Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3230303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3230303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          BjDQ3MRjudR+NIrJ8AlIIdMWKQR4vWPxYciwwxDDkgk=
Subject key identifier:   5F:B4:CC:AF:32:80:F5:A8:9C:E5:09:9B:AB:65:4C:03:0E:44:2A:6A
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       11264498BAF5EE4DD4AC8116894BE5A992FD2033
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3230303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:13 +0000
ROA not before:           Thu 03 Jul 2025 20:35:13 +0000
ROA not after:            Thu 02 Jul 2026 20:40:13 +0000
asID:                     266904
IP address blocks:        2803:f6a0:200::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:26:44:98:ba:f5:ee:4d:d4:ac:81:16:89:4b:e5:a9:92:fd:20:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:13 2025 GMT
            Not After : Jul  2 20:40:13 2026 GMT
        Subject: CN=5FB4CCAF3280F5A89CE5099BAB654C030E442A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:41:2d:29:98:30:2c:12:ce:04:1c:70:2f:
                    79:23:d1:e1:f1:01:92:85:44:39:52:56:55:a2:e5:
                    2d:15:9f:65:5b:ac:3f:3a:8a:55:50:83:5d:e9:d7:
                    5a:00:97:64:d8:ee:27:41:eb:36:69:64:b8:a6:fd:
                    c9:52:e6:56:87:3c:d7:5e:45:0b:3d:0b:52:99:db:
                    b8:04:46:da:77:68:b6:cd:fc:f6:74:9e:ea:fb:f0:
                    99:a2:79:13:24:a2:86:71:de:e6:7a:4a:db:90:51:
                    a3:ed:e7:e5:f2:73:db:44:38:4b:a7:14:38:da:7d:
                    b4:6a:6c:fe:9e:c8:4a:25:be:de:22:c3:ca:c5:52:
                    d9:14:14:b7:fb:34:d5:e4:45:bb:2b:a5:f7:af:2c:
                    3e:63:de:3a:30:44:1f:05:62:6e:61:12:7a:e6:8a:
                    c2:8c:25:2f:88:d1:c3:9b:9a:65:78:b2:07:80:f9:
                    6c:4b:7c:3e:84:49:2e:29:1c:c4:15:b6:bf:18:e3:
                    5a:21:9a:b9:cf:de:74:dc:cb:70:1c:25:19:85:54:
                    e2:9b:49:06:c3:bc:4f:09:c5:38:d9:88:c4:7d:fc:
                    e7:8b:10:00:60:fd:5b:33:4f:01:f8:f7:c8:48:95:
                    3e:19:1b:a8:69:4b:9a:a7:c9:d9:21:e3:28:cf:66:
                    78:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B4:CC:AF:32:80:F5:A8:9C:E5:09:9B:AB:65:4C:03:0E:44:2A:6A
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3230303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:200::/42

    Signature Algorithm: sha256WithRSAEncryption
         5e:dc:14:14:3e:12:28:23:ef:5d:aa:f8:05:7c:c6:4a:59:77:
         f2:f2:40:a6:7e:52:bb:02:c7:2b:96:97:71:56:7f:08:d3:cf:
         89:38:fd:4c:58:55:5f:28:55:ce:5f:24:92:60:16:bf:74:a0:
         87:ec:f3:42:db:7c:56:0f:fa:aa:08:72:5d:26:75:d1:c0:f2:
         51:51:29:8c:99:96:ca:af:82:be:ff:77:e7:0d:09:90:67:3b:
         ff:9f:99:fc:e3:09:97:a0:f7:48:7a:d3:8d:2d:0c:f1:0f:11:
         d5:3a:ec:74:66:8c:8f:be:b2:fb:93:c2:72:4b:6f:f2:aa:9b:
         e4:bf:b3:e7:4f:f9:cc:1a:e4:b6:53:2d:05:00:38:19:bc:9e:
         6e:8f:21:40:10:be:37:b2:ff:d9:d7:13:24:df:17:ed:fd:72:
         8e:13:50:7b:b3:3d:8f:de:f9:2d:af:59:dc:82:c7:c0:50:b7:
         10:35:89:a5:b3:18:d2:c5:84:2d:5d:82:9d:c7:b0:25:fd:96:
         2a:61:a5:79:22:03:08:6d:f7:10:99:1f:cf:a3:2c:1d:f6:df:
         70:f2:dc:9b:d0:48:fe:b6:cf:dd:75:4b:20:d1:8c:07:bb:5e:
         35:d0:6e:2a:76:b0:b9:a4:3c:7e:c5:0f:40:98:c8:b1:63:da:
         cd:77:4e:0d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUESZEmLr17k3UrIEWiUvlqZL9IDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTA3MDMyMDM1MTNaFw0yNjA3MDIyMDQwMTNaMDMxMTAvBgNV
BAMTKDVGQjRDQ0FGMzI4MEY1QTg5Q0U1MDk5QkFCNjU0QzAzMEU0NDJBNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbskEtKZgwLBLOBBxwL3kj0eHx
AZKFRDlSVlWi5S0Vn2VbrD86ilVQg13p11oAl2TY7idB6zZpZLim/clS5laHPNde
RQs9C1KZ27gERtp3aLbN/PZ0nur78JmieRMkooZx3uZ6StuQUaPt5+Xyc9tEOEun
FDjafbRqbP6eyEolvt4iw8rFUtkUFLf7NNXkRbsrpfevLD5j3jowRB8FYm5hEnrm
isKMJS+I0cObmmV4sgeA+WxLfD6ESS4pHMQVtr8Y41ohmrnP3nTcy3AcJRmFVOKb
SQbDvE8JxTjZiMR9/OeLEABg/VszTwH498hIlT4ZG6hpS5qnydkh4yjPZnh5AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUX7TMrzKA9aic5Qmbq2VMAw5EKmowHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzMyMzgzMDMzM2E2NjM2NjEzMDNhMzIz
MDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNjM2MzkzMDM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAP2oAIAMA0GCSqGSIb3DQEBCwUAA4IBAQBe3BQUPhIoI+9dqvgFfMZKWXfy
8kCmflK7AscrlpdxVn8I08+JOP1MWFVfKFXOXySSYBa/dKCH7PNC23xWD/qqCHJd
JnXRwPJRUSmMmZbKr4K+/3fnDQmQZzv/n5n84wmXoPdIetONLQzxDxHVOux0ZoyP
vrL7k8JyS2/yqpvkv7PnT/nMGuS2Uy0FADgZvJ5ujyFAEL43sv/Z1xMk3xft/XKO
E1B7sz2P3vktr1ncgsfAULcQNYmlsxjSxYQtXYKdx7Al/ZYqYaV5IgMIbfcQmR/P
oywd9t9w8tyb0Ej+ts/ddUsg0YwHu1410G4qdrC5pDx+xQ9AmMixY9rNd04N
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:46:05 2025 by rpki-client