Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3163303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3163303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          TwF7T7u4NSGo7l8IRs0VQyOuAbsmxU2pKmjtZ7QTcOA=
Subject key identifier:   34:E9:AB:70:49:A7:99:AE:9E:34:EE:56:8E:17:22:59:7D:03:F8:FE
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       3BA3C683B681B3F6838A180867E44E3A4A757F48
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3163303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:10 +0000
ROA not before:           Thu 03 Jul 2025 20:35:10 +0000
ROA not after:            Thu 02 Jul 2026 20:40:10 +0000
asID:                     266904
IP address blocks:        2803:f6a0:1c0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a3:c6:83:b6:81:b3:f6:83:8a:18:08:67:e4:4e:3a:4a:75:7f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:10 2025 GMT
            Not After : Jul  2 20:40:10 2026 GMT
        Subject: CN=34E9AB7049A799AE9E34EE568E1722597D03F8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f1:4f:b7:93:17:eb:20:66:8e:88:99:67:a2:
                    a2:03:f5:c3:d2:31:a4:2e:49:37:50:e3:fb:25:86:
                    8a:96:be:be:28:3e:91:e3:e3:0c:17:05:7c:88:f1:
                    0b:17:e8:2a:36:50:2d:bd:c6:79:6d:c2:37:f5:26:
                    ed:b6:8e:5c:f2:79:a1:2d:96:e5:ac:d8:f1:e4:26:
                    18:a4:27:ab:11:42:fb:4a:98:98:57:5b:9d:f1:c1:
                    26:f9:13:93:d6:bb:6b:7b:2d:04:89:bc:65:60:5a:
                    4c:4e:43:41:45:05:64:0d:38:3f:26:bc:69:de:f1:
                    b2:fa:b8:3c:65:f6:2e:da:f6:ab:60:ae:df:64:56:
                    6b:48:3a:b2:c1:12:14:6b:37:d0:68:62:48:04:c7:
                    ec:29:1f:2c:61:b3:1b:5a:64:2d:2b:fc:e4:28:df:
                    dc:7a:b4:b8:1b:c1:40:f3:ab:77:51:02:e5:b9:4d:
                    0a:c8:13:e8:86:48:9f:2f:57:b7:3c:3a:f9:ef:d2:
                    9b:cc:40:68:94:25:5e:46:92:eb:b3:ef:c6:af:41:
                    0d:4a:25:34:a1:1e:50:52:5c:bd:b6:a8:12:5a:92:
                    96:28:49:65:b6:78:30:b3:4e:af:ef:76:f0:b9:58:
                    65:c3:0f:83:c5:c2:71:4c:7f:e9:b8:27:c9:95:f1:
                    a0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E9:AB:70:49:A7:99:AE:9E:34:EE:56:8E:17:22:59:7D:03:F8:FE
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3163303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:1c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         5b:2a:a3:36:59:85:cf:bb:47:b9:d8:17:00:87:25:c8:53:1c:
         aa:13:53:19:5e:90:51:a6:bd:86:4c:9d:cd:64:2b:5f:42:73:
         90:a5:c0:d4:39:c8:83:3b:a9:7d:d8:b0:9c:c4:6f:de:a2:4c:
         16:ec:f7:b7:ae:c7:c1:d3:9e:72:fd:65:72:bd:06:71:bf:31:
         ee:a7:88:74:d8:2d:ec:b5:95:57:c4:69:86:9a:80:66:4c:8a:
         44:8b:2a:4a:1b:00:39:b5:34:3e:50:8d:a1:0d:03:7b:e4:e3:
         4e:ff:d5:80:a2:d8:28:e6:81:6a:09:e2:78:13:c4:4e:a0:ea:
         17:98:49:15:01:5b:51:d8:e3:36:02:6b:91:ff:1b:f6:ac:16:
         5d:e6:ef:fc:89:7b:d2:d8:bd:fe:b5:fe:d9:94:44:29:e3:32:
         df:3f:da:aa:22:46:ba:e2:67:3d:ee:a6:6c:6e:2f:4f:e9:31:
         2b:7b:d0:81:67:49:38:5d:c5:65:57:b3:3d:fe:d0:48:8a:55:
         c1:47:ff:16:bb:a1:d5:1f:49:90:63:24:4f:54:ad:cb:bb:ba:
         38:92:de:9a:66:98:65:65:7c:4f:31:20:2c:a1:3f:5e:85:36:
         de:83:69:06:dd:ed:b5:28:eb:c5:a6:a5:7a:f6:ca:a0:99:a9:
         22:e0:11:30
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUO6PGg7aBs/aDihgIZ+ROOkp1f0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTA3MDMyMDM1MTBaFw0yNjA3MDIyMDQwMTBaMDMxMTAvBgNV
BAMTKDM0RTlBQjcwNDlBNzk5QUU5RTM0RUU1NjhFMTcyMjU5N0QwM0Y4RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28U+3kxfrIGaOiJlnoqID9cPS
MaQuSTdQ4/slhoqWvr4oPpHj4wwXBXyI8QsX6Co2UC29xnltwjf1Ju22jlzyeaEt
luWs2PHkJhikJ6sRQvtKmJhXW53xwSb5E5PWu2t7LQSJvGVgWkxOQ0FFBWQNOD8m
vGne8bL6uDxl9i7a9qtgrt9kVmtIOrLBEhRrN9BoYkgEx+wpHyxhsxtaZC0r/OQo
39x6tLgbwUDzq3dRAuW5TQrIE+iGSJ8vV7c8Ovnv0pvMQGiUJV5Gkuuz78avQQ1K
JTShHlBSXL22qBJakpYoSWW2eDCzTq/vdvC5WGXDD4PFwnFMf+m4J8mV8aB/AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUNOmrcEmnma6eNO5WjhciWX0D+P4wHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzMyMzgzMDMzM2E2NjM2NjEzMDNhMzE2
MzMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNjM2MzkzMDM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAP2oAHAMA0GCSqGSIb3DQEBCwUAA4IBAQBbKqM2WYXPu0e52BcAhyXIUxyq
E1MZXpBRpr2GTJ3NZCtfQnOQpcDUOciDO6l92LCcxG/eokwW7Pe3rsfB055y/WVy
vQZxvzHup4h02C3stZVXxGmGmoBmTIpEiypKGwA5tTQ+UI2hDQN75ONO/9WAotgo
5oFqCeJ4E8ROoOoXmEkVAVtR2OM2AmuR/xv2rBZd5u/8iXvS2L3+tf7ZlEQp4zLf
P9qqIka64mc97qZsbi9P6TEre9CBZ0k4XcVlV7M9/tBIilXBR/8Wu6HVH0mQYyRP
VK3Lu7o4kt6aZphlZXxPMSAsoT9ehTbeg2kG3e21KOvFpqV69sqgmaki4BEw
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:44:03 2025 by rpki-client