Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3938303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3938303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          /a7bKcqK8njmV15m0hKyCDUqFMZBTqcULLT7/K0VDA0=
Subject key identifier:   EF:2E:4A:8E:A3:5C:72:01:FF:C8:9E:AB:F5:88:8A:54:49:8F:DD:9F
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       FCE571259F009B31C7C75630FC923C36A7D49F
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3938303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:09 +0000
ROA not before:           Thu 03 Jul 2025 20:35:09 +0000
ROA not after:            Thu 02 Jul 2026 20:40:09 +0000
asID:                     266904
IP address blocks:        2803:f6a0:980::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fc:e5:71:25:9f:00:9b:31:c7:c7:56:30:fc:92:3c:36:a7:d4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:09 2025 GMT
            Not After : Jul  2 20:40:09 2026 GMT
        Subject: CN=EF2E4A8EA35C7201FFC89EABF5888A54498FDD9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:08:b1:50:a9:e7:9c:b0:8a:e3:88:1f:a1:
                    7f:cd:27:7a:be:9c:91:3e:07:25:6a:c2:32:ed:8f:
                    ed:c6:cd:12:5a:77:5a:f4:de:c1:07:b7:72:d5:4d:
                    af:5e:5d:dc:7f:d3:6d:ae:33:0e:82:d7:aa:ba:96:
                    ea:5c:48:54:d6:11:8b:12:4c:0c:13:87:12:83:a2:
                    3f:f8:8d:af:cf:04:e5:81:ac:47:17:71:00:58:a4:
                    0d:56:ad:4d:34:48:d5:1a:f7:39:c3:6b:b6:14:b8:
                    37:9e:a5:d9:13:a0:4f:1a:20:81:ea:82:24:b8:8c:
                    2f:33:34:e1:01:cd:98:84:02:f8:88:a7:bd:88:4f:
                    59:52:b5:66:ff:22:56:ad:82:70:55:42:bc:7e:8d:
                    27:71:d0:f5:19:62:af:57:b5:17:d3:b4:dc:53:47:
                    fa:31:5c:79:0f:24:6f:5f:a7:34:da:22:59:0d:2a:
                    4b:08:b4:a8:04:92:e0:3a:b6:b5:28:e6:be:c9:93:
                    ea:6c:9b:17:05:ec:71:31:d7:d1:98:24:a3:6e:e5:
                    be:d6:8d:f8:35:33:62:0e:a9:0d:3f:c9:6a:db:d4:
                    0a:94:72:a2:c7:c2:6f:02:aa:13:7a:2a:9b:ce:49:
                    63:30:ef:73:d9:91:9f:b1:19:24:69:77:d5:39:4f:
                    05:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2E:4A:8E:A3:5C:72:01:FF:C8:9E:AB:F5:88:8A:54:49:8F:DD:9F
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3938303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:980::/42

    Signature Algorithm: sha256WithRSAEncryption
         4b:71:da:81:23:e3:39:f5:8a:3c:56:f1:b1:7d:76:c2:bb:04:
         cb:4a:18:c2:03:75:59:21:5e:cc:24:70:15:1e:a2:a5:86:ff:
         96:17:2e:a6:cb:16:b9:9f:00:73:88:b6:d4:77:89:2a:2a:bf:
         5d:11:99:53:1d:15:2a:fa:bc:c4:f8:99:91:19:9d:b3:01:df:
         57:49:8a:83:a5:a2:07:b2:d2:97:59:a5:37:03:30:ee:2d:10:
         95:72:85:04:b4:b6:22:67:46:36:cc:3a:ac:e4:90:81:8a:5b:
         32:5f:24:97:aa:42:77:11:7d:f3:0f:f7:6e:da:73:c4:0d:74:
         f3:d6:af:ae:a5:f3:52:a7:ee:28:1a:6d:25:03:08:15:e6:b7:
         13:8e:a0:ed:63:a4:4e:89:d1:bf:c6:4a:57:ec:42:3f:71:bd:
         a9:a5:4f:cc:06:5c:6f:d4:9c:fa:6e:9f:10:6d:04:1d:71:9a:
         b2:8b:77:ba:ba:4a:c9:0f:d0:5b:b3:12:5a:20:f3:b9:2c:fb:
         86:15:66:df:36:d6:21:e6:da:96:ae:f0:c0:dc:2b:ee:36:4a:
         cb:57:f0:2b:c8:c2:b3:f9:39:1a:e4:ab:29:e3:a2:c4:b1:23:
         d4:23:36:2b:61:6b:c4:d1:48:1f:3e:ca:c6:55:4b:59:df:03:
         eb:ad:af:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:45:16 2025 by rpki-client