Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666663a3a2f34382d3438203d3e203133333335.roa
File:                     323830333a663830303a666666663a3a2f34382d3438203d3e203133333335.roa (raw, json)
Hash identifier:          4yz8cUFRvvfAfmzl4fuYOICmky3N3YCeJXpaxC1y/7A=
Subject key identifier:   8F:C5:33:40:3E:65:78:8B:05:C9:B9:14:1E:C9:A2:4E:A9:5E:33:92
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       6122C1B7B206041151D18EAF3217644E7295A587
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666663a3a2f34382d3438203d3e203133333335.roa
Signing time:             Wed 29 Jul 2026 16:55:32 +0000
ROA not before:           Wed 29 Jul 2026 16:50:32 +0000
ROA not after:            Wed 28 Jul 2027 16:55:32 +0000
asID:                     13335
IP address blocks:        2803:f800:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:22:c1:b7:b2:06:04:11:51:d1:8e:af:32:17:64:4e:72:95:a5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Jul 29 16:50:32 2026 GMT
            Not After : Jul 28 16:55:32 2027 GMT
        Subject: CN=8FC533403E65788B05C9B9141EC9A24EA95E3392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:8a:4b:54:98:9d:91:c1:0e:1d:15:5d:56:
                    22:2c:f5:b8:36:9f:34:7c:71:fd:6b:4d:0c:d2:3a:
                    69:03:49:67:1b:7f:fa:e0:71:d6:ba:ae:b5:31:bd:
                    2e:15:c3:85:4e:59:92:ec:03:0a:2c:0d:87:b4:b9:
                    47:df:d4:4f:b4:75:61:06:63:4a:8a:6a:ba:46:6a:
                    6e:87:ae:7d:4c:7d:59:14:8b:e9:db:a6:42:ea:18:
                    0c:2b:a0:e8:00:22:e7:7b:f8:14:92:ff:b1:d4:64:
                    c9:2f:5d:f4:07:b6:14:df:05:22:c9:a2:55:a7:aa:
                    f9:06:bf:df:68:13:d8:c8:a9:2d:95:70:c4:1e:ff:
                    4c:84:53:83:b5:34:a3:4c:6c:21:7c:b5:81:bc:c5:
                    56:6f:de:e2:93:a3:28:b0:ca:2c:0b:2a:59:5b:83:
                    88:99:5b:af:9a:53:33:4f:60:92:eb:d2:10:11:10:
                    29:95:d8:b0:69:5f:aa:70:76:60:95:a9:60:0f:b6:
                    c1:33:60:87:6d:26:1c:5a:c2:8e:ab:06:80:91:c7:
                    c3:e4:b9:0b:25:65:72:8d:8f:c0:04:c5:89:ea:3a:
                    a2:bf:99:24:e8:be:00:8d:52:c9:d5:2a:a2:ee:50:
                    f8:fd:88:82:de:e2:58:f0:6f:21:7f:7b:a9:1d:b1:
                    f4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C5:33:40:3E:65:78:8B:05:C9:B9:14:1E:C9:A2:4E:A9:5E:33:92
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666663a3a2f34382d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:3b:08:d7:3c:ec:da:bc:00:b9:30:15:a1:1c:4d:a0:b9:
         34:bc:7b:a3:02:e8:66:82:fd:ca:bf:4a:7d:74:44:d7:a1:70:
         8e:b8:e4:c9:98:83:60:b1:5f:19:e3:ee:ed:32:9e:ae:66:1a:
         97:8e:a2:6e:cc:28:bc:df:7c:a3:d0:df:d3:64:3b:ae:e9:e2:
         b8:36:e5:c6:e2:3c:72:4a:63:85:15:74:39:84:e5:2f:9c:f7:
         0f:e8:2c:53:69:69:23:59:41:75:2b:4f:a4:62:f9:eb:36:9f:
         77:eb:e0:fa:41:33:f7:a2:1b:cd:e4:19:ca:8a:b2:53:2b:ff:
         5d:5a:b9:25:3e:91:42:6b:89:85:47:0c:cd:40:b5:6a:db:92:
         8b:78:41:18:51:a5:3c:c3:b7:b7:44:02:33:28:c8:e8:64:95:
         e3:e4:05:12:c8:6f:87:d5:50:71:11:bc:4a:21:09:83:87:80:
         3f:27:d8:63:e4:f0:fa:bf:91:3e:b3:a5:ce:f9:7c:2e:b8:86:
         18:ac:7f:01:93:58:fb:b0:52:fa:8d:97:cd:32:5b:68:47:c6:
         57:61:0d:f6:36:fd:66:d8:8b:9a:2b:ba:0d:8b:32:71:34:9c:
         76:aa:0b:e8:de:5c:2e:c5:73:3a:60:c9:77:a5:56:e2:19:42:
         a0:a1:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:37:48 2026 by rpki-client