Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313030303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a313030303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          fU+amqx/fqhWcatmzgDFTWPaSo/g6pTFwQJdJn920ks=
Subject key identifier:   E9:9E:A8:08:50:F6:1F:7D:1E:DB:A5:EB:76:2F:E4:FB:38:E1:8E:AF
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       49DDD83A970D6D50334DCC23A2862B874396C07B
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313030303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:13 +0000
ROA not before:           Thu 03 Jul 2025 20:35:13 +0000
ROA not after:            Thu 02 Jul 2026 20:40:13 +0000
asID:                     266904
IP address blocks:        2803:f6a0:1000::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:dd:d8:3a:97:0d:6d:50:33:4d:cc:23:a2:86:2b:87:43:96:c0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:13 2025 GMT
            Not After : Jul  2 20:40:13 2026 GMT
        Subject: CN=E99EA80850F61F7D1EDBA5EB762FE4FB38E18EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:a3:2c:68:9b:2b:0e:0a:88:0f:2f:82:0b:
                    55:e0:8f:e2:6f:ee:fa:c7:70:25:eb:0c:49:e6:e4:
                    c7:49:8e:66:f3:12:4a:bb:5c:b5:11:9a:4c:b3:c3:
                    9b:b4:64:be:bf:ee:ef:c7:00:27:b8:9d:dc:73:75:
                    0f:92:88:12:eb:cd:ed:f9:cf:df:a7:cb:3b:a9:81:
                    1b:be:5e:66:65:1d:34:ff:92:3b:5e:f5:7b:8f:c3:
                    8d:33:71:76:03:3d:9c:91:a1:7b:3b:07:39:c7:d6:
                    76:12:c9:f7:ed:2e:eb:8a:6a:59:76:0a:02:2b:a0:
                    e9:ed:25:a2:a6:b3:8f:88:60:e8:24:1d:c9:47:2e:
                    e8:8a:1a:08:4b:c5:a6:2d:02:50:35:0a:4a:4c:37:
                    d2:b9:5d:81:9b:00:44:9a:b8:a5:3c:f4:36:0b:dc:
                    54:a4:77:b7:ef:a5:6d:a6:e7:1c:95:9c:27:b7:03:
                    de:13:59:0e:1b:51:86:16:b6:af:eb:0c:7d:90:2b:
                    44:83:c2:e2:bb:32:36:98:57:3d:6e:62:e6:8e:0d:
                    e0:12:73:b8:8e:7e:59:c5:41:81:cf:af:be:b2:e8:
                    fd:3a:69:87:dc:52:ed:c1:02:8f:2b:4e:df:8a:21:
                    35:39:09:8e:5f:44:16:36:48:cf:0f:10:34:ab:54:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9E:A8:08:50:F6:1F:7D:1E:DB:A5:EB:76:2F:E4:FB:38:E1:8E:AF
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313030303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:1000::/42

    Signature Algorithm: sha256WithRSAEncryption
         52:8d:7a:f7:2b:a9:77:34:9e:7c:90:f3:e7:14:be:bd:d6:a5:
         47:fa:c1:92:44:f9:a6:65:ea:3a:fa:e0:6c:fe:2c:b8:a6:37:
         d3:29:b0:a2:c1:c7:01:cb:8c:70:1f:45:5d:d1:7c:a2:ec:b2:
         53:b9:9f:f4:b0:28:a9:ed:9c:2b:5a:58:1f:72:20:3e:6b:6b:
         0d:0b:29:bd:5a:62:39:8d:90:eb:07:4a:1b:2e:5f:a9:53:46:
         3f:e4:5d:44:70:8d:17:5c:6d:e7:36:e1:42:8a:9b:20:b1:25:
         ec:b1:92:f4:62:e2:73:5e:6b:9c:e9:a8:7e:71:70:3f:ee:32:
         0c:a8:50:27:fb:17:8c:f1:7c:f8:29:5b:93:fe:a1:3b:b2:58:
         cc:df:22:a2:87:52:5e:58:b2:66:9a:e8:6f:c5:92:2b:0c:49:
         ca:36:6c:13:dd:19:d2:aa:ba:37:46:b2:11:57:3a:03:30:26:
         46:a7:44:b4:da:1d:14:a2:35:20:4b:8e:88:c3:ca:2b:94:e6:
         ce:80:94:88:6b:5e:42:77:15:92:e1:8b:0d:29:09:f5:52:e2:
         05:a5:1e:1c:cc:ad:c0:f6:ba:23:35:b1:2d:a0:e4:ca:95:3e:
         7b:c9:fe:25:a2:19:68:9a:c9:8f:2c:ef:b3:9e:e4:70:2b:71:
         37:bf:44:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:44:05 2025 by rpki-client