Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313334303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a313334303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          fO4oHnYwPsZ11GOlDfe7zPRYZ5IvgzHTCSzG10Fa44U=
Subject key identifier:   BF:FD:AC:A7:FC:B0:0E:7C:F8:ED:70:8E:E3:CB:B2:01:4A:93:51:7E
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       41A0383178BD373330827D3B7397B76934AE2148
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313334303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:17 +0000
ROA not before:           Thu 03 Jul 2025 20:35:17 +0000
ROA not after:            Thu 02 Jul 2026 20:40:17 +0000
asID:                     266904
IP address blocks:        2803:f6a0:1340::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a0:38:31:78:bd:37:33:30:82:7d:3b:73:97:b7:69:34:ae:21:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:17 2025 GMT
            Not After : Jul  2 20:40:17 2026 GMT
        Subject: CN=BFFDACA7FCB00E7CF8ED708EE3CBB2014A93517E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:08:06:68:1b:c1:d5:2d:ca:bd:3c:d4:14:
                    29:b8:d0:74:cf:81:9d:a5:5c:b2:28:f5:9e:7b:1b:
                    96:20:46:a9:2b:c9:32:ee:51:0c:95:88:0a:51:96:
                    3a:36:75:e1:b9:42:af:91:19:e5:f3:82:ca:10:2e:
                    c1:7f:94:b1:34:b3:12:a9:51:fa:46:2c:ac:45:86:
                    31:68:eb:d7:18:83:0b:5e:a0:67:07:f5:2b:7c:ab:
                    5f:3a:dc:e2:02:b7:3a:b2:a1:d4:0f:b8:76:cd:c6:
                    8f:dd:0e:d2:06:a3:33:f8:33:7b:e7:5e:81:39:e4:
                    bb:55:db:bf:38:6a:af:d1:18:07:a8:10:c3:27:7e:
                    5e:ba:34:19:9b:be:85:a4:fd:f0:93:af:0a:17:3e:
                    0f:a8:f3:22:c2:71:9e:34:24:62:56:ca:19:d2:57:
                    7e:71:9a:cc:c4:bb:35:80:dc:f6:fe:35:a8:5b:6d:
                    6a:ea:27:5e:b9:e2:db:56:e2:cb:e6:81:89:c6:bf:
                    d8:57:04:ba:ca:62:71:6b:28:71:73:9f:9a:31:83:
                    89:c3:dc:b1:35:f3:ed:d5:c0:68:2d:f4:da:32:bd:
                    4f:f8:d8:f8:2c:ee:b4:7b:f8:97:af:66:37:d6:b8:
                    ab:76:42:79:c8:d0:b6:9a:ff:2b:de:23:df:43:7f:
                    24:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FD:AC:A7:FC:B0:0E:7C:F8:ED:70:8E:E3:CB:B2:01:4A:93:51:7E
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313334303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:1340::/42

    Signature Algorithm: sha256WithRSAEncryption
         62:23:db:e2:2b:a1:b0:be:fb:14:ca:1d:21:ef:6b:1e:c0:35:
         71:cd:26:69:c3:25:aa:89:81:b8:ec:b5:19:ce:42:16:58:53:
         d7:1a:7f:b3:c1:17:94:c9:59:1c:1e:d2:15:f5:90:a5:cb:cc:
         c5:08:e8:b3:ad:12:04:c2:6d:22:a1:ff:19:fe:5c:e2:18:46:
         16:26:69:ec:5c:b2:8a:26:cb:93:8f:f1:0d:ba:b3:b8:25:4b:
         6c:3b:42:47:fe:70:3f:63:71:d7:8f:e3:d2:ab:be:3b:5b:e2:
         d8:ef:d0:10:04:77:1e:41:f6:10:8d:1a:3b:57:20:24:cd:55:
         49:59:32:9a:15:8a:13:94:c3:4d:22:e7:f9:98:ac:b0:71:08:
         f0:2a:27:18:40:62:57:05:bd:06:f0:83:5c:e3:99:64:28:da:
         88:75:93:60:48:8e:0a:d9:62:11:be:e5:ed:97:b0:ad:d1:16:
         22:67:cc:c5:26:89:17:41:d9:51:63:b4:3d:86:b4:0a:c5:97:
         ea:7e:85:66:94:6b:c0:93:56:f9:46:11:16:8d:35:cf:77:63:
         f4:3d:35:f1:30:14:7c:f4:ee:f1:32:74:64:b9:4c:2b:35:9b:
         4d:50:6a:0f:a2:a6:75:f1:9e:c7:08:de:1c:43:5a:7b:ad:d7:
         11:9a:3a:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:40:28 2025 by rpki-client