Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3663303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3663303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          Mm+RsU5Cz0V4BQELajexz+k/YeT8SoDlNKyfPZM1MuI=
Subject key identifier:   DE:1C:79:CF:50:85:E8:5D:CC:3F:53:94:54:59:9F:2F:E0:D6:A9:FD
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       4259204E8787DD3E288DB8C6142CAAF15F215C62
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3663303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:05 +0000
ROA not before:           Thu 03 Jul 2025 20:35:05 +0000
ROA not after:            Thu 02 Jul 2026 20:40:05 +0000
asID:                     266904
IP address blocks:        2803:f6a0:6c0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:59:20:4e:87:87:dd:3e:28:8d:b8:c6:14:2c:aa:f1:5f:21:5c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:05 2025 GMT
            Not After : Jul  2 20:40:05 2026 GMT
        Subject: CN=DE1C79CF5085E85DCC3F539454599F2FE0D6A9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:61:d6:5f:0f:5f:f0:f3:19:1d:38:1a:44:84:
                    fa:d5:0b:d7:7c:32:c7:50:4d:b0:fd:5b:9b:47:09:
                    50:36:4e:48:8e:27:09:40:5c:ff:2f:8c:37:67:ed:
                    99:35:cf:49:14:c1:dc:2a:eb:aa:2f:00:d9:b7:6f:
                    e4:9d:9e:06:e7:06:95:8b:53:bb:ff:cf:81:1b:52:
                    64:fd:44:65:66:f7:11:f1:aa:77:e2:66:f9:9f:0c:
                    1e:97:60:3a:cf:15:7a:45:19:b9:57:c3:5d:c7:c9:
                    c9:cf:2b:5c:ab:a7:3a:a2:ce:f0:40:39:c2:2a:11:
                    c6:25:93:43:ef:a2:d0:07:f7:5e:9b:88:f4:f6:e3:
                    56:9d:95:3c:67:ce:0e:d6:c4:65:2d:55:ec:cd:ca:
                    79:12:56:19:13:af:61:17:77:b1:2e:08:4a:c0:7b:
                    de:ca:5f:4e:95:a2:80:66:a4:d6:71:38:b3:86:9d:
                    17:8d:f8:6f:43:5e:c7:08:89:26:4c:86:05:6d:2f:
                    9a:4b:14:29:54:c9:74:e0:c1:f3:c4:92:96:bd:b4:
                    ae:d9:33:9d:be:2f:95:4b:5f:b0:02:cf:7b:23:db:
                    88:7e:0e:01:2e:41:52:b2:e9:51:41:7a:46:b3:df:
                    09:64:02:d4:ea:8b:23:b1:60:ae:f5:ca:a2:56:00:
                    ae:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1C:79:CF:50:85:E8:5D:CC:3F:53:94:54:59:9F:2F:E0:D6:A9:FD
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3663303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:6c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         7e:2f:5c:2e:b4:11:b2:5b:e9:d4:bd:9e:4e:e1:13:88:0e:04:
         4e:d0:36:4d:18:fb:96:d7:7b:44:b7:41:c0:40:d1:17:73:7f:
         e8:66:ec:ad:df:d7:13:67:ca:50:d8:71:dc:e7:dd:13:5b:50:
         c1:25:55:13:49:52:f8:23:ac:29:e3:ea:b7:5d:cf:a0:72:11:
         93:ab:16:58:a5:c1:35:00:02:3a:58:26:0e:42:69:98:77:3b:
         34:c5:b0:e7:03:5a:b0:fd:45:f5:19:1d:59:a6:2c:e6:e8:f4:
         25:4b:34:0d:0d:f2:78:f1:a2:29:e1:66:04:00:c8:99:ff:a9:
         2b:de:10:8b:f6:61:71:16:81:fb:b9:29:55:e7:d1:ed:28:bc:
         72:8b:8f:bb:17:2a:8b:26:c3:9b:8e:8e:79:fa:88:a8:78:95:
         7e:8c:be:00:a9:65:82:77:3e:1e:c1:66:12:32:5e:12:81:0b:
         12:ee:49:f3:df:c8:e7:22:11:8f:23:64:3e:49:06:e5:7f:32:
         a3:1b:6f:79:be:5f:5f:8f:61:d9:e1:21:62:fb:e8:75:e3:c2:
         92:51:8d:77:59:3f:b3:83:f2:6d:fc:94:00:c2:1d:a8:e8:fe:
         aa:41:f4:1f:56:78:b7:d6:3b:c2:88:f1:3a:62:d8:52:cb:ef:
         04:e9:4f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:40:37 2025 by rpki-client