Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3638303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3638303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          q+8zokhQNBPIehTcWzv5QAsAZr0W3y1I+jpoovf+wk0=
Subject key identifier:   F4:DC:BC:93:18:C9:AD:2E:92:FF:F8:23:DB:E5:99:C6:48:7C:7F:CD
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       28FBF831872B7642FAE22986DEAA04743D95B810
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3638303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:25 +0000
ROA not before:           Thu 03 Jul 2025 20:35:25 +0000
ROA not after:            Thu 02 Jul 2026 20:40:25 +0000
asID:                     266904
IP address blocks:        2803:f6a0:680::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fb:f8:31:87:2b:76:42:fa:e2:29:86:de:aa:04:74:3d:95:b8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:25 2025 GMT
            Not After : Jul  2 20:40:25 2026 GMT
        Subject: CN=F4DCBC9318C9AD2E92FFF823DBE599C6487C7FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cc:6f:57:33:9b:ca:bc:b9:d7:cd:94:33:d9:
                    10:7f:83:a0:0e:67:7e:e6:45:33:5a:1a:05:63:26:
                    9b:ad:45:1a:ab:06:fa:48:1b:81:a4:0f:56:6f:ee:
                    97:57:ef:c6:85:e9:f3:90:15:a1:ef:d2:8c:8a:d9:
                    9d:e3:81:2b:f8:9f:95:aa:46:44:a8:0f:9e:8d:3c:
                    1a:11:b4:5e:16:63:ef:54:7d:0b:bf:d4:39:81:4f:
                    5b:18:90:06:cf:4f:04:be:20:59:de:c9:3e:f9:00:
                    52:66:8a:d4:f0:94:d3:3c:18:bd:f6:51:9e:dd:3f:
                    e0:74:4e:e7:9c:70:29:55:5f:e6:dd:b7:b0:30:38:
                    6d:a1:4c:e9:11:ea:71:b8:4f:dc:3e:20:e8:a1:4a:
                    7f:55:06:52:3a:05:0e:ff:ab:b8:ae:9d:39:d0:75:
                    f5:72:51:69:18:5c:e0:36:85:29:69:6e:49:ba:c4:
                    fc:eb:55:94:e4:cd:c4:34:79:75:40:0b:04:05:f5:
                    03:d0:03:74:7c:27:80:e1:01:53:36:c2:aa:ed:47:
                    28:e1:01:f0:d4:13:24:1e:8d:d5:52:8e:9d:94:ef:
                    cc:8c:91:45:9a:7a:7e:84:1a:91:eb:73:1d:0e:82:
                    3e:fd:20:ba:0d:e7:22:88:07:54:b1:8c:fb:05:c2:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DC:BC:93:18:C9:AD:2E:92:FF:F8:23:DB:E5:99:C6:48:7C:7F:CD
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3638303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:680::/42

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:1b:05:fa:73:0e:e8:ee:ff:41:95:03:e3:65:75:27:fb:
         39:35:81:f3:80:36:a6:03:5d:6b:71:68:45:e4:29:27:8a:1a:
         a8:28:dd:65:0b:ec:c6:c6:9c:d9:8d:79:2f:3d:5b:06:51:b5:
         18:42:32:c5:9c:ad:92:07:b2:3f:e9:35:02:4f:30:90:69:88:
         40:46:78:9e:54:02:11:56:73:7b:27:8f:d8:73:4e:ab:0b:82:
         a1:ab:bf:5a:b9:54:ea:18:cf:47:42:93:0c:a3:ac:81:b5:57:
         f6:48:99:7a:2e:fa:1a:8d:3d:53:cf:d5:b7:51:81:a1:a2:ad:
         da:9c:62:30:7f:08:e3:d8:60:18:2f:a9:5f:82:d9:99:82:05:
         34:81:b5:86:7a:75:f7:32:a0:55:60:fa:30:8a:a2:8f:f1:3b:
         38:7e:26:d1:6b:ac:b9:45:82:d2:f3:02:31:73:95:23:d2:e6:
         ee:5f:16:4e:6f:40:e6:68:86:cb:eb:ff:53:61:08:9c:a2:a7:
         42:b9:e3:e0:f6:8f:ff:52:54:94:3a:b3:92:e8:21:8f:34:fa:
         99:3f:d4:ef:e7:4b:24:7d:5d:33:01:a6:53:cd:7a:b0:27:e0:
         f5:90:89:6e:22:52:1b:eb:c3:62:d9:1f:f5:6d:0a:7b:7c:06:
         b7:f9:f6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:48:15 2025 by rpki-client