Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3538303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3538303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          hxAY9XAkSV3zgmbpYtEMh7ZWj+nYkwHVl9LzHyS5YcI=
Subject key identifier:   D5:46:45:25:84:47:42:E6:02:6B:24:D7:6A:22:95:AE:22:5E:F5:B8
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       6F138F74242D209DC001E03D92B3E0847399D655
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3538303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:26 +0000
ROA not before:           Thu 03 Jul 2025 20:35:26 +0000
ROA not after:            Thu 02 Jul 2026 20:40:26 +0000
asID:                     266904
IP address blocks:        2803:f6a0:580::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:13:8f:74:24:2d:20:9d:c0:01:e0:3d:92:b3:e0:84:73:99:d6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:26 2025 GMT
            Not After : Jul  2 20:40:26 2026 GMT
        Subject: CN=D5464525844742E6026B24D76A2295AE225EF5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:b0:35:87:b7:97:f4:c4:54:0e:be:80:48:9b:
                    2b:1b:6c:76:28:75:af:85:83:14:21:d2:2f:be:b7:
                    a5:2e:01:5c:70:ec:cd:93:8c:d8:a6:5a:72:ba:d1:
                    74:77:26:bf:c0:92:9c:32:b0:ee:ba:64:92:e8:d6:
                    2e:cc:d4:11:d1:12:14:0a:b9:3a:52:87:69:5f:cf:
                    56:80:13:fa:09:0f:08:8f:36:d2:35:ce:d2:26:47:
                    81:cf:34:ea:ba:78:44:28:99:b5:3b:27:9a:19:b6:
                    32:d0:bc:1d:df:f3:fe:e5:15:ea:c8:f7:4b:79:bd:
                    f8:1e:30:69:f7:8d:be:60:e0:db:6d:d8:a1:39:b1:
                    49:75:fa:64:c4:6c:ab:6f:68:2d:01:ea:5e:3c:7f:
                    77:7e:ad:c6:e4:0d:db:62:32:67:ff:3f:78:25:28:
                    a4:fd:52:ed:cc:bc:ba:88:6d:bd:d4:25:fd:74:65:
                    f5:57:db:6b:f3:e1:1c:3c:ba:fd:b6:92:21:8d:f2:
                    4c:39:8c:dc:f4:04:18:9f:8b:33:b9:33:f4:8d:ce:
                    da:9b:ac:92:dd:80:2e:a9:f7:2e:33:a3:ba:fa:ea:
                    ed:bd:dc:29:b2:e1:00:97:b9:01:ff:91:44:fb:fb:
                    2d:e7:a0:53:d7:3a:20:83:fa:6c:df:b3:2f:44:f9:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:46:45:25:84:47:42:E6:02:6B:24:D7:6A:22:95:AE:22:5E:F5:B8
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3538303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:580::/42

    Signature Algorithm: sha256WithRSAEncryption
         71:c4:bc:e1:43:97:d9:5c:64:3d:66:c2:0f:6a:a1:cc:02:46:
         0c:70:96:f4:3f:f8:40:19:63:3a:9d:2c:cf:79:53:10:9b:68:
         d7:49:5c:83:13:67:29:cf:9a:20:0f:62:45:eb:55:02:34:8d:
         b0:1b:78:8d:4d:11:c5:ff:8a:ba:b0:24:39:1d:e3:ec:8f:de:
         79:d0:bd:a5:bc:79:84:74:b1:03:cc:b2:d1:47:de:e8:68:a9:
         69:7b:63:59:67:20:8e:af:a7:1f:37:1f:e4:3a:03:18:ff:c1:
         77:e4:8d:5d:01:cf:5d:5b:59:00:e7:f9:01:82:4b:99:99:58:
         47:a6:52:26:01:40:e7:5c:1b:d5:b8:b7:28:26:be:b6:d0:1b:
         60:e5:09:2a:9e:39:93:95:54:27:80:c5:48:52:38:4e:74:93:
         9c:87:71:87:50:13:81:8d:27:e6:5c:14:b9:a0:e0:e8:42:f4:
         1a:4c:dd:a1:11:8d:dd:1b:4c:f1:38:30:c9:60:dc:28:02:50:
         8a:a8:61:b6:7d:fc:e7:2b:48:b8:02:dc:53:8f:a6:cb:ba:91:
         43:e5:99:9e:29:b1:c6:69:ed:2f:eb:ca:2a:c9:65:5c:ff:f7:
         11:6d:e8:b7:31:44:26:b6:f3:79:c5:0b:c5:4b:a3:50:d5:ea:
         f4:db:4b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:49:04 2025 by rpki-client