Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3138303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3138303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          p8M+msMYYfL7LMSZHgGJBfZdGcnGvoSYoU4wEIdrx4A=
Subject key identifier:   08:32:D0:A8:E5:1F:30:01:90:23:52:04:52:7F:AC:96:EF:78:53:13
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       79711C3DFDADAB4A91D64A5A4B9AB98E50CFA6F9
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3138303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:27 +0000
ROA not before:           Thu 03 Jul 2025 20:35:27 +0000
ROA not after:            Thu 02 Jul 2026 20:40:27 +0000
asID:                     266904
IP address blocks:        2803:f6a0:180::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:71:1c:3d:fd:ad:ab:4a:91:d6:4a:5a:4b:9a:b9:8e:50:cf:a6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:27 2025 GMT
            Not After : Jul  2 20:40:27 2026 GMT
        Subject: CN=0832D0A8E51F300190235204527FAC96EF785313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:5a:32:58:0a:00:60:04:db:2b:e6:69:f5:
                    97:17:53:57:34:5d:bc:16:f2:73:7c:0e:52:72:cf:
                    10:fe:2a:b9:0e:a3:27:cf:39:a2:69:77:70:02:16:
                    5c:ec:a0:67:53:fc:7e:65:bb:ec:69:05:8e:e0:e9:
                    82:95:db:08:af:2f:3a:4e:dc:45:9a:fe:df:a2:15:
                    cd:d7:1c:9b:c6:ec:18:33:7f:00:8c:81:a0:07:25:
                    d4:8c:92:45:7a:46:4f:13:da:e4:94:f2:65:8f:b5:
                    7e:c3:6b:94:6c:10:62:b2:a8:64:9d:1e:2e:44:fd:
                    66:a5:84:37:06:fb:53:73:fb:f4:68:99:ee:51:01:
                    f5:c9:3d:93:28:0a:4c:b5:04:3d:89:3e:f1:a0:e3:
                    55:e3:1f:c3:9e:6c:63:fe:c8:9c:1f:ea:d8:6e:23:
                    bc:b6:82:7a:b8:44:76:dd:6a:85:5b:51:2c:17:49:
                    5b:0c:37:2a:41:b2:d9:45:1b:e9:44:09:b8:90:10:
                    1b:ce:fe:9c:f3:bb:52:e4:4f:a6:0b:1b:a2:f4:e1:
                    2f:e8:36:07:a1:84:85:52:43:5e:90:23:f9:52:ea:
                    11:e0:f2:31:b6:9c:a5:6c:5a:45:81:67:29:7c:66:
                    39:1e:89:4f:04:40:28:3f:9f:f4:23:68:c9:04:68:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:32:D0:A8:E5:1F:30:01:90:23:52:04:52:7F:AC:96:EF:78:53:13
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3138303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:180::/42

    Signature Algorithm: sha256WithRSAEncryption
         59:48:ea:32:3c:e5:6f:36:c7:cb:63:97:ac:e5:ea:a8:ff:93:
         17:93:ab:c3:aa:c6:3a:5c:d2:4f:5d:30:1b:80:06:3b:87:11:
         2f:ea:8d:a1:99:a6:09:ce:67:94:f8:93:22:89:b3:01:66:4c:
         f2:19:f8:7c:4c:bb:95:cd:5d:3e:55:43:e8:ef:1b:c5:6f:d5:
         01:3e:c6:be:47:c4:1b:55:14:9d:b4:cf:9c:13:f7:92:42:5f:
         a9:0f:25:69:22:50:06:69:fe:ad:1a:1c:32:55:5c:6a:e8:4a:
         77:db:b2:78:16:05:8a:5a:eb:e5:6c:1b:4a:db:1e:44:d3:99:
         2f:34:69:f3:29:8e:ca:5d:fe:3d:83:1f:e5:b0:e7:2f:6f:f1:
         e4:f9:a7:9e:a3:d3:6c:5e:1c:cd:ab:98:cd:1b:01:bb:7c:1b:
         32:db:10:e6:83:c0:2d:ad:e4:e2:81:e4:14:1c:a5:a8:c4:27:
         22:b2:cc:b1:4f:e1:40:20:6f:a5:2b:5b:b7:00:f4:5f:bd:3a:
         11:9c:db:5a:35:1e:26:4e:9f:ba:77:9c:06:ff:38:30:f2:1e:
         d9:bb:cf:39:da:44:19:0d:80:8b:55:af:3a:1e:bb:59:55:c9:
         cc:e1:53:3c:94:7c:99:f7:95:20:f4:0b:56:e7:48:ed:c4:7a:
         1b:20:bf:63
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUeXEcPf2tq0qR1kpaS5q5jlDPpvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTA3MDMyMDM1MjdaFw0yNjA3MDIyMDQwMjdaMDMxMTAvBgNV
BAMTKDA4MzJEMEE4RTUxRjMwMDE5MDIzNTIwNDUyN0ZBQzk2RUY3ODUzMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChW1oyWAoAYATbK+Zp9ZcXU1c0
XbwW8nN8DlJyzxD+KrkOoyfPOaJpd3ACFlzsoGdT/H5lu+xpBY7g6YKV2wivLzpO
3EWa/t+iFc3XHJvG7BgzfwCMgaAHJdSMkkV6Rk8T2uSU8mWPtX7Da5RsEGKyqGSd
Hi5E/WalhDcG+1Nz+/Rome5RAfXJPZMoCky1BD2JPvGg41XjH8OebGP+yJwf6thu
I7y2gnq4RHbdaoVbUSwXSVsMNypBstlFG+lECbiQEBvO/pzzu1LkT6YLG6L04S/o
NgehhIVSQ16QI/lS6hHg8jG2nKVsWkWBZyl8ZjkeiU8EQCg/n/QjaMkEaEQlAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUCDLQqOUfMAGQI1IEUn+slu94UxMwHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzMyMzgzMDMzM2E2NjM2NjEzMDNhMzEz
ODMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNjM2MzkzMDM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAP2oAGAMA0GCSqGSIb3DQEBCwUAA4IBAQBZSOoyPOVvNsfLY5es5eqo/5MX
k6vDqsY6XNJPXTAbgAY7hxEv6o2hmaYJzmeU+JMiibMBZkzyGfh8TLuVzV0+VUPo
7xvFb9UBPsa+R8QbVRSdtM+cE/eSQl+pDyVpIlAGaf6tGhwyVVxq6Ep327J4FgWK
WuvlbBtK2x5E05kvNGnzKY7KXf49gx/lsOcvb/Hk+aeeo9NsXhzNq5jNGwG7fBsy
2xDmg8AtreTigeQUHKWoxCcissyxT+FAIG+lK1u3APRfvToRnNtaNR4mTp+6d5wG
/zgw8h7Zu8852kQZDYCLVa86HrtZVcnM4VM8lHyZ95Ug9AtW50jtxHobIL9j
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:41:50 2025 by rpki-client