Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666663a3a2f34382d3438203d3e203133333335.roa
File:                     323830333a663830303a666666663a3a2f34382d3438203d3e203133333335.roa (raw, json)
Hash identifier:          YU5i2S6QTvyia7mBnpVj11fjLf0Wul0aCwvIM8wjNfM=
Subject key identifier:   11:90:1D:B3:A0:5E:02:3E:F3:F7:DE:3F:26:E7:AB:C3:39:0C:6B:C4
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       79829C1BEBC37D45786F975477412ED06C511E19
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666663a3a2f34382d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:06 +0000
ROA not before:           Wed 27 Aug 2025 16:15:06 +0000
ROA not after:            Wed 26 Aug 2026 16:20:06 +0000
asID:                     13335
IP address blocks:        2803:f800:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:82:9c:1b:eb:c3:7d:45:78:6f:97:54:77:41:2e:d0:6c:51:1e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:06 2025 GMT
            Not After : Aug 26 16:20:06 2026 GMT
        Subject: CN=11901DB3A05E023EF3F7DE3F26E7ABC3390C6BC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:5a:b2:07:37:01:9b:76:bc:6b:17:0e:5d:
                    14:17:0d:00:3f:79:c8:a6:36:fa:c2:84:d6:55:a3:
                    06:2d:c1:99:ba:c8:26:f7:dc:97:8c:4e:64:a2:24:
                    96:28:10:80:2b:fc:4c:81:2b:5a:99:8a:b4:f7:6b:
                    1f:81:4a:56:cc:00:36:04:19:dc:1d:63:03:42:34:
                    c5:e3:05:2a:d6:0c:09:94:ce:d8:c9:74:f3:ff:0a:
                    01:63:83:4a:70:c1:da:7e:b5:f6:b4:78:34:fc:c9:
                    2c:dc:b9:4e:a7:30:93:4d:f6:a3:0a:80:1a:4c:51:
                    08:b2:af:20:10:b4:95:56:63:86:fc:c2:dc:78:f0:
                    9a:b0:d0:c1:75:3d:5e:93:8e:df:ee:49:04:d3:88:
                    0f:c5:d9:f6:7b:cd:bd:21:80:da:af:09:c1:ac:85:
                    49:af:07:3d:ed:9a:92:6a:fe:68:f3:e5:29:fe:53:
                    f5:32:8a:b0:ff:4a:e6:06:4d:b7:27:81:52:f1:29:
                    4a:51:e0:df:39:34:59:9e:ea:d0:8e:5f:21:d9:6f:
                    e8:89:00:39:87:44:7e:bd:a8:e3:a4:8e:4b:ba:89:
                    e5:a1:fc:76:55:e8:3d:a9:f8:15:4d:34:bb:ca:36:
                    83:7f:30:34:17:65:3e:c8:6e:16:20:5e:a7:b1:26:
                    20:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:90:1D:B3:A0:5E:02:3E:F3:F7:DE:3F:26:E7:AB:C3:39:0C:6B:C4
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a666666663a3a2f34382d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:79:b5:9d:50:60:2d:e2:ee:73:48:8a:0e:a3:2f:20:81:05:
         1a:8a:7c:06:b7:96:d5:57:20:ec:e3:54:c6:c6:cb:a9:a9:dc:
         97:72:35:22:8c:e1:2d:93:21:60:07:77:66:bc:10:cd:3a:9d:
         ca:98:d5:77:4d:21:93:0e:9b:41:1b:40:b7:b8:51:d4:b6:66:
         6b:e1:2e:ca:1e:9e:53:b2:11:bc:bd:3b:81:56:1a:2c:58:7c:
         88:7d:02:b5:7c:cc:3e:08:aa:40:a7:e8:c1:58:65:5f:ba:09:
         1e:45:b4:50:3d:01:53:37:22:79:bb:24:3a:09:92:6f:d8:6f:
         99:30:28:9a:46:c9:21:15:71:83:37:a5:c2:f6:6f:0f:07:15:
         b8:ce:fc:33:22:eb:3d:39:27:11:37:92:c2:eb:2f:94:dd:00:
         c8:d3:0a:04:38:0f:bf:92:02:03:0d:15:92:00:07:7a:56:09:
         79:cd:a3:e6:dd:8f:1d:d6:b1:52:ec:f6:ae:67:35:5d:17:1f:
         47:4b:46:32:01:8a:e3:f6:b6:e1:63:8d:70:58:45:7c:cd:69:
         fa:4d:83:5c:d7:0a:c9:a0:76:ff:04:2c:49:e8:fc:22:a1:74:
         9f:5e:26:96:40:56:9f:b6:1f:47:92:87:d2:63:af:c1:e8:81:
         bb:88:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:53:26 2025 by rpki-client