Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3963303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3963303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          t+weLqVrtROYhfJ2G82b1P3VpvtWyAhb58uqotczAcE=
Subject key identifier:   1A:B9:DD:E0:49:EC:5E:C4:60:72:DE:07:42:1F:45:1B:7A:F2:26:BC
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       252E8BB0B29AF7E1F03A705B8021BED45D627D6D
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3963303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:02 +0000
ROA not before:           Thu 03 Jul 2025 20:35:02 +0000
ROA not after:            Thu 02 Jul 2026 20:40:02 +0000
asID:                     266904
IP address blocks:        2803:f6a0:9c0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2e:8b:b0:b2:9a:f7:e1:f0:3a:70:5b:80:21:be:d4:5d:62:7d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:02 2025 GMT
            Not After : Jul  2 20:40:02 2026 GMT
        Subject: CN=1AB9DDE049EC5EC46072DE07421F451B7AF226BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:c2:17:6f:f5:37:ad:74:7d:2d:92:58:c4:
                    3d:62:de:2e:69:d1:76:07:73:ca:93:22:b8:3f:93:
                    6b:45:9f:2e:65:d1:82:5d:60:f0:0c:57:d8:5e:39:
                    cb:f5:37:77:39:64:76:dd:17:e1:b5:42:d1:97:72:
                    3e:68:0e:13:a7:95:97:b3:bd:fc:b1:69:9b:bc:d1:
                    76:8a:7d:00:a7:41:64:af:eb:73:d5:13:16:a8:86:
                    2c:64:9e:20:4e:70:e6:a1:ed:c8:cb:34:cf:7b:57:
                    e6:7c:19:79:64:99:74:c4:36:5a:d3:86:f4:bf:98:
                    71:2d:9e:ae:1a:65:e4:a8:59:8a:4b:c5:67:e9:1c:
                    21:91:c8:29:79:a3:a7:91:9e:05:73:10:24:d9:a0:
                    de:2e:14:e2:bf:fd:fe:d0:7c:c6:11:55:e8:67:b0:
                    02:39:05:b3:80:ec:f8:2a:05:79:a5:31:4f:05:8c:
                    a6:d4:22:45:f2:6f:b2:3c:cf:52:4c:b7:3a:32:c1:
                    29:d1:c8:e4:58:a1:6e:bf:42:54:c7:e0:e5:5a:aa:
                    fe:24:c6:d4:42:50:86:1d:28:04:12:a5:8e:7c:9c:
                    b4:60:ed:10:b7:90:fd:4b:cc:bd:d8:99:be:0b:79:
                    63:b4:20:ff:9f:7c:d9:8b:30:06:c7:c2:3d:6a:b4:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B9:DD:E0:49:EC:5E:C4:60:72:DE:07:42:1F:45:1B:7A:F2:26:BC
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3963303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:9c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:7e:7b:69:23:ef:c5:15:4f:1f:e3:31:f7:5c:26:d4:25:
         85:d0:33:23:90:87:7a:6f:4b:02:c2:cd:1b:b7:8a:d8:6b:e3:
         3e:c5:75:1a:2a:7e:d5:5e:7a:3e:c1:bf:6f:1f:53:65:57:bb:
         69:05:d4:ee:7b:4a:57:cc:bd:e7:98:15:27:1a:80:55:0b:20:
         45:d2:74:ba:90:ee:2b:f1:13:48:c6:25:a8:d7:04:59:38:77:
         0b:53:cb:e0:9d:20:32:43:f6:89:bf:c7:c5:02:72:18:db:60:
         08:58:61:47:d0:dd:2c:03:9f:be:83:74:e0:bd:a6:a6:18:27:
         ed:b0:b4:76:8f:92:2b:ab:56:cc:2f:56:cc:14:48:dc:62:e6:
         9e:f6:bd:9a:21:95:14:de:8e:78:0a:e7:cb:00:0a:87:ba:33:
         81:06:b2:63:0c:75:d8:72:00:30:4e:c1:b8:d6:23:d2:fb:8b:
         4e:d6:75:1c:10:ea:62:97:db:cb:9e:c7:5a:d1:55:51:0e:c3:
         9a:00:6e:e3:76:88:a7:b1:00:2a:fe:f1:a9:be:f0:8a:35:da:
         2e:14:79:8c:7e:52:dc:fd:b4:43:6a:76:bb:a6:7e:33:c1:62:
         32:4c:97:c5:f4:7a:17:ab:08:cd:20:b5:f2:08:e0:67:16:4b:
         82:dd:72:de
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUJS6LsLKa9+HwOnBbgCG+1F1ifW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTA3MDMyMDM1MDJaFw0yNjA3MDIyMDQwMDJaMDMxMTAvBgNV
BAMTKDFBQjlEREUwNDlFQzVFQzQ2MDcyREUwNzQyMUY0NTFCN0FGMjI2QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwisIXb/U3rXR9LZJYxD1i3i5p
0XYHc8qTIrg/k2tFny5l0YJdYPAMV9heOcv1N3c5ZHbdF+G1QtGXcj5oDhOnlZez
vfyxaZu80XaKfQCnQWSv63PVExaohixkniBOcOah7cjLNM97V+Z8GXlkmXTENlrT
hvS/mHEtnq4aZeSoWYpLxWfpHCGRyCl5o6eRngVzECTZoN4uFOK//f7QfMYRVehn
sAI5BbOA7PgqBXmlMU8FjKbUIkXyb7I8z1JMtzoywSnRyORYoW6/QlTH4OVaqv4k
xtRCUIYdKAQSpY58nLRg7RC3kP1LzL3Ymb4LeWO0IP+ffNmLMAbHwj1qtPETAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUGrnd4EnsXsRgct4HQh9FG3ryJrwwHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzMyMzgzMDMzM2E2NjM2NjEzMDNhMzk2
MzMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNjM2MzkzMDM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAP2oAnAMA0GCSqGSIb3DQEBCwUAA4IBAQB8N357aSPvxRVPH+Mx91wm1CWF
0DMjkId6b0sCws0bt4rYa+M+xXUaKn7VXno+wb9vH1NlV7tpBdTue0pXzL3nmBUn
GoBVCyBF0nS6kO4r8RNIxiWo1wRZOHcLU8vgnSAyQ/aJv8fFAnIY22AIWGFH0N0s
A5++g3TgvaamGCftsLR2j5Irq1bML1bMFEjcYuae9r2aIZUU3o54CufLAAqHujOB
BrJjDHXYcgAwTsG41iPS+4tO1nUcEOpil9vLnsda0VVRDsOaAG7jdoinsQAq/vGp
vvCKNdouFHmMflLc/bRDana7pn4zwWIyTJfF9HoXqwjNILXyCOBnFkuC3XLe
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:38:59 2025 by rpki-client