Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3738303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3738303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          8/Fpln9GWCc+BpfZzsOFQf4aQlGmeEBcp+9pxSX32d8=
Subject key identifier:   F5:8B:C9:EB:6D:BB:CC:72:41:8A:EA:CA:19:A5:AA:61:E3:98:42:50
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       3C6091BD0AEDF8938EB3035FFB66D866A67F6B8E
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3738303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:18 +0000
ROA not before:           Thu 03 Jul 2025 20:35:18 +0000
ROA not after:            Thu 02 Jul 2026 20:40:18 +0000
asID:                     266904
IP address blocks:        2803:f6a0:780::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:60:91:bd:0a:ed:f8:93:8e:b3:03:5f:fb:66:d8:66:a6:7f:6b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:18 2025 GMT
            Not After : Jul  2 20:40:18 2026 GMT
        Subject: CN=F58BC9EB6DBBCC72418AEACA19A5AA61E3984250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c4:3b:30:29:6c:ee:bb:78:40:0d:90:6a:36:
                    1d:62:d5:97:87:7b:e8:92:55:3f:61:0d:d2:aa:8a:
                    b7:a6:95:90:88:fe:62:8f:94:6b:59:4f:1d:64:53:
                    33:6c:28:aa:23:cf:5a:67:d5:3c:cc:67:07:a0:42:
                    32:a0:fd:cc:40:36:0b:15:bf:06:6d:dd:3d:95:55:
                    11:b7:76:fc:a3:08:72:90:7c:89:e3:4a:08:45:7a:
                    38:1f:98:9c:e5:85:32:93:86:eb:13:24:ce:65:4f:
                    29:ea:e9:f0:8d:38:32:b9:8f:dc:b6:ad:78:73:ea:
                    cd:53:9e:b0:b7:e7:68:4b:e0:95:cd:76:f9:78:34:
                    6e:72:5f:d6:76:ac:79:f4:b6:c0:04:78:1d:a8:3d:
                    75:c5:10:1a:d0:33:02:21:c5:7f:82:be:3e:a4:09:
                    b6:5c:40:fe:7e:c9:ad:dd:be:7b:fa:cb:aa:8d:58:
                    f7:5e:2d:29:7c:17:c5:b9:1f:5e:b6:da:61:04:08:
                    07:01:7f:00:24:0d:6b:a6:a3:78:7f:98:7e:43:7f:
                    c6:f4:6e:36:a1:08:de:22:6e:7a:da:96:8c:fb:77:
                    f5:33:b5:e0:25:ff:8c:1d:99:7a:61:d5:8a:b8:35:
                    dd:62:63:03:97:a0:84:d1:4d:e9:d3:72:b7:f4:0f:
                    b1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8B:C9:EB:6D:BB:CC:72:41:8A:EA:CA:19:A5:AA:61:E3:98:42:50
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3738303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:780::/42

    Signature Algorithm: sha256WithRSAEncryption
         54:0a:75:45:11:a7:b1:7c:3a:ad:02:8a:12:b6:f0:51:3a:98:
         85:df:e9:f7:4f:ea:3e:3c:f8:d7:e9:22:ac:03:7c:25:68:b4:
         f7:09:ef:5f:4d:6a:eb:fc:3e:14:2e:f3:6f:0c:f7:3f:8b:e5:
         99:d2:9d:64:57:1e:a6:44:96:15:14:42:43:0b:3f:08:fb:49:
         4b:eb:69:bd:21:44:6d:60:0f:db:8c:c1:9b:ea:5a:00:31:1a:
         f0:19:46:4d:ec:f6:ae:f0:5a:9e:45:34:ce:72:2d:5f:20:36:
         87:c0:b8:e1:1d:fd:84:9b:c6:b8:41:bd:f3:c5:7e:b6:d9:96:
         c0:c6:f3:5e:73:00:51:78:e0:0e:27:32:4f:6f:84:27:e4:4a:
         1e:7a:b0:b0:5b:76:ed:62:89:5b:55:98:58:66:28:dc:70:26:
         b0:5a:d9:b2:ec:e3:b2:ce:80:c6:77:a5:b7:bd:db:29:34:d2:
         81:f2:83:08:04:13:34:16:96:0c:f9:c5:aa:c0:bb:69:dc:6e:
         c6:5e:83:94:fe:63:d6:b2:99:23:6a:4d:2e:05:9a:7d:0d:24:
         68:02:4c:47:5f:66:fc:59:27:6b:92:e4:f1:1d:57:3b:97:5f:
         d5:a6:07:7e:2b:5f:7e:08:1c:e6:e6:59:42:5e:d7:99:69:65:
         b3:d8:af:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:47:22 2025 by rpki-client