Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313363303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a313363303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          iQMbQZytjl5+OOaJxEuVa9meCon8sNZEbOoubY6PAg4=
Subject key identifier:   EF:47:64:29:A7:68:D6:B3:CE:E1:15:53:A7:D4:89:78:6B:23:40:A3
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       1F1D3FF89DFCA04200E301F855AC84B1792A4E7D
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313363303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:01 +0000
ROA not before:           Thu 03 Jul 2025 20:35:01 +0000
ROA not after:            Thu 02 Jul 2026 20:40:01 +0000
asID:                     266904
IP address blocks:        2803:f6a0:13c0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1d:3f:f8:9d:fc:a0:42:00:e3:01:f8:55:ac:84:b1:79:2a:4e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:01 2025 GMT
            Not After : Jul  2 20:40:01 2026 GMT
        Subject: CN=EF476429A768D6B3CEE11553A7D489786B2340A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:5c:ae:55:09:fc:93:3d:4c:d9:e2:12:0f:
                    b2:94:d3:a6:fc:7f:be:11:32:ac:eb:2e:e1:75:6b:
                    bd:97:37:25:b5:39:db:e7:57:6c:57:fc:f0:d7:93:
                    a8:c1:5a:30:cb:cc:16:ef:99:99:2b:1f:32:9f:47:
                    a9:bd:57:af:93:ae:bf:bc:15:f3:41:d2:1a:03:8e:
                    f0:2f:6f:d3:73:50:a3:f8:30:b4:0e:6c:9a:3c:89:
                    8d:88:54:9a:99:36:63:12:1a:2e:ab:c0:12:3d:bf:
                    3a:96:d7:80:b6:ca:57:c5:56:d1:38:b6:ec:43:1b:
                    76:a3:65:d3:c6:96:43:59:10:30:6c:05:5d:70:9f:
                    30:4e:6d:36:e1:0b:69:c3:e4:86:59:59:37:de:28:
                    2d:e0:d8:6e:0b:87:14:83:8e:3d:54:5d:d1:65:28:
                    aa:91:be:d2:dc:a2:e6:16:bd:3b:1f:b5:ce:9f:6e:
                    56:d0:c9:40:ea:cf:f0:09:14:80:16:46:c1:2a:59:
                    06:38:77:51:09:eb:f7:4b:49:f8:2d:8d:e2:1e:b9:
                    1f:81:de:32:06:14:6b:dc:b0:be:ae:7d:a7:19:41:
                    d2:4a:3f:a7:9f:a4:41:d1:f2:5c:da:c0:ad:26:18:
                    b6:49:50:90:65:60:eb:e4:62:a9:d4:60:1b:8f:cc:
                    8b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:47:64:29:A7:68:D6:B3:CE:E1:15:53:A7:D4:89:78:6B:23:40:A3
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313363303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:13c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         a2:b3:04:48:95:3e:d4:ae:ef:aa:28:27:3d:10:a4:0b:65:7a:
         88:4b:31:be:56:f1:74:e9:27:81:c8:a5:f9:4e:5e:8d:88:b2:
         7d:96:36:75:21:ec:85:c9:f8:9e:c7:4b:5c:5a:80:63:3f:3f:
         c6:9a:fc:78:83:3e:e9:62:87:48:ac:21:50:68:c5:ca:3e:de:
         a3:4e:b9:64:25:4c:0d:ab:15:a2:24:d8:58:47:2c:d6:d5:84:
         74:52:6e:53:42:dc:b4:0a:2e:60:78:53:7c:ff:dc:cd:93:46:
         71:7f:63:19:aa:eb:b9:86:6e:be:43:30:b5:b0:c8:6d:50:1e:
         5c:ed:cd:5d:cc:40:f8:bf:72:e5:e7:64:d1:e1:e0:b2:12:c1:
         0d:5a:f2:2b:b2:12:42:64:38:ba:8e:e5:0a:05:0f:df:e4:11:
         b6:b3:a2:e4:5c:4b:9e:55:9a:66:b4:d5:0b:6a:bf:c4:23:ff:
         4d:91:5d:c5:b9:a8:81:75:e3:0a:ec:44:4c:f4:97:6e:9a:26:
         77:63:64:14:16:dc:43:df:bd:4d:3e:07:c9:1f:ea:c4:42:24:
         eb:eb:d6:0a:3a:36:46:ba:1b:ac:a7:fd:0e:15:aa:f5:98:ad:
         40:96:b4:c1:7d:7b:b1:58:fa:72:29:9b:cd:53:38:79:ed:42:
         9e:42:bc:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:41:40 2025 by rpki-client