Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3334303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3334303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          AJgqv3v3ueQG8aVyTL6ZuS0QE1QNOuYD3sleUEhoVm8=
Subject key identifier:   4B:09:58:97:05:00:95:45:5F:14:8C:31:6A:43:1B:41:9D:2D:75:6A
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       20394D5F83294C1F6FE3A9943D1D71AB20D5849C
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3334303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:26 +0000
ROA not before:           Thu 03 Jul 2025 20:35:26 +0000
ROA not after:            Thu 02 Jul 2026 20:40:26 +0000
asID:                     266904
IP address blocks:        2803:f6a0:340::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:39:4d:5f:83:29:4c:1f:6f:e3:a9:94:3d:1d:71:ab:20:d5:84:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:26 2025 GMT
            Not After : Jul  2 20:40:26 2026 GMT
        Subject: CN=4B095897050095455F148C316A431B419D2D756A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:60:6b:ce:e9:75:f5:66:68:e7:64:59:02:
                    c9:c8:63:c0:13:ac:6a:d6:0a:31:ac:35:02:45:66:
                    ac:1c:ec:20:c8:e3:e2:38:43:9e:d8:12:b8:13:16:
                    e5:5c:d0:df:88:11:1c:74:4c:a9:77:e8:c2:d6:bc:
                    87:ef:86:ff:82:12:f8:2f:de:f1:ec:15:ed:04:88:
                    47:1d:78:d0:c5:4f:8e:87:02:02:ee:56:79:20:0e:
                    7a:eb:13:ce:fa:44:fb:60:1e:a1:7c:f3:b8:2f:28:
                    0f:da:80:0a:98:4a:07:ed:e2:b8:2f:20:a3:9c:91:
                    3e:89:ba:0a:ee:1f:66:1a:e3:f6:56:f4:cd:81:fd:
                    69:d1:9b:86:66:77:26:7b:0d:96:28:fd:45:5a:c0:
                    79:10:ad:2b:b7:1e:76:f8:40:9b:a6:90:40:78:63:
                    18:25:05:98:cc:78:0e:83:fe:0b:90:3e:01:f7:d3:
                    47:d9:b3:95:3a:f5:07:98:c2:c3:38:8d:36:75:6d:
                    8b:34:7e:c9:90:b4:d8:02:9d:45:9c:e4:62:7c:5e:
                    54:e5:f3:35:c9:fe:1b:d8:c8:a3:1d:0d:a5:08:0e:
                    e5:80:b5:1d:af:50:73:bb:58:f7:9e:69:11:77:0f:
                    d7:0f:2b:94:04:9c:1b:b1:08:fd:05:e7:1d:08:99:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:09:58:97:05:00:95:45:5F:14:8C:31:6A:43:1B:41:9D:2D:75:6A
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3334303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:340::/42

    Signature Algorithm: sha256WithRSAEncryption
         39:a3:fb:65:a3:8d:ad:e9:b6:80:75:e5:42:cd:02:87:46:c5:
         27:ee:b8:e7:81:bc:1f:4f:bc:ff:96:6c:34:f1:d2:6c:aa:30:
         84:65:5e:07:3b:70:fe:ec:e6:5d:e3:95:42:14:c5:e5:a3:22:
         af:9b:e6:8a:94:cd:11:09:2b:d6:c8:24:28:c7:78:65:b1:50:
         7a:d7:5f:3f:0f:c6:02:04:05:ee:7c:55:8d:66:07:7c:f5:f3:
         80:eb:50:c5:41:6b:d0:81:48:ff:04:9e:eb:8f:02:71:a2:4a:
         e6:94:39:4f:9a:bc:d0:f9:8c:9f:df:2f:e9:25:2a:31:1f:79:
         f6:b3:fe:81:34:02:95:ce:86:2b:8a:ef:eb:fc:7c:92:91:f7:
         47:d9:c1:ef:4b:9f:81:99:61:05:8a:e8:3a:f7:fd:79:43:97:
         3b:d0:67:21:de:17:3e:cd:fa:99:07:ac:86:fb:17:89:15:c1:
         96:e8:fd:82:3c:61:36:bf:3d:f5:86:05:8b:05:1e:32:6a:42:
         46:91:16:df:99:93:95:c7:23:f7:4b:5d:bd:91:8c:74:75:3d:
         e6:a2:31:5b:0c:f0:0d:51:38:2d:28:4d:17:6c:c0:1e:cb:ca:
         6e:31:a7:a6:9d:35:ee:11:ab:eb:dd:b9:13:ef:5c:ef:60:12:
         02:48:68:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:37:36 2025 by rpki-client