Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6630303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a6630303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          Q0AZ5+9JeLYzBtey4bQfMMPimnNg9AEaABcJ8f7QCoE=
Subject key identifier:   A6:7B:28:DC:FC:54:FA:9E:87:70:5C:23:DE:E1:7D:76:92:33:F5:FA
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       7E0AF5CB58FD90A7324AC153EB4C4679278C2099
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6630303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Thu 03 Jul 2025 02:50:01 +0000
ROA not before:           Thu 03 Jul 2025 02:45:01 +0000
ROA not after:            Thu 02 Jul 2026 02:50:01 +0000
asID:                     273883
IP address blocks:        2803:4350:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0a:f5:cb:58:fd:90:a7:32:4a:c1:53:eb:4c:46:79:27:8c:20:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Jul  3 02:45:01 2025 GMT
            Not After : Jul  2 02:50:01 2026 GMT
        Subject: CN=A67B28DCFC54FA9E87705C23DEE17D769233F5FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:f3:a3:9d:c3:9b:b9:c1:1b:6a:48:a1:a8:
                    3d:7e:d8:32:4a:77:c3:56:bc:86:d0:8a:08:22:6e:
                    13:29:0b:6d:16:49:ae:5c:4c:02:dd:7f:fb:1e:1b:
                    3f:0b:0e:aa:f2:73:0c:df:85:de:57:b8:4a:7b:56:
                    d3:64:34:9b:6d:64:ff:3d:50:08:e9:22:22:65:d0:
                    a0:21:d0:1c:96:e2:fd:ab:a9:a2:c0:c6:16:dc:72:
                    e9:da:4f:19:88:22:ab:a0:5c:f9:e0:4e:57:c2:5e:
                    d5:82:c9:0e:ce:40:d2:0a:81:d6:82:ab:50:03:e0:
                    09:74:c9:37:ec:3d:d0:d9:e6:ba:70:84:5a:9c:14:
                    cf:d6:93:5f:9e:7a:6e:46:dc:05:15:ec:b0:55:81:
                    f8:84:69:6a:22:c9:9a:f7:2e:97:29:29:dc:91:cb:
                    72:31:06:60:13:e8:15:3d:e7:2d:da:ca:34:af:25:
                    3e:a3:3f:8d:39:04:31:d6:cb:b4:46:de:f9:2b:cc:
                    73:37:57:77:3f:c4:77:6d:30:c8:75:69:ac:23:23:
                    be:e2:21:b6:19:4d:a8:ce:d5:07:0d:82:6c:13:4c:
                    c3:a9:3f:80:eb:77:2e:35:4f:40:ba:6e:23:d4:3b:
                    d0:97:0f:64:0a:76:23:ba:ac:ae:cd:e9:fc:51:70:
                    27:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7B:28:DC:FC:54:FA:9E:87:70:5C:23:DE:E1:7D:76:92:33:F5:FA
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6630303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:73:b7:47:30:4b:74:d7:96:c0:ee:b1:8c:10:d5:72:40:b1:
         b3:c5:29:7d:e6:e9:bf:52:22:f9:33:cc:27:73:06:06:85:74:
         63:73:8c:c7:47:8f:e5:7a:69:3b:bf:1f:9a:95:9e:10:1a:e7:
         ec:06:21:ad:b9:cf:ef:a7:4c:18:7f:d6:63:17:ac:6b:dd:42:
         73:7b:ae:f3:9c:ad:24:c1:ee:69:0b:af:6d:c3:92:91:97:e6:
         c2:42:67:0d:89:a9:a1:a0:f9:83:99:47:a4:88:5f:9d:c9:a8:
         d0:e3:b2:fc:dc:c8:64:55:3a:d9:9f:dc:bf:31:d5:c0:7b:fc:
         4d:b7:40:25:9c:b2:17:c2:2a:e7:b9:3d:d2:5d:4d:36:39:b1:
         ab:6b:fa:40:cf:28:d6:06:37:55:12:85:01:e1:6c:8b:51:f4:
         a9:65:a2:a4:c9:5b:af:a5:bd:36:ef:39:bb:81:2a:d4:86:28:
         c5:a4:7e:54:e5:7f:1e:ef:71:ee:f9:ba:a1:ec:86:a3:15:ee:
         12:fb:0c:ad:3a:2f:14:e1:f2:73:6d:fc:3c:eb:1e:9e:de:b0:
         b4:4d:a2:5d:c8:ea:26:4c:8c:75:b8:fa:62:9c:53:84:cc:73:
         c1:2d:71:dd:09:b3:79:06:0c:dd:4f:f8:5b:d7:7e:0c:8f:c5:
         64:91:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:58:45 2025 by rpki-client