Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313438303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a313438303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          QEC1NWwEe5vL20ZWZEt/TfeMfrytOp+LBFyLV5glqDk=
Subject key identifier:   56:1E:BA:CD:E9:10:95:B5:26:FB:37:5A:74:34:DB:F9:C2:DF:B7:2A
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       3120595D9F58F5F43A43BC2E54B5F07B3287165F
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313438303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:12 +0000
ROA not before:           Thu 03 Jul 2025 20:35:12 +0000
ROA not after:            Thu 02 Jul 2026 20:40:12 +0000
asID:                     266904
IP address blocks:        2803:f6a0:1480::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:20:59:5d:9f:58:f5:f4:3a:43:bc:2e:54:b5:f0:7b:32:87:16:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:12 2025 GMT
            Not After : Jul  2 20:40:12 2026 GMT
        Subject: CN=561EBACDE91095B526FB375A7434DBF9C2DFB72A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:58:5e:b8:4b:85:f6:8d:d1:70:22:78:82:04:
                    48:81:ec:ad:a7:c3:35:0f:8f:9c:42:74:dd:9c:95:
                    b4:4c:88:ca:b2:48:51:96:b4:05:e8:be:0b:b5:54:
                    b7:61:95:5c:dd:ca:e2:68:4b:f4:d9:0b:e6:c9:87:
                    96:84:c6:5c:f7:25:cb:24:6e:09:3b:34:d8:e4:53:
                    48:b4:1d:db:3d:c1:9b:9b:4e:ee:bf:79:7a:fb:9f:
                    03:2b:a1:ff:09:f8:f1:f3:41:3c:d8:0f:f9:bc:ee:
                    7e:0a:01:d8:a5:4d:10:54:7f:01:a7:7d:6c:3a:19:
                    0e:10:de:cb:1a:e7:7a:61:8d:78:b1:0b:f6:5d:10:
                    14:83:f3:82:17:fd:91:8f:26:72:42:40:1c:22:91:
                    fd:1f:4c:d4:b6:6c:1c:e6:3b:07:4b:49:e8:12:c5:
                    db:75:23:a3:c1:dc:8b:28:bc:55:2a:ff:75:a4:b9:
                    2d:8e:aa:d4:32:39:6e:71:01:9a:19:a0:23:3f:4b:
                    ea:0c:2f:44:b5:e5:3c:8b:dc:bc:47:d2:99:0f:b2:
                    32:3d:61:df:25:71:4c:9b:7d:55:73:52:8d:f2:c1:
                    3a:b2:2e:d6:35:92:88:ac:20:98:77:34:19:d8:ad:
                    72:47:8f:ee:0c:72:82:f1:be:b8:e9:b3:a0:33:69:
                    da:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1E:BA:CD:E9:10:95:B5:26:FB:37:5A:74:34:DB:F9:C2:DF:B7:2A
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313438303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:1480::/42

    Signature Algorithm: sha256WithRSAEncryption
         76:c8:d3:9b:ca:67:ce:f1:94:a6:ec:21:27:ce:70:8e:37:a9:
         32:27:17:a7:ae:3d:68:41:fb:0d:23:93:a0:11:3c:9c:32:ee:
         b6:a6:d2:4e:3f:14:59:8e:e6:0c:f9:f8:ba:08:31:7a:9f:65:
         87:83:95:1b:44:a3:dc:af:81:7d:cf:c0:91:e9:08:23:fa:fb:
         bc:6d:20:20:ae:71:b4:04:09:ac:7a:57:93:90:bf:6c:ae:76:
         a9:fb:06:37:1f:8c:64:07:34:88:a6:e0:25:39:eb:53:99:2a:
         c4:45:34:29:b4:35:d0:0a:a2:08:cf:2b:d4:6d:cf:1f:23:2a:
         46:14:e2:40:6e:0c:f5:c8:18:b7:e7:35:25:fe:37:b2:94:68:
         60:77:56:aa:1c:a0:85:a3:2f:db:5f:5e:5c:61:69:5d:4e:7c:
         d7:9d:f3:39:f1:59:14:56:be:0b:1c:a4:22:c0:a2:a5:26:8c:
         91:3e:69:75:55:af:19:8b:8c:6b:6e:a9:08:b3:95:d2:c8:6b:
         32:15:99:f7:a0:77:49:70:45:f1:4d:a3:97:cd:bc:43:a9:9f:
         e3:b9:4e:6e:a5:e6:2a:34:9c:c9:9c:dc:1e:63:54:45:87:cd:
         75:9a:84:f8:01:3e:7b:23:60:a9:72:c8:4d:a5:c4:5b:8c:da:
         51:cf:87:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:48:57 2025 by rpki-client