Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313063303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a313063303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          ZA4jtaTqQ/0CS8VXklMWH5htcGza5//q1MDsKavfGW0=
Subject key identifier:   D8:29:33:51:52:76:05:AA:DE:42:6F:E8:52:6B:1E:66:B4:5C:FB:90
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       4BCCC63318786B20BCB46CC96E2D0D5F61308DE8
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313063303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:12 +0000
ROA not before:           Thu 03 Jul 2025 20:35:12 +0000
ROA not after:            Thu 02 Jul 2026 20:40:12 +0000
asID:                     266904
IP address blocks:        2803:f6a0:10c0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cc:c6:33:18:78:6b:20:bc:b4:6c:c9:6e:2d:0d:5f:61:30:8d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:12 2025 GMT
            Not After : Jul  2 20:40:12 2026 GMT
        Subject: CN=D8293351527605AADE426FE8526B1E66B45CFB90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:61:0b:86:34:84:3b:c9:5a:ae:bf:e9:e5:
                    f2:7f:60:fd:b5:3e:fc:d7:12:6c:e4:e5:a5:93:67:
                    49:b1:d0:17:f0:3f:18:0f:18:6f:f6:d8:6c:c8:bf:
                    9f:ce:e2:69:b0:a3:7f:95:fd:53:5f:39:fb:dd:05:
                    83:9c:d6:02:7b:9c:32:ad:72:31:a1:df:de:17:b5:
                    dd:55:a4:f7:16:f3:13:6a:2e:ac:4f:d9:ac:78:d9:
                    7f:52:37:71:fd:18:a3:e9:45:a4:93:8d:da:dd:69:
                    cd:9e:6f:f8:ec:ee:b9:f8:92:0c:44:64:a3:fd:82:
                    3c:f8:be:f6:38:99:a5:4c:ac:8a:89:41:38:d8:a8:
                    65:bd:09:ba:37:e4:96:36:c2:a9:85:57:57:c1:b4:
                    19:ec:b2:bf:6d:67:51:cf:de:fc:d8:fc:05:da:02:
                    d7:be:e6:05:b6:21:05:7b:05:61:59:3b:5f:0c:90:
                    8c:75:c8:f3:0c:86:a4:d5:b7:6c:c9:6b:c3:3f:a7:
                    de:ec:e5:44:0b:83:e5:3b:4c:a7:a4:d2:7a:1c:80:
                    aa:a4:19:b4:5b:b3:a7:b7:94:0c:b8:5b:ff:92:7d:
                    ad:db:6f:23:8c:bd:36:2a:1b:c7:83:fa:41:80:17:
                    b5:00:3e:5d:cf:f7:86:75:03:03:75:cd:f3:82:fe:
                    05:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:29:33:51:52:76:05:AA:DE:42:6F:E8:52:6B:1E:66:B4:5C:FB:90
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313063303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:10c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         3f:a1:45:34:c6:a9:72:e3:19:f1:dd:15:50:8e:7d:c7:e4:e0:
         b6:9e:b1:2e:35:d7:ca:ac:98:8f:e9:26:b8:68:2b:31:83:67:
         ce:8b:46:74:28:5a:19:66:82:78:af:a7:ed:a5:16:7d:29:b1:
         1f:ec:b9:1c:51:94:1c:c3:34:0b:dd:e3:93:1a:8d:a6:2c:a4:
         c1:a8:50:0f:97:49:7b:87:65:25:53:ea:a1:f9:5d:59:7a:13:
         f1:b3:00:41:0e:84:95:b1:08:b1:cb:9b:be:3c:79:f1:3f:ac:
         63:30:16:bc:07:df:2c:43:f3:48:34:59:91:ec:fe:88:49:77:
         f1:10:dd:eb:3a:24:26:4f:b2:5e:eb:ea:07:0d:82:e8:35:bd:
         3a:6d:26:05:ff:9f:2b:72:a9:ed:1a:9b:81:78:8f:31:1e:15:
         5f:1e:09:4a:99:f9:83:dc:6d:51:e8:83:44:d4:66:54:58:9d:
         57:1c:9a:c2:93:29:62:6e:69:63:60:51:4f:72:1f:17:17:4f:
         c5:bd:18:f5:f9:1b:b3:0d:c0:b2:43:78:15:df:36:d7:22:3c:
         64:3a:95:fb:49:e2:e5:c9:6c:8b:fb:8b:2f:3a:c3:d0:6c:ed:
         00:96:42:78:b9:9c:f3:4b:4f:75:a3:a5:05:33:de:86:aa:ce:
         43:32:b0:e7
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUS8zGMxh4ayC8tGzJbi0NX2EwjegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTA3MDMyMDM1MTJaFw0yNjA3MDIyMDQwMTJaMDMxMTAvBgNV
BAMTKEQ4MjkzMzUxNTI3NjA1QUFERTQyNkZFODUyNkIxRTY2QjQ1Q0ZCOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMvmELhjSEO8larr/p5fJ/YP21
PvzXEmzk5aWTZ0mx0BfwPxgPGG/22GzIv5/O4mmwo3+V/VNfOfvdBYOc1gJ7nDKt
cjGh394Xtd1VpPcW8xNqLqxP2ax42X9SN3H9GKPpRaSTjdrdac2eb/js7rn4kgxE
ZKP9gjz4vvY4maVMrIqJQTjYqGW9Cbo35JY2wqmFV1fBtBnssr9tZ1HP3vzY/AXa
Ate+5gW2IQV7BWFZO18MkIx1yPMMhqTVt2zJa8M/p97s5UQLg+U7TKek0nocgKqk
GbRbs6e3lAy4W/+Sfa3bbyOMvTYqG8eD+kGAF7UAPl3P94Z1AwN1zfOC/gWvAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQU2CkzUVJ2BareQm/oUmseZrRc+5AwHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzMyMzgzMDMzM2E2NjM2NjEzMDNhMzEz
MDYzMzAzYTNhMmYzNDMyMmQzNDMyMjAzZDNlMjAzMjM2MzYzOTMwMzQucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYoA/agEMAwDQYJKoZIhvcNAQELBQADggEBAD+hRTTGqXLjGfHdFVCOfcfk
4LaesS4118qsmI/pJrhoKzGDZ86LRnQoWhlmgnivp+2lFn0psR/suRxRlBzDNAvd
45MajaYspMGoUA+XSXuHZSVT6qH5XVl6E/GzAEEOhJWxCLHLm748efE/rGMwFrwH
3yxD80g0WZHs/ohJd/EQ3es6JCZPsl7r6gcNgug1vTptJgX/nytyqe0am4F4jzEe
FV8eCUqZ+YPcbVHog0TUZlRYnVccmsKTKWJuaWNgUU9yHxcXT8W9GPX5G7MNwLJD
eBXfNtciPGQ6lftJ4uXJbIv7iy86w9Bs7QCWQni5nPNLT3WjpQUz3oaqzkMysOc=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:45:07 2025 by rpki-client