53:68:a8:37:11:0e:40:60:19:
                    ff:a4:40:35:85:2f:e6:38:93:10:ad:74:b7:b1:2d:
                    74:b2:ff:26:98:95:68:f2:89:51:33:92:5b:be:a3:
                    d9:85:41:1b:5b:87:e9:ea:d7:a1:b8:0d:a0:b5:7b:
                    ed:f5:68:fd:a5:d9:33:92:8e:f4:6e:c2:1a:4f:dd:
                    62:9f:49:f2:58:71:26:2e:f1:75:5e:36:57:e8:6c:
                    24:56:b7:42:c1:91:35:68:41:ba:42:0a:e0:ec:36:
                    24:41:c0:df:1c:68:24:2d:60:d0:52:42:f2:02:a9:
                    af:6a:22:55:3c:70:0f:14:26:5e:6e:65:b9:d0:e4:
                    f1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FC:41:11:44:07:50:7B:B8:FE:76:3E:BC:72:50:37:8B:62:3C:84
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666653a3a2f34382d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:4c:c9:59:b5:ef:b4:f9:ca:85:b7:4a:40:97:3e:6b:13:0a:
         d1:4e:2c:7b:c6:be:70:0f:ae:72:6a:55:9d:59:5f:4e:e5:b1:
         70:19:9c:10:ae:e5:ec:a9:11:77:4f:1e:0f:20:a5:cd:de:a4:
         b6:11:64:2d:f9:17:0d:f5:8e:d8:2a:22:42:5d:a0:89:d4:d6:
         c4:de:90:65:a3:37:27:76:73:69:f6:3b:0b:da:b4:b7:2c:0e:
         6b:13:17:3a:a0:3e:e9:74:d8:0b:6c:31:e9:3f:0c:d1:e2:94:
         bd:b4:2a:a5:6f:8a:e6:bb:67:0e:3f:9b:69:5c:e1:d4:48:2c:
         3c:ed:4c:17:7a:54:72:06:c1:e0:cc:d2:9c:ec:d8:73:5a:15:
         8f:42:38:1c:01:c8:ec:95:19:ea:33:e8:6b:4a:64:fc:95:7b:
         73:63:31:9f:88:aa:5e:30:67:c0:14:a0:97:7a:40:99:72:54:
         7f:ca:d2:a3:26:a7:ac:cd:55:17:f5:51:ad:f7:16:e1:0e:e0:
         e9:a9:50:45:2c:96:d8:62:f5:51:02:90:c3:b8:ef:a5:8f:9d:
         46:2f:47:77:c2:5a:54:fd:00:ab:32:ca:8e:22:5a:3a:28:8c:
         82:3f:53:c8:61:df:3f:c8:0d:f7:7b:db:80:ba:42:84:15:23:
         6f:15:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:46:14 2026 by rpki-client