Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313330303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a313330303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          cLX5Y/C2k0GwNg26JhechJs6bwivBDANzX/zq88NIP0=
Subject key identifier:   CD:BA:45:E1:B0:26:87:C6:1D:D5:C2:E2:A6:B4:12:32:89:D6:94:9D
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       0513684D6DD60F5641D5D284AFDBE24E70FCDD1E
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313330303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:30 +0000
ROA not before:           Thu 03 Jul 2025 20:35:30 +0000
ROA not after:            Thu 02 Jul 2026 20:40:30 +0000
asID:                     266904
IP address blocks:        2803:f6a0:1300::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:13:68:4d:6d:d6:0f:56:41:d5:d2:84:af:db:e2:4e:70:fc:dd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:30 2025 GMT
            Not After : Jul  2 20:40:30 2026 GMT
        Subject: CN=CDBA45E1B02687C61DD5C2E2A6B4123289D6949D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:97:a8:12:e3:57:29:15:d4:64:c1:7d:0b:a7:
                    05:6b:c8:9f:40:c2:39:a8:94:3f:32:a1:79:77:fd:
                    e2:63:cb:50:bd:cf:5a:d2:8d:7a:d3:6c:aa:ea:76:
                    34:86:f2:b2:de:4e:38:0a:2b:d2:5e:95:d1:56:a6:
                    14:5a:a4:c9:8b:7f:ed:11:aa:27:a3:ea:94:a3:4d:
                    86:83:22:72:38:68:17:7c:b4:80:96:a4:89:92:48:
                    8d:e0:e9:20:53:33:64:fd:a4:31:0a:cf:f2:5a:d7:
                    48:16:cf:cc:a6:c2:bd:9a:eb:ea:6e:ca:b2:06:e5:
                    ff:84:06:2a:dd:8e:c9:cc:be:fd:1d:1a:f7:4b:b5:
                    f9:19:f6:2d:8e:7a:41:ce:8c:45:c3:67:d5:fb:8f:
                    97:4f:56:18:51:d5:f5:34:02:b5:d5:7f:6e:58:d6:
                    7b:c7:4c:68:1b:9d:0e:9f:50:5f:e6:5a:54:57:7b:
                    ee:46:1a:69:90:3e:c1:96:03:71:da:86:d8:fe:71:
                    be:70:53:38:26:84:cc:5c:17:a0:eb:fd:75:c4:10:
                    e7:05:34:99:19:3c:58:25:7a:34:fd:c7:7c:45:c4:
                    99:8a:f3:3f:87:29:9d:40:26:26:e6:64:f2:88:58:
                    6a:32:df:c9:e3:9b:e2:0e:28:44:c4:19:53:21:24:
                    06:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BA:45:E1:B0:26:87:C6:1D:D5:C2:E2:A6:B4:12:32:89:D6:94:9D
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313330303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:1300::/42

    Signature Algorithm: sha256WithRSAEncryption
         6a:3c:85:ef:91:d4:1e:2a:3e:ac:0b:83:e4:0d:78:9c:89:a9:
         a8:d3:67:e0:fd:d2:58:72:46:f2:ef:47:25:01:75:82:fb:84:
         63:da:d3:5e:04:da:fc:72:1d:50:3d:b1:a9:19:cc:d0:f9:99:
         7e:da:92:93:86:a3:ef:8a:ee:34:31:bb:de:48:d8:7b:8a:31:
         fe:09:d0:29:49:ec:58:f1:33:f8:03:3a:95:ed:80:89:3c:c9:
         54:cb:e6:96:53:00:b2:bb:d2:22:f4:e6:f3:67:0d:14:2b:75:
         5e:c9:e0:c0:7b:dd:8d:75:70:61:40:78:8b:95:9c:40:a0:62:
         e1:cb:06:35:a3:72:8d:dd:c6:2f:23:25:42:2f:e4:a8:62:c2:
         db:a7:73:fc:b2:19:9a:6b:43:6d:c7:54:c6:20:bc:37:9a:20:
         8d:48:8f:0f:1f:1b:a2:14:84:9f:b2:07:54:61:30:9d:be:21:
         f3:73:94:d0:65:76:c8:70:68:e7:e8:90:4f:cd:93:71:43:6b:
         cb:3a:1f:14:1d:df:86:34:5b:2a:9b:b8:ac:f5:45:06:4e:6e:
         09:bd:0e:bf:2f:c2:40:e2:52:bc:8d:02:c1:5d:f2:a1:14:f4:
         6a:e4:c3:e6:7f:82:99:0a:de:cf:91:34:00:6e:fa:0d:8c:03:
         16:7d:bf:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:46:04 2025 by rpki-client