Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3834303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3834303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          W8zkzyAG6uEY25yFhtTcFWpv9tHjUaK63CyjaIB/P1o=
Subject key identifier:   6B:1D:00:19:96:7A:4E:99:F7:57:29:96:F1:8A:26:F8:68:72:30:F9
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       16F7ED57D2D144EBAB8F136DE86B27BEE0E38E32
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3834303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:12 +0000
ROA not before:           Thu 03 Jul 2025 20:35:12 +0000
ROA not after:            Thu 02 Jul 2026 20:40:12 +0000
asID:                     266904
IP address blocks:        2803:f6a0:840::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f7:ed:57:d2:d1:44:eb:ab:8f:13:6d:e8:6b:27:be:e0:e3:8e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:12 2025 GMT
            Not After : Jul  2 20:40:12 2026 GMT
        Subject: CN=6B1D0019967A4E99F7572996F18A26F8687230F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4f:78:6f:79:f9:9b:56:1c:a9:13:da:ec:75:
                    a3:8c:f4:99:7c:aa:1c:76:a9:0f:8c:2c:7f:ba:95:
                    12:1f:9b:fc:cc:47:a3:0b:bd:9b:c3:f3:36:3c:39:
                    b0:eb:91:aa:53:3e:a5:94:d4:85:2d:04:00:48:d6:
                    ca:21:a4:90:87:93:14:06:14:d2:cf:b7:7f:74:62:
                    e3:b8:9c:b6:a5:db:a8:0d:08:ea:9b:55:2a:32:c6:
                    7d:64:20:66:76:d3:3a:d6:80:37:86:7f:df:d2:ff:
                    23:c8:fc:61:bf:52:64:e8:34:7a:7c:4e:79:21:5c:
                    50:43:66:57:35:5b:d0:f0:87:30:14:ce:e3:bb:64:
                    4e:99:ca:a7:c6:b5:b2:2a:9a:22:58:10:57:11:bb:
                    ed:23:28:6e:74:3d:11:f7:94:75:e6:78:b4:fa:09:
                    0b:20:95:08:74:ae:37:bd:76:a6:ad:f2:a0:96:53:
                    3c:76:6c:1b:3f:c4:36:b9:4c:29:d8:64:b5:33:18:
                    52:f0:29:7f:2a:94:25:bf:c1:df:84:d3:c3:80:75:
                    bb:8b:8a:53:91:8e:15:ee:60:bb:26:ca:71:6d:ed:
                    0d:58:1b:9e:c0:f9:c0:fc:25:24:de:d0:83:99:62:
                    c2:3c:a8:a0:f8:4d:c6:09:da:42:35:23:7c:51:da:
                    ad:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1D:00:19:96:7A:4E:99:F7:57:29:96:F1:8A:26:F8:68:72:30:F9
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3834303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:840::/42

    Signature Algorithm: sha256WithRSAEncryption
         4e:15:2d:83:30:9a:88:fb:42:e9:4d:a0:68:f1:7a:ab:b8:7f:
         20:5f:77:07:dd:51:1a:78:dd:cb:d6:53:cc:82:11:23:5c:94:
         31:02:a4:95:65:40:a2:99:1a:be:fc:39:ec:33:19:1a:aa:7b:
         d3:b8:2d:e3:e2:37:fd:0d:5e:32:bb:8e:7e:42:78:3a:af:f7:
         76:c7:60:d4:4a:d5:80:b5:bd:8a:34:27:e1:2b:ca:8d:14:59:
         5a:b0:10:5f:ed:e7:2f:7a:2d:e0:84:63:69:cd:02:12:92:04:
         ed:49:af:01:a7:8d:f3:28:80:04:3c:f7:54:81:74:45:b0:5c:
         a3:dc:89:87:ac:ff:6b:53:27:d9:a2:b7:70:65:a0:f1:7a:75:
         4b:49:67:93:4f:36:37:6b:83:51:35:74:2a:65:bf:04:87:29:
         95:89:1e:33:2f:b9:31:04:f9:0b:a0:ee:95:b4:19:25:89:2e:
         8e:b1:50:10:0c:18:bc:1d:79:64:5e:29:05:93:2b:03:f2:74:
         00:16:67:bd:f9:21:db:19:dd:a0:7c:e9:e1:a4:02:c8:2a:a9:
         da:b7:fe:33:08:66:02:f9:13:46:cd:6f:1d:6d:60:46:da:f1:
         5d:c2:93:40:12:22:18:78:3a:8a:02:2a:d0:98:26:7e:03:a1:
         c1:f2:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:38:56 2025 by rpki-client