Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313434303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a313434303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          kP2Vwa4A6Zk4Vhl5OGj6k8RixCWBjVQmOQ5uk1SCw+0=
Subject key identifier:   8C:A0:69:E6:66:6A:82:24:B3:E6:7A:85:08:17:EF:F4:54:27:81:E0
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       315AA7CA6F78D0EEF8FA5799CC21F09909669970
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313434303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:01 +0000
ROA not before:           Thu 03 Jul 2025 20:35:01 +0000
ROA not after:            Thu 02 Jul 2026 20:40:01 +0000
asID:                     266904
IP address blocks:        2803:f6a0:1440::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5a:a7:ca:6f:78:d0:ee:f8:fa:57:99:cc:21:f0:99:09:66:99:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:01 2025 GMT
            Not After : Jul  2 20:40:01 2026 GMT
        Subject: CN=8CA069E6666A8224B3E67A850817EFF4542781E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:da:72:5c:b7:b5:01:e2:57:3b:bc:2f:3c:
                    5b:5e:cb:7e:0a:f0:ac:73:42:74:b7:7d:42:0e:ce:
                    36:57:93:8b:6f:26:89:fb:fb:e0:e3:58:61:a5:b5:
                    42:d7:c1:0f:fc:a1:c5:de:d2:d8:d6:d6:e3:99:d9:
                    8f:18:c8:ca:bf:75:2a:f4:87:8e:bc:ed:7c:78:99:
                    f6:14:05:4c:80:14:42:9c:15:a6:47:c6:d5:b2:23:
                    bd:a5:a7:e8:13:eb:0b:44:be:ec:af:41:39:ff:96:
                    30:36:72:69:d5:bc:e9:10:39:35:23:c4:50:cf:b2:
                    20:0c:bd:23:48:26:85:df:a7:e4:72:6d:09:12:84:
                    f5:ba:f3:65:22:14:c6:29:3b:12:05:d0:d1:8a:9d:
                    b9:a6:f3:68:18:a2:a1:a2:1b:97:67:28:2d:fe:18:
                    47:1c:1b:ae:a2:76:33:54:09:59:fb:65:18:56:2d:
                    06:d7:2e:24:9f:13:66:75:28:40:8e:69:c4:10:d3:
                    03:0e:b7:67:fe:97:9b:c5:1b:96:67:6b:59:a9:8c:
                    4e:df:86:32:b0:b4:e4:ea:15:e2:2e:f2:c3:9e:fd:
                    2b:ee:08:30:b6:2c:16:89:21:73:7d:4a:69:c8:c2:
                    51:c3:e6:42:e5:79:77:56:2e:39:8b:d1:5a:f4:d4:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A0:69:E6:66:6A:82:24:B3:E6:7A:85:08:17:EF:F4:54:27:81:E0
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313434303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:1440::/42

    Signature Algorithm: sha256WithRSAEncryption
         42:77:b9:a1:51:54:0c:57:5a:16:0c:9f:ed:50:7f:b8:cd:b0:
         bc:24:a9:c0:e7:ea:80:14:5c:d3:e2:84:84:31:17:bf:44:bb:
         4a:22:0d:7c:c6:6f:b4:a9:09:fa:4b:35:08:b0:97:04:2b:49:
         ec:6b:5a:fd:f8:8a:52:f3:b3:8f:b3:a0:33:42:02:f8:da:6a:
         0e:08:85:b2:7e:6e:92:d6:93:d0:4e:9b:2b:d8:eb:fc:9e:3f:
         95:32:38:70:c2:3e:e5:8c:f3:18:46:db:4d:aa:31:b5:c3:45:
         c5:94:5e:50:85:bd:16:e4:7c:1d:a2:63:9d:97:11:d9:da:b8:
         cd:70:34:89:55:bc:64:9a:3f:79:ec:98:74:ad:d7:39:e3:f8:
         f4:92:ad:2d:e5:f4:a9:ff:06:d1:ff:d5:17:99:8e:2c:13:b5:
         42:60:f8:62:3f:25:2d:b1:97:b0:c4:08:67:fb:9d:6f:58:b2:
         c9:49:da:9e:95:0e:b6:bd:ad:e4:a1:9b:38:21:c6:83:bf:b6:
         a2:6d:ab:d3:80:0d:61:fa:76:be:d0:1f:5a:2f:c3:86:7c:31:
         79:14:6c:f7:d7:36:7c:b2:2f:d5:04:62:08:15:4c:d6:66:f2:
         c4:b2:ec:1a:4d:2f:e0:f0:f6:00:a9:a1:20:fe:ee:d5:57:a7:
         26:dd:bf:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:48:51 2025 by rpki-client