Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313038303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a313038303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          qNqZT+S9n8M+mGWTMK8+WXSbomjCnZJ2sv9BQllv2IU=
Subject key identifier:   D0:B3:38:8F:17:EE:F3:5F:F0:7B:7C:E7:66:8F:EB:72:41:02:1A:0C
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       25740BC2362D9A8C2A36893B7EADBC98057AEB4D
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313038303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:20 +0000
ROA not before:           Thu 03 Jul 2025 20:35:20 +0000
ROA not after:            Thu 02 Jul 2026 20:40:20 +0000
asID:                     266904
IP address blocks:        2803:f6a0:1080::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:74:0b:c2:36:2d:9a:8c:2a:36:89:3b:7e:ad:bc:98:05:7a:eb:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:20 2025 GMT
            Not After : Jul  2 20:40:20 2026 GMT
        Subject: CN=D0B3388F17EEF35FF07B7CE7668FEB7241021A0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:78:8e:20:02:36:a8:3a:f6:e9:16:0a:ce:
                    04:9e:fe:1f:47:67:0c:f0:51:35:f3:c5:5f:7f:5d:
                    7e:75:2c:aa:92:19:fc:07:63:b0:19:4c:8f:f9:fa:
                    d7:9f:ab:a1:0c:30:17:f2:c3:1a:4c:ca:7a:81:00:
                    a5:80:c3:97:13:3b:d6:15:fb:be:0a:b9:c0:e8:fd:
                    ed:20:25:96:96:76:f3:4e:9a:b7:21:f5:e7:a2:98:
                    49:31:80:42:c7:25:92:60:a7:2e:bc:b3:de:b4:61:
                    06:ea:3b:97:4f:ba:7c:95:8d:5b:82:bf:af:d4:56:
                    d3:35:f3:89:4f:b4:de:eb:9f:c2:b2:ca:2d:63:d7:
                    df:7b:ca:7c:66:29:d1:09:c3:22:cc:1e:4d:ed:a1:
                    70:22:80:03:6b:37:62:65:c1:ba:20:6b:70:86:12:
                    83:35:d1:20:eb:61:39:5e:aa:eb:b7:00:59:ee:a2:
                    0a:fe:91:fe:97:cc:12:63:62:b1:68:e9:08:3d:0a:
                    22:70:b0:a5:77:7f:e3:19:f1:cb:5d:4b:d0:2e:91:
                    c6:32:34:9b:f2:c8:b6:8c:23:02:07:b2:17:39:98:
                    a1:1a:75:49:a6:7f:0c:37:28:f2:73:10:5b:e1:fc:
                    d4:e0:fc:e3:eb:76:b0:85:54:29:10:81:cc:df:84:
                    11:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B3:38:8F:17:EE:F3:5F:F0:7B:7C:E7:66:8F:EB:72:41:02:1A:0C
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313038303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:1080::/42

    Signature Algorithm: sha256WithRSAEncryption
         72:17:4f:db:74:4b:f3:82:dc:62:84:89:26:a9:bf:c8:f7:97:
         4a:6e:51:9b:49:ea:37:b6:20:ef:09:96:73:51:db:2d:71:9d:
         be:22:01:03:e1:7b:f0:da:f8:d8:eb:5a:a6:83:d3:1c:0b:c0:
         b3:f6:9f:18:ca:62:64:e6:6a:64:6f:6f:11:ce:98:6c:fd:d0:
         96:9c:cf:9b:b0:4d:c4:90:5c:04:77:c1:ce:42:13:6d:8d:f8:
         a7:20:14:21:d4:78:ca:cc:22:3f:d2:67:ec:59:ea:8e:70:c9:
         ae:31:f1:64:ba:fd:55:84:79:5c:3a:83:2a:7b:3d:0f:9f:dc:
         7d:5a:cc:d2:9f:cf:88:37:a1:39:97:f3:36:9a:32:7d:39:aa:
         5e:2f:8b:7c:22:4f:00:6a:86:0b:84:de:08:fd:df:1a:2c:89:
         83:9e:9a:c0:47:93:78:0a:5c:14:c9:66:12:b2:b9:a6:b7:80:
         6e:3b:20:63:a7:4b:70:af:b3:3e:c7:2b:4e:8c:b5:d5:0b:a1:
         17:cc:48:af:f3:07:ac:16:0b:20:ad:b1:16:ae:e3:f7:c6:eb:
         2d:f0:a6:e0:37:20:5e:25:dc:38:49:2c:fc:15:fa:2a:5f:4f:
         cf:18:96:01:84:55:a8:91:d9:cc:49:74:d7:94:41:b9:59:2e:
         89:20:5e:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:48:07 2025 by rpki-client