Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6130303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6130303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          lXkXrdlzi0we+s/+1xQ3bu2Kf+1ZatflAutGBR4OeZA=
Subject key identifier:   0B:88:90:DE:AF:5A:4E:6E:61:69:61:0A:A3:F5:92:DA:B0:06:F8:D5
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       219D041DF2B3EB2FDC61D4962B683A0114920F7D
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6130303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:04 +0000
ROA not before:           Thu 03 Jul 2025 20:35:04 +0000
ROA not after:            Thu 02 Jul 2026 20:40:04 +0000
asID:                     266904
IP address blocks:        2803:f6a0:a00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9d:04:1d:f2:b3:eb:2f:dc:61:d4:96:2b:68:3a:01:14:92:0f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:04 2025 GMT
            Not After : Jul  2 20:40:04 2026 GMT
        Subject: CN=0B8890DEAF5A4E6E6169610AA3F592DAB006F8D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3f:1a:3e:0f:62:66:05:d0:1e:b7:cb:7d:ed:
                    a4:da:83:af:19:40:62:32:50:71:a8:f4:9d:c1:c0:
                    6a:37:2d:d7:eb:c0:e9:ba:32:2b:c2:2d:4c:65:10:
                    12:ac:68:7d:bc:85:8e:c3:51:13:ab:17:00:57:dc:
                    5f:6f:b5:cc:ab:30:13:10:b5:b3:37:c1:3e:da:86:
                    a6:26:09:6c:0a:2f:c4:16:a0:b2:82:30:96:d2:50:
                    ae:17:b1:27:9c:66:44:95:76:80:b9:98:a0:4b:af:
                    fa:5e:02:11:e6:fe:f8:4b:5a:4c:3e:d5:a2:a7:ea:
                    9e:78:50:be:3d:62:41:5c:b1:54:36:58:ed:85:75:
                    c4:ab:62:c0:b4:79:5c:75:4a:38:a0:1e:7b:d2:31:
                    b7:57:85:2e:b3:28:3f:d1:52:0f:7c:ea:ac:0a:64:
                    0d:54:e6:82:e3:08:57:00:a1:03:28:77:ab:8b:d5:
                    d7:8c:1f:17:52:ef:6b:6f:50:d8:6f:16:88:ed:ea:
                    aa:a7:4d:6b:79:81:ea:f3:d3:4c:4d:e1:cb:26:e0:
                    19:ea:b6:c4:51:41:12:1d:ac:5f:79:61:90:23:0f:
                    e2:fc:f5:d6:d0:26:e7:9d:56:a9:3e:06:89:1e:e4:
                    30:ff:6b:c2:e6:29:8d:f4:b5:ca:af:1d:34:c2:c6:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:88:90:DE:AF:5A:4E:6E:61:69:61:0A:A3:F5:92:DA:B0:06:F8:D5
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6130303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:a00::/42

    Signature Algorithm: sha256WithRSAEncryption
         50:b5:00:45:67:02:a2:74:cf:f3:a2:3c:d1:52:15:61:eb:f3:
         e8:49:98:38:98:fc:25:c2:5d:15:5f:8b:44:45:e5:a8:da:da:
         fd:d9:65:44:08:10:86:17:e2:fa:e2:34:d8:ca:d8:83:6e:fa:
         d6:a0:93:19:8a:a6:58:24:d9:31:24:e4:8b:70:3f:19:69:80:
         c6:06:c5:1c:72:6d:f7:9f:ef:45:a5:5f:b4:a7:e7:96:85:ff:
         9a:3e:f1:ec:1c:f4:b1:48:59:f7:6f:0d:66:77:3d:2a:35:f2:
         52:cd:54:97:c6:fa:ac:e7:20:c9:2a:b3:05:34:f8:2f:e8:e2:
         33:35:be:ed:1f:41:ad:55:80:62:48:5c:b5:39:0d:41:4e:3f:
         5a:f2:e7:a6:38:f6:de:ab:09:15:ef:6d:9e:23:1d:1c:d5:9e:
         99:fe:a2:28:b4:7f:e6:ce:db:11:61:61:53:02:e5:cd:39:27:
         65:fb:ea:57:d7:49:87:c5:ad:e2:32:8d:b3:b3:23:48:79:c3:
         6a:8a:e2:e9:9e:d9:41:8b:f9:47:68:46:f2:9e:6d:97:25:ac:
         74:65:1f:4d:2a:95:9d:88:d8:83:50:8e:02:29:e4:4e:95:df:
         32:43:b1:dd:92:06:db:65:5c:f2:20:6a:ec:87:af:f6:65:74:
         8e:0a:af:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:44:11 2025 by rpki-client