Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313830303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a313830303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          yxchrn7Cx8+PGBX7C3IZ/BCA+a1wbX0aJgR53s2B4RU=
Subject key identifier:   FB:5A:70:AA:81:05:70:C7:20:5D:26:DD:6A:A9:B6:6A:B6:7A:78:A7
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       6140350534FBBEA95732ADF09E72109F8FF38E8D
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313830303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:14 +0000
ROA not before:           Thu 03 Jul 2025 20:35:14 +0000
ROA not after:            Thu 02 Jul 2026 20:40:14 +0000
asID:                     266904
IP address blocks:        2803:f6a0:1800::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:40:35:05:34:fb:be:a9:57:32:ad:f0:9e:72:10:9f:8f:f3:8e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:14 2025 GMT
            Not After : Jul  2 20:40:14 2026 GMT
        Subject: CN=FB5A70AA810570C7205D26DD6AA9B66AB67A78A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:65:9d:ad:25:f3:91:4b:10:86:68:03:60:
                    4a:96:72:fa:0a:ae:d4:6f:b4:90:5b:91:56:35:31:
                    e1:09:ba:d7:1f:a5:e6:d9:2b:3c:6f:8c:ce:e7:b7:
                    15:61:17:1f:62:43:36:b6:f2:41:33:36:f1:19:8f:
                    13:d4:29:54:a2:a9:c2:5f:c4:b9:ed:7d:bf:74:f6:
                    0e:c1:9e:16:13:74:f7:6f:a9:e9:a0:51:81:c6:eb:
                    18:5f:c3:ba:e3:08:09:56:b5:82:b0:1c:18:aa:06:
                    71:1f:c9:6d:19:2c:f2:f2:53:ce:74:39:26:6e:8a:
                    15:92:98:f7:b5:ce:64:8c:ef:45:1e:57:f0:76:e5:
                    3c:01:c3:4e:0e:4e:d9:c7:06:bb:78:22:3a:e4:06:
                    9a:5e:e7:95:8a:3e:51:10:b5:3c:1e:a7:80:09:de:
                    b0:d9:26:a8:97:c1:3d:04:e7:e6:7e:f0:78:99:c3:
                    ee:df:a2:6a:9c:ba:08:ed:55:ea:48:a7:23:0e:ac:
                    72:d3:0a:0b:40:fa:b0:23:ec:06:a1:f1:1e:74:e4:
                    f6:a5:87:e7:18:01:86:3f:a5:ce:c7:63:dd:e6:77:
                    6f:4c:06:e1:26:84:1c:67:64:40:44:a4:60:9f:60:
                    27:05:40:4b:89:54:4b:71:7e:e1:ab:50:d2:4b:bd:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5A:70:AA:81:05:70:C7:20:5D:26:DD:6A:A9:B6:6A:B6:7A:78:A7
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313830303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:1800::/42

    Signature Algorithm: sha256WithRSAEncryption
         4d:75:fa:b3:1f:1d:34:5a:41:cc:71:c4:33:83:29:d9:00:bf:
         69:55:0e:47:cf:5f:59:11:08:d9:ce:52:16:3e:76:94:a1:e3:
         f0:a1:7b:ae:ad:ab:dc:47:77:64:7a:de:22:da:c8:a6:7c:29:
         2f:01:5b:7c:2c:5b:f9:61:6e:18:8f:a3:d0:af:70:da:00:17:
         c4:59:15:92:66:7f:39:dc:e8:c8:e8:14:d9:f1:80:be:8e:f9:
         9b:4f:ff:24:e3:c4:34:37:df:95:98:0a:1c:ae:ba:24:21:65:
         98:30:e9:59:5a:0d:5f:47:7d:f7:dc:00:e7:82:6c:0e:83:7a:
         dd:1d:43:77:17:8f:21:b0:e1:bf:64:89:21:66:6c:76:f7:44:
         1d:3a:5e:48:19:6c:07:c6:e5:59:e8:1d:74:5d:47:3d:21:ba:
         a5:5c:0a:eb:a3:ac:28:d1:08:7a:9a:46:bc:f6:e9:40:6c:86:
         70:07:47:5f:20:e1:f5:a2:41:a7:48:a6:be:82:3a:6c:29:08:
         0c:02:f6:14:40:65:d9:92:ff:9f:77:9b:9f:fc:5b:71:7a:4d:
         32:b9:a0:0b:b3:17:96:21:d2:23:65:ed:a5:cd:f7:cb:c4:d2:
         77:0a:49:4e:a4:3b:d5:f5:19:b2:ac:3f:74:5f:ae:fc:40:c8:
         4f:ac:19:26
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUYUA1BTT7vqlXMq3wnnIQn4/zjo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTA3MDMyMDM1MTRaFw0yNjA3MDIyMDQwMTRaMDMxMTAvBgNV
BAMTKEZCNUE3MEFBODEwNTcwQzcyMDVEMjZERDZBQTlCNjZBQjY3QTc4QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOjWWdrSXzkUsQhmgDYEqWcvoK
rtRvtJBbkVY1MeEJutcfpebZKzxvjM7ntxVhFx9iQza28kEzNvEZjxPUKVSiqcJf
xLntfb909g7BnhYTdPdvqemgUYHG6xhfw7rjCAlWtYKwHBiqBnEfyW0ZLPLyU850
OSZuihWSmPe1zmSM70UeV/B25TwBw04OTtnHBrt4IjrkBppe55WKPlEQtTwep4AJ
3rDZJqiXwT0E5+Z+8HiZw+7fomqcugjtVepIpyMOrHLTCgtA+rAj7Aah8R505Pal
h+cYAYY/pc7HY93md29MBuEmhBxnZEBEpGCfYCcFQEuJVEtxfuGrUNJLvYBRAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQU+1pwqoEFcMcgXSbdaqm2arZ6eKcwHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzMyMzgzMDMzM2E2NjM2NjEzMDNhMzEz
ODMwMzAzYTNhMmYzNDMyMmQzNDMyMjAzZDNlMjAzMjM2MzYzOTMwMzQucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYoA/agGAAwDQYJKoZIhvcNAQELBQADggEBAE11+rMfHTRaQcxxxDODKdkA
v2lVDkfPX1kRCNnOUhY+dpSh4/Che66tq9xHd2R63iLayKZ8KS8BW3wsW/lhbhiP
o9CvcNoAF8RZFZJmfznc6MjoFNnxgL6O+ZtP/yTjxDQ335WYChyuuiQhZZgw6Vla
DV9HfffcAOeCbA6Det0dQ3cXjyGw4b9kiSFmbHb3RB06XkgZbAfG5VnoHXRdRz0h
uqVcCuujrCjRCHqaRrz26UBshnAHR18g4fWiQadIpr6COmwpCAwC9hRAZdmS/593
m5/8W3F6TTK5oAuzF5Yh0iNl7aXN98vE0ncKSU6kO9X1GbKsP3RfrvxAyE+sGSY=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:45:16 2025 by rpki-client