Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313134303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a313134303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          tcliASnq2ZzbKD9vvrrI+LjRp7biPCjAVzC5geBR7pM=
Subject key identifier:   5E:AD:3C:C3:29:E6:D7:A7:C9:57:24:6E:49:08:9C:AB:93:6C:D9:D1
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       0A4AA4CE8C5F5E9BE67DF99265425DE18B10E7D3
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313134303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:31 +0000
ROA not before:           Thu 03 Jul 2025 20:35:31 +0000
ROA not after:            Thu 02 Jul 2026 20:40:31 +0000
asID:                     266904
IP address blocks:        2803:f6a0:1140::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4a:a4:ce:8c:5f:5e:9b:e6:7d:f9:92:65:42:5d:e1:8b:10:e7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:31 2025 GMT
            Not After : Jul  2 20:40:31 2026 GMT
        Subject: CN=5EAD3CC329E6D7A7C957246E49089CAB936CD9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8c:d7:fb:54:71:81:0b:82:70:1f:46:84:91:
                    7e:ce:a5:6c:c6:58:5c:bb:3c:24:21:c6:c6:ab:25:
                    1d:3d:87:aa:f4:d3:58:40:e2:cd:f5:c4:59:fe:b6:
                    77:89:c2:a6:41:a0:89:0b:e5:ac:ac:cd:63:9c:71:
                    03:77:8e:d3:37:cc:78:9c:48:43:35:46:0c:d6:63:
                    42:8e:19:92:37:9f:23:15:ae:66:85:66:fd:da:b1:
                    64:32:2e:35:ce:00:78:79:f9:0f:99:b0:69:4a:03:
                    cf:2d:c4:f7:0c:7f:93:91:cd:c2:d1:c8:18:97:9a:
                    ca:c9:e1:5d:10:bc:72:37:fd:f9:be:5b:7f:63:f2:
                    a2:57:a5:6c:16:55:e6:e2:ab:b0:47:b9:31:90:0a:
                    fb:a8:09:1d:ab:3a:bc:13:a1:40:e4:ab:1d:3f:42:
                    94:b4:cd:ac:c6:bc:20:dc:07:ac:5e:bb:58:6c:80:
                    63:fd:7c:fa:2d:56:97:87:46:d5:63:d8:0d:30:9c:
                    cb:16:2f:06:f6:fa:1f:57:d8:07:f2:a1:a0:a4:41:
                    a6:10:31:6b:6a:03:b8:56:c0:1a:2d:ed:65:58:68:
                    0a:3b:23:29:eb:75:bf:d5:6b:3a:9e:54:6a:10:51:
                    51:38:19:6a:f2:61:20:f5:6d:e1:89:6b:5d:b5:8c:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AD:3C:C3:29:E6:D7:A7:C9:57:24:6E:49:08:9C:AB:93:6C:D9:D1
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313134303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:1140::/42

    Signature Algorithm: sha256WithRSAEncryption
         19:9e:11:0f:ad:3c:4e:05:38:00:f5:ba:ed:0c:e3:3c:0f:80:
         88:4b:e4:16:dd:71:d9:5d:a6:9b:7a:14:fa:ce:4a:f9:9d:75:
         56:86:88:8f:fc:42:07:bd:c8:50:fc:e3:0f:fb:7f:02:22:0b:
         19:65:c6:2e:1a:75:f2:06:f3:e4:ab:93:a8:00:22:0c:2e:44:
         84:fa:07:75:ff:39:c8:73:10:aa:f8:28:94:ae:af:aa:92:06:
         67:bc:04:74:ca:ce:af:d7:2f:41:66:7f:53:56:7d:63:bc:d6:
         d7:89:14:65:38:45:6d:31:c5:ba:28:9f:a0:eb:60:d9:0d:7a:
         6d:83:46:66:25:e2:6b:18:81:b5:db:4f:1d:04:f2:7e:0a:7a:
         d2:71:2b:42:1e:b3:4f:36:1f:e7:34:fd:11:93:01:18:65:f3:
         22:b9:22:6a:20:a0:c8:d1:b9:d1:b0:2f:4b:88:5e:62:f3:2d:
         a0:68:f6:f2:a7:66:cb:89:53:be:53:45:dd:d8:96:9d:43:de:
         1e:79:13:11:dc:4c:d2:5f:20:d8:4e:45:d5:af:52:3c:e1:fd:
         d0:47:77:82:c4:95:85:c6:a4:56:ac:cb:ca:be:dc:1b:d3:ca:
         09:af:0f:8a:8c:46:d6:00:7f:69:68:39:7b:da:45:1a:7a:13:
         ef:7d:01:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:46:12 2025 by rpki-client