Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3263303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3263303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          dHLmpaOyyDAzyGbCbNmeovlbpmHspbooclRKnaSFk+Q=
Subject key identifier:   42:32:F0:E6:D2:EA:1B:ED:4F:CD:90:95:A0:54:4C:8C:70:C6:09:6E
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       23B42A48503CEF72BA232579055B67E26DE463D0
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3263303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:24 +0000
ROA not before:           Thu 03 Jul 2025 20:35:24 +0000
ROA not after:            Thu 02 Jul 2026 20:40:24 +0000
asID:                     266904
IP address blocks:        2803:f6a0:2c0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b4:2a:48:50:3c:ef:72:ba:23:25:79:05:5b:67:e2:6d:e4:63:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:24 2025 GMT
            Not After : Jul  2 20:40:24 2026 GMT
        Subject: CN=4232F0E6D2EA1BED4FCD9095A0544C8C70C6096E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:9e:9a:01:bd:b9:28:d3:59:a6:f4:42:41:
                    1a:94:3a:e8:26:e0:50:bf:50:f0:60:4d:13:bb:78:
                    df:69:72:2b:b2:36:d8:e4:7e:ed:f2:50:40:2c:55:
                    ba:f5:c3:2a:ab:2a:63:f4:8e:43:1b:92:9c:31:c5:
                    e8:31:d2:72:ab:fa:97:94:31:d3:8c:f8:03:cd:69:
                    41:e6:b8:ae:23:b8:b8:ba:05:bd:2b:f2:08:c5:43:
                    8b:08:1a:c7:12:fe:e0:ef:d1:7e:68:c9:96:3a:8a:
                    fd:0b:c9:b1:74:06:fb:9d:c0:de:5d:2e:db:38:99:
                    36:45:76:70:73:a7:f1:6e:f4:90:cb:c9:a5:49:d5:
                    1c:22:70:f7:a3:0a:3a:4b:fc:c1:3d:7b:7b:b8:d6:
                    9b:20:2c:85:fb:25:f8:4f:71:cd:6d:6e:ff:5d:2d:
                    33:07:0f:a3:8f:53:df:0c:1c:51:24:be:ee:fd:53:
                    94:1c:35:d9:20:0b:e4:19:50:ad:61:44:28:e8:f5:
                    a7:ba:bc:ac:9a:9c:19:ec:1f:8c:0b:ee:ce:df:10:
                    fb:e4:b0:ca:9a:97:b5:f5:10:c7:68:fe:8b:b5:72:
                    24:3b:fe:cd:6e:21:64:d1:95:a3:8c:78:4e:0b:21:
                    54:cd:b5:4f:53:bc:19:d0:7e:f7:f3:cc:c9:5c:e7:
                    98:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:32:F0:E6:D2:EA:1B:ED:4F:CD:90:95:A0:54:4C:8C:70:C6:09:6E
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3263303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:2c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         63:96:7e:cd:1f:a9:73:28:a4:47:37:57:49:94:bb:47:4e:d3:
         54:4d:21:ba:d8:b7:ec:fc:d2:1f:60:17:05:e7:1c:d3:c4:8b:
         11:ab:e8:94:0c:e0:06:c1:0b:82:40:09:b2:17:36:c2:0f:a7:
         dd:ef:c3:52:9e:7f:94:25:33:eb:6a:db:cb:d6:19:2e:43:88:
         1a:30:7f:2a:1a:31:c7:6e:2c:fd:d9:c5:5c:84:c5:7c:cf:67:
         a5:9c:f4:8e:88:b6:e0:46:26:98:ad:1d:a8:c5:62:68:fd:ec:
         10:d3:ee:83:ad:78:e3:f5:49:78:19:c3:f3:4b:3b:f5:95:be:
         4e:f8:37:7e:d2:3b:8a:22:40:11:11:ca:e7:b8:b6:f1:6c:dd:
         22:ef:9e:46:f7:7c:5a:a4:d9:31:18:36:c6:cc:13:a0:f8:ee:
         f7:16:e9:d1:4d:b3:2e:eb:ac:83:9e:7c:22:1a:f4:79:06:8f:
         6e:88:8f:b3:e6:c3:6d:1d:10:dc:3a:bf:88:89:98:34:84:a1:
         51:27:d4:72:2c:e6:59:96:5b:8f:4f:49:64:95:1e:16:21:79:
         8a:fd:00:30:3b:5c:3e:4f:a8:f4:be:de:47:4d:ab:4f:85:ba:
         c7:fa:c3:3a:bd:67:bb:8c:d6:d0:18:b9:99:2d:b9:a3:b6:82:
         86:f3:bf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:40:38 2025 by rpki-client