Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6530303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a6530303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          TQaOkwPoD20VQHCEkh4FiofyIJ7dzaPwstl85+4u1Qs=
Subject key identifier:   CC:91:3A:EE:F9:67:A3:75:35:62:E6:91:1D:5F:B5:0E:EC:52:5B:65
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       1785235222E920117F32346B68523260EFFBBB74
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6530303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Thu 03 Jul 2025 02:50:00 +0000
ROA not before:           Thu 03 Jul 2025 02:45:00 +0000
ROA not after:            Thu 02 Jul 2026 02:50:00 +0000
asID:                     273883
IP address blocks:        2803:4350:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:85:23:52:22:e9:20:11:7f:32:34:6b:68:52:32:60:ef:fb:bb:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Jul  3 02:45:00 2025 GMT
            Not After : Jul  2 02:50:00 2026 GMT
        Subject: CN=CC913AEEF967A3753562E6911D5FB50EEC525B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:ef:42:39:76:66:bd:04:ab:65:5a:ae:e1:
                    d5:a8:ab:71:46:cc:33:f4:aa:0c:c4:3f:66:f4:0d:
                    85:b2:bc:fe:2c:af:88:3a:69:20:53:cf:83:c4:65:
                    3f:47:98:75:5e:f6:a5:8d:23:b6:5d:9a:7a:ee:9d:
                    a8:1e:1b:79:f4:00:53:78:f3:c7:7e:21:92:f0:c1:
                    e2:f9:bd:23:fd:54:54:84:ee:eb:f8:88:98:87:23:
                    35:87:b5:f6:22:15:e8:7e:65:71:14:72:22:f7:83:
                    84:75:11:14:bb:0a:de:aa:f0:42:69:9d:b3:d4:fb:
                    ae:c9:66:02:34:36:ca:19:6a:99:76:e9:c6:c6:1d:
                    3e:13:5b:65:80:6b:8c:57:18:a5:48:29:a0:52:4f:
                    ed:1d:1a:2d:f1:de:75:5e:3f:2c:f7:8d:48:4b:c6:
                    c7:6b:75:a5:09:b9:64:0e:ee:06:bf:85:44:d3:c5:
                    9e:b8:eb:fe:c2:77:4b:2a:e8:9e:fd:d3:a4:43:f5:
                    dd:db:d7:93:6c:60:de:4b:cd:2b:39:51:18:b3:c1:
                    a9:0c:d3:33:67:6f:35:f3:73:c8:10:31:dd:7b:39:
                    cd:47:3e:9d:2f:72:70:71:c0:b8:5b:79:d7:b0:03:
                    1e:03:65:3d:c3:ec:7b:f8:d4:5a:14:5e:2c:32:60:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:91:3A:EE:F9:67:A3:75:35:62:E6:91:1D:5F:B5:0E:EC:52:5B:65
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6530303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         15:03:48:e5:b4:cf:58:d2:64:e7:55:ad:6f:26:cc:fe:3e:4b:
         1b:73:fd:a1:2c:3e:29:9c:5a:38:f9:d3:ac:e3:ed:14:c1:f9:
         5a:29:60:82:1a:70:41:e9:eb:34:b2:16:4e:30:a2:7f:22:d1:
         ce:5b:a7:12:7e:aa:67:40:9b:7f:7e:5f:4f:b2:52:d4:b6:8c:
         89:ef:80:bb:3e:79:c6:e9:12:77:a6:bc:dd:c0:a8:af:5b:de:
         94:72:91:aa:fa:22:28:75:b9:17:60:ad:4e:c7:b8:51:91:3d:
         24:e4:64:0a:c7:cf:e1:0c:88:00:46:50:d9:13:78:b5:61:7a:
         ee:06:b0:5a:1c:da:f8:93:d2:d2:17:c1:3d:92:5e:6e:4a:38:
         56:72:e9:e8:8e:f5:38:00:53:7e:a5:b7:49:d6:89:8b:1f:a8:
         ea:c1:d1:e8:40:a2:6d:cb:c6:74:22:e3:23:47:d3:05:b2:45:
         f4:15:2f:d0:9a:93:c0:cb:c5:77:9c:ee:a7:c0:0a:90:6e:fc:
         7f:2a:c2:cb:96:1d:ee:68:9f:55:c3:3e:83:e4:35:2e:a3:42:
         69:5f:e7:72:0e:1c:20:a0:1c:73:4f:63:21:0e:95:41:ad:4c:
         5e:b6:7a:9a:ff:ae:b2:23:af:c4:55:bf:38:59:e2:47:78:9a:
         39:3e:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:46:45 2025 by rpki-client