Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3530303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3530303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          x7CBsOtt1+bS7Tk/xPoVCp3wI8pG2icxq0rJh6frDzU=
Subject key identifier:   14:DF:70:2A:95:39:37:09:98:63:95:93:A0:B6:BF:3C:33:E1:FE:CF
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       2607B372FCF9EADE2AD3E6F8CA914305C841C167
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3530303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:04 +0000
ROA not before:           Thu 03 Jul 2025 20:35:04 +0000
ROA not after:            Thu 02 Jul 2026 20:40:04 +0000
asID:                     266904
IP address blocks:        2803:f6a0:500::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:07:b3:72:fc:f9:ea:de:2a:d3:e6:f8:ca:91:43:05:c8:41:c1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:04 2025 GMT
            Not After : Jul  2 20:40:04 2026 GMT
        Subject: CN=14DF702A9539370998639593A0B6BF3C33E1FECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cf:5a:6d:41:c1:31:3f:e4:46:9c:21:d5:03:
                    9f:64:59:7f:81:ed:fa:08:5e:56:77:f3:53:70:77:
                    25:df:b3:66:59:98:1d:90:86:ce:63:de:75:2a:01:
                    1f:84:b6:77:1b:9a:79:4c:86:80:7a:1a:5e:44:c5:
                    ad:7f:f4:2e:7d:be:49:bc:b7:5e:05:8e:df:f6:e1:
                    0b:c6:16:58:94:04:7d:ef:fe:0c:62:4e:a2:c4:30:
                    6e:c5:e6:b2:5b:e4:97:a5:d6:a9:c5:d3:33:af:82:
                    45:ec:c6:7c:fd:ba:eb:4e:e1:19:4b:33:e5:bc:9b:
                    f5:d1:4c:12:ea:29:c1:5f:30:45:ae:47:04:eb:bf:
                    5f:5f:1e:06:38:cf:b4:45:42:93:88:54:5a:f0:09:
                    17:0c:a4:86:37:a0:94:be:0e:3e:71:62:f9:ff:8b:
                    53:1c:3b:e4:56:93:81:51:49:f0:66:04:c2:8a:c0:
                    87:0e:a1:71:c9:77:81:d8:a1:07:62:86:27:a7:01:
                    e9:96:e4:ee:09:11:d4:93:bb:6e:9d:bf:fa:58:8d:
                    d9:86:48:db:6e:75:3d:1d:fd:55:7d:58:f5:88:e3:
                    ff:50:92:4b:f3:7d:05:50:cb:92:36:a5:8d:6d:f4:
                    0b:de:a4:d9:4d:69:e3:42:47:88:77:cf:f8:48:80:
                    0c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DF:70:2A:95:39:37:09:98:63:95:93:A0:B6:BF:3C:33:E1:FE:CF
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3530303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:500::/42

    Signature Algorithm: sha256WithRSAEncryption
         4a:6e:5c:52:6d:f6:73:32:0e:e9:a5:24:eb:60:a7:e6:c6:b8:
         05:f4:38:ef:61:8c:15:f1:85:a3:6b:ca:b7:0a:04:f2:75:b6:
         71:9a:ab:18:3d:db:7e:3a:0c:ee:70:d5:81:8a:8e:54:d2:85:
         b2:f5:84:6f:f3:78:32:ea:a9:ec:f1:6b:f2:fc:36:2c:1e:37:
         41:b1:3b:24:1e:fc:58:e0:31:4f:35:1b:6a:52:6b:43:bd:55:
         b5:b0:18:2d:e2:91:4d:69:7c:73:ac:7c:e9:06:0a:d6:64:e9:
         88:18:ff:e7:95:3f:9a:97:a7:9b:02:37:c1:cc:8f:ef:57:12:
         d6:d9:51:5f:cb:7e:87:a2:33:fe:83:9d:bc:60:36:30:8e:89:
         6f:7d:f2:6e:2a:63:9a:fd:f0:09:b9:1a:86:d9:68:be:fb:25:
         ab:81:55:9a:c1:dd:6d:08:89:7d:ba:6d:40:84:c4:b8:83:bf:
         9f:b8:92:e7:95:32:ba:7d:82:0c:88:75:46:10:60:fc:dd:2a:
         af:99:46:ce:5e:83:22:de:2d:e4:db:8d:e3:50:8e:58:64:a3:
         25:49:13:bc:4b:bd:93:38:ec:18:13:fa:44:72:56:13:ec:6c:
         10:be:19:67:18:cb:ca:60:ca:a0:7b:0c:a5:4f:13:8a:c8:30:
         1f:b9:2e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:44:13 2025 by rpki-client