Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313530303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a313530303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          31ducSfJSY01TjD8jA4jLMO5D/ZReF9495Kbdh+Oy3U=
Subject key identifier:   32:34:34:D3:A8:67:5F:4A:CF:C8:FE:C0:50:A1:1D:F0:D9:56:39:86
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       57D23C880B28D797927748EB048CD67E46B95FAC
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313530303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:26 +0000
ROA not before:           Thu 03 Jul 2025 20:35:26 +0000
ROA not after:            Thu 02 Jul 2026 20:40:26 +0000
asID:                     266904
IP address blocks:        2803:f6a0:1500::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d2:3c:88:0b:28:d7:97:92:77:48:eb:04:8c:d6:7e:46:b9:5f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:26 2025 GMT
            Not After : Jul  2 20:40:26 2026 GMT
        Subject: CN=323434D3A8675F4ACFC8FEC050A11DF0D9563986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:4e:b7:12:bc:16:22:f1:63:13:7e:9a:00:
                    d9:5f:56:21:c5:ab:23:4f:5c:29:48:7b:d4:1f:91:
                    95:de:5f:70:f4:bd:fd:ef:7b:a2:07:b8:a5:cf:e8:
                    4a:f4:90:37:09:d6:46:bb:9c:70:47:b4:24:02:bf:
                    58:4d:da:b5:13:71:83:c9:bd:bb:4f:32:60:b0:d1:
                    a0:fb:ee:49:fb:2d:82:99:bc:a7:45:87:a4:64:8e:
                    43:a0:08:03:9a:79:b7:c5:33:70:80:a1:b5:7d:c3:
                    c7:eb:00:a4:97:67:e3:ae:3f:33:80:6d:41:69:8b:
                    16:d5:6f:cb:2e:e7:33:a2:c9:05:0c:af:05:93:83:
                    af:2f:99:27:e8:46:8a:12:9e:bb:b7:a9:ef:86:e2:
                    5f:f8:98:94:6c:ef:cf:b9:03:7c:0a:c9:13:d3:9c:
                    7b:f6:aa:e8:b7:b1:b5:56:27:c3:72:25:32:0e:ee:
                    50:df:e6:5d:0a:fd:98:6f:4d:24:26:0d:3c:61:dd:
                    24:c7:90:6d:e3:5d:fe:3a:e3:f9:f0:92:80:c0:eb:
                    05:2f:d3:f5:83:79:ba:3a:15:ed:6f:93:1a:02:8b:
                    64:a0:fd:35:eb:1d:4f:cb:b6:35:bf:1d:3c:e1:ae:
                    5d:94:e8:7e:48:a1:d3:0f:30:00:fe:60:af:ad:37:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:34:34:D3:A8:67:5F:4A:CF:C8:FE:C0:50:A1:1D:F0:D9:56:39:86
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313530303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:1500::/42

    Signature Algorithm: sha256WithRSAEncryption
         ac:0d:4e:39:26:be:8e:9b:02:36:64:7f:46:a8:e6:64:f7:e4:
         bd:d0:ff:0a:e2:0c:0f:3e:60:a6:f6:7b:33:1f:9e:8c:73:54:
         d6:51:84:22:93:d0:4f:a6:10:8b:9c:c4:73:d8:26:92:f9:be:
         4e:6a:ca:05:b0:e9:d9:10:59:d4:54:7f:14:2e:74:42:b3:49:
         1c:e5:ac:af:1a:d6:74:a7:ea:93:4b:a0:14:eb:85:3b:c9:45:
         97:ab:9f:fe:5d:34:25:6b:1c:45:f3:a7:33:7d:d6:1e:3f:3f:
         58:b2:e7:66:f5:8f:dd:17:d7:76:46:39:a6:c3:8f:73:7d:7f:
         02:ad:2d:3b:43:0f:e6:7f:44:37:b8:72:38:f8:4e:ea:aa:a0:
         1a:ba:fa:fb:6e:1d:15:1f:fd:5e:12:20:85:72:e2:1e:e6:81:
         c6:d2:8b:b1:c5:2a:49:9d:56:ef:51:5c:fd:57:80:a0:97:81:
         29:8d:fa:18:2d:e6:3b:36:0f:1f:77:b4:d6:20:2c:69:73:e4:
         01:95:2d:3b:97:94:bc:9e:39:78:53:b4:fa:23:d9:11:ef:36:
         21:86:f5:31:33:4f:59:a9:90:83:f5:c6:23:c2:67:7b:f9:b9:
         cd:90:15:61:41:b6:20:94:06:ba:42:03:af:8a:4a:b6:31:a9:
         5b:31:ec:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:48:14 2025 by rpki-client