Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3338303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3338303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          oZ87DaHxKya/aBvgBf7WJ9XtQEBk+b0Dxu6WmX64dx8=
Subject key identifier:   69:F6:D6:72:86:81:AE:68:FF:EB:07:E4:1E:7B:16:B3:81:37:0F:6D
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       3AE38F1F703A13FCC09BC83D27E3CCD080B2273A
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3338303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:11 +0000
ROA not before:           Thu 03 Jul 2025 20:35:11 +0000
ROA not after:            Thu 02 Jul 2026 20:40:11 +0000
asID:                     266904
IP address blocks:        2803:f6a0:380::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e3:8f:1f:70:3a:13:fc:c0:9b:c8:3d:27:e3:cc:d0:80:b2:27:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:11 2025 GMT
            Not After : Jul  2 20:40:11 2026 GMT
        Subject: CN=69F6D6728681AE68FFEB07E41E7B16B381370F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:90:ed:97:a7:a8:98:11:01:d0:42:a2:c8:
                    84:48:d2:7f:f3:cd:4a:db:19:72:b4:bc:71:91:65:
                    da:3d:ff:f3:f5:52:62:15:7b:25:e7:aa:46:4e:96:
                    d2:a7:3b:1e:aa:3e:f5:7b:07:a2:ee:a3:72:70:ab:
                    a5:e9:d2:ca:c3:9c:13:99:11:dd:80:de:fd:91:bf:
                    36:f9:fb:49:26:30:3d:9e:62:a5:02:b3:7c:f2:92:
                    36:a5:bc:bc:bd:7d:19:f6:1c:6d:c8:63:9b:71:38:
                    bf:2e:b8:38:4a:2b:60:37:d5:1f:37:25:60:13:ba:
                    fe:cf:72:dd:8f:e4:a0:8a:87:22:09:a6:fc:71:a2:
                    63:b5:a1:f9:b4:97:63:1d:a4:3a:55:63:5c:e2:46:
                    6a:47:28:0e:90:54:4e:a6:8d:87:e4:61:d2:77:53:
                    fd:4e:a0:c5:52:cd:92:c2:97:99:1e:33:6c:67:03:
                    a4:ff:39:f8:82:11:47:02:50:59:e6:a5:72:c3:50:
                    4b:53:43:ae:48:c5:98:46:d3:50:97:88:a5:51:22:
                    b8:38:e8:50:ba:78:cf:56:75:c3:4e:4f:70:15:b0:
                    bd:64:39:ec:c7:b7:20:db:5b:80:40:5b:39:ea:63:
                    f7:04:25:35:70:0d:8f:42:e9:87:07:72:70:86:b6:
                    ce:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F6:D6:72:86:81:AE:68:FF:EB:07:E4:1E:7B:16:B3:81:37:0F:6D
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3338303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:380::/42

    Signature Algorithm: sha256WithRSAEncryption
         62:04:92:6f:7c:13:4f:26:02:fd:bb:b8:5f:b2:b1:87:8e:08:
         f0:00:10:63:d5:b4:38:09:5b:c6:cc:25:7f:04:2b:22:fc:5c:
         b4:1d:1d:f6:55:da:48:61:5b:56:c1:a9:e6:86:6c:fc:55:fa:
         72:d1:02:33:62:36:26:76:96:41:c9:ed:af:ec:b9:fb:47:bd:
         02:db:4d:ea:b4:2c:09:5c:08:0d:7b:dc:d9:5f:53:a4:f5:29:
         94:33:8f:80:22:6c:d7:a5:4a:24:10:73:49:cf:36:53:e7:53:
         60:12:a9:68:da:6e:b8:75:2e:56:b3:13:eb:5f:4f:6b:c4:e9:
         f3:a6:3d:33:82:2d:8f:6a:93:24:70:05:ea:e3:93:96:50:8b:
         1b:12:f7:b7:86:9d:99:80:4b:e1:08:f4:42:e1:fc:42:a8:1a:
         d3:83:0a:1a:2b:63:02:f9:98:22:01:38:53:3e:5d:52:f6:e0:
         71:d7:6b:14:fa:06:72:3a:34:84:4b:7d:39:80:5a:37:38:e0:
         21:02:8b:39:4d:ac:b5:38:57:9a:e7:7c:06:03:d8:bc:5d:d9:
         ca:01:89:bc:ff:ba:84:fc:ea:7d:24:54:ea:97:4c:36:c3:5d:
         5a:73:4c:d3:be:4e:16:a7:d5:88:8b:b3:fa:91:de:67:94:4d:
         4a:e1:d3:05
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUOuOPH3A6E/zAm8g9J+PM0ICyJzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTA3MDMyMDM1MTFaFw0yNjA3MDIyMDQwMTFaMDMxMTAvBgNV
BAMTKDY5RjZENjcyODY4MUFFNjhGRkVCMDdFNDFFN0IxNkIzODEzNzBGNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk05Dtl6eomBEB0EKiyIRI0n/z
zUrbGXK0vHGRZdo9//P1UmIVeyXnqkZOltKnOx6qPvV7B6Luo3Jwq6Xp0srDnBOZ
Ed2A3v2Rvzb5+0kmMD2eYqUCs3zykjalvLy9fRn2HG3IY5txOL8uuDhKK2A31R83
JWATuv7Pct2P5KCKhyIJpvxxomO1ofm0l2MdpDpVY1ziRmpHKA6QVE6mjYfkYdJ3
U/1OoMVSzZLCl5keM2xnA6T/OfiCEUcCUFnmpXLDUEtTQ65IxZhG01CXiKVRIrg4
6FC6eM9WdcNOT3AVsL1kOezHtyDbW4BAWznqY/cEJTVwDY9C6YcHcnCGts4vAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUafbWcoaBrmj/6wfkHnsWs4E3D20wHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzMyMzgzMDMzM2E2NjM2NjEzMDNhMzMz
ODMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNjM2MzkzMDM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAP2oAOAMA0GCSqGSIb3DQEBCwUAA4IBAQBiBJJvfBNPJgL9u7hfsrGHjgjw
ABBj1bQ4CVvGzCV/BCsi/Fy0HR32VdpIYVtWwanmhmz8Vfpy0QIzYjYmdpZBye2v
7Ln7R70C203qtCwJXAgNe9zZX1Ok9SmUM4+AImzXpUokEHNJzzZT51NgEqlo2m64
dS5WsxPrX09rxOnzpj0zgi2PapMkcAXq45OWUIsbEve3hp2ZgEvhCPRC4fxCqBrT
gwoaK2MC+ZgiAThTPl1S9uBx12sU+gZyOjSES305gFo3OOAhAos5Tay1OFea53wG
A9i8XdnKAYm8/7qE/Op9JFTql0w2w11ac0zTvk4Wp9WIi7P6kd5nlE1K4dMF
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:37:24 2025 by rpki-client