Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6134303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6134303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          ZX0b9yAy+Ru56Qocjj6v8EmILE2OyyCAF3CX46stl/4=
Subject key identifier:   74:BF:43:48:BE:A5:5E:EF:AB:50:7B:F4:53:21:BA:FA:AB:67:A9:14
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       67A29C2F675E4CDA8779C117FBE3303EF849F91E
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6134303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:14 +0000
ROA not before:           Thu 03 Jul 2025 20:35:14 +0000
ROA not after:            Thu 02 Jul 2026 20:40:14 +0000
asID:                     266904
IP address blocks:        2803:f6a0:a40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a2:9c:2f:67:5e:4c:da:87:79:c1:17:fb:e3:30:3e:f8:49:f9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:14 2025 GMT
            Not After : Jul  2 20:40:14 2026 GMT
        Subject: CN=74BF4348BEA55EEFAB507BF45321BAFAAB67A914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:e8:d7:d1:6a:45:0a:37:3a:8f:5a:fb:1f:
                    b0:d2:1a:4a:51:7c:96:98:d5:7e:df:1f:c3:e9:b1:
                    89:46:f8:af:2c:80:3f:34:8a:dc:6c:3d:9c:2d:c9:
                    98:b6:98:79:65:5a:62:e0:41:d6:f4:a5:0f:f1:e1:
                    e5:5e:2a:fd:68:35:91:e8:b4:6d:16:4d:a0:a0:f0:
                    48:2b:cc:02:ad:e3:8e:c8:bf:d0:e2:b8:53:4e:d4:
                    d1:bb:35:56:18:1b:8c:be:0c:7d:1d:74:4e:4d:79:
                    ae:be:2e:00:d2:7f:82:67:86:88:96:82:b3:ac:b2:
                    75:fe:5c:52:da:4d:79:be:81:de:38:b3:84:8c:a6:
                    e8:46:1d:f3:88:23:94:60:3a:a9:82:fd:8f:75:3e:
                    65:b8:d0:ce:4b:13:9c:5f:70:43:87:7f:53:09:40:
                    2f:29:6a:84:18:90:8d:b4:5b:66:67:27:6f:78:9d:
                    4e:bd:2e:50:58:d5:c1:17:fa:1f:63:d5:4c:03:f5:
                    42:23:6c:55:9b:ec:47:ec:34:ca:60:a9:be:18:d1:
                    a6:c3:50:4e:f5:58:cc:d1:e8:d2:62:4d:0b:c6:08:
                    21:12:40:e3:d1:42:2c:a2:5b:bc:31:6f:90:86:2d:
                    46:dd:b4:e4:f7:35:33:49:f9:19:75:7b:ea:cd:45:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BF:43:48:BE:A5:5E:EF:AB:50:7B:F4:53:21:BA:FA:AB:67:A9:14
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6134303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:a40::/42

    Signature Algorithm: sha256WithRSAEncryption
         9b:49:d6:ff:07:f3:ba:f8:49:df:17:c7:7e:9d:2b:2d:b5:3f:
         1c:23:61:cb:b6:98:45:13:06:bd:47:80:25:0a:31:f0:04:78:
         90:bf:67:86:31:58:ac:16:a0:b4:c6:cd:bd:f2:e3:57:18:d0:
         89:ed:56:3b:0d:2e:53:5b:cf:89:55:c9:95:af:56:34:6a:2b:
         6f:ea:54:43:7b:85:e7:26:fd:8f:cb:b8:fa:ba:59:52:78:02:
         fb:1f:41:cd:35:34:ca:8e:37:f8:e0:7a:44:f3:69:8b:b0:bc:
         c2:87:80:f7:c5:2f:21:9d:62:75:3f:68:e0:c7:f1:eb:81:76:
         d5:b7:68:64:8f:ad:d3:fc:12:e9:cd:84:e9:1b:1d:bd:c5:92:
         45:cb:07:29:a9:79:b8:78:09:e1:12:26:72:d8:e0:5c:56:a0:
         8c:2d:e8:b6:c1:f6:af:a2:e9:d2:ab:ac:bb:7c:dc:df:39:73:
         9f:c5:06:4e:6b:ed:eb:0e:bf:05:87:1a:24:77:48:30:19:eb:
         8c:81:c5:4a:ef:c4:3a:a9:86:f9:fd:7c:3c:9f:27:c2:a2:09:
         61:bf:a2:a1:8e:c8:7f:f8:8f:aa:7d:76:32:98:e7:c5:4d:e0:
         ea:b4:4c:35:97:6b:4b:f9:6e:91:20:df:ba:3d:e7:9f:54:80:
         c8:f5:54:ee
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUZ6KcL2deTNqHecEX++MwPvhJ+R4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTA3MDMyMDM1MTRaFw0yNjA3MDIyMDQwMTRaMDMxMTAvBgNV
BAMTKDc0QkY0MzQ4QkVBNTVFRUZBQjUwN0JGNDUzMjFCQUZBQUI2N0E5MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypujX0WpFCjc6j1r7H7DSGkpR
fJaY1X7fH8PpsYlG+K8sgD80itxsPZwtyZi2mHllWmLgQdb0pQ/x4eVeKv1oNZHo
tG0WTaCg8EgrzAKt447Iv9DiuFNO1NG7NVYYG4y+DH0ddE5Nea6+LgDSf4JnhoiW
grOssnX+XFLaTXm+gd44s4SMpuhGHfOII5RgOqmC/Y91PmW40M5LE5xfcEOHf1MJ
QC8paoQYkI20W2ZnJ294nU69LlBY1cEX+h9j1UwD9UIjbFWb7EfsNMpgqb4Y0abD
UE71WMzR6NJiTQvGCCESQOPRQiyiW7wxb5CGLUbdtOT3NTNJ+Rl1e+rNRQvrAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUdL9DSL6lXu+rUHv0UyG6+qtnqRQwHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzMyMzgzMDMzM2E2NjM2NjEzMDNhNjEz
NDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNjM2MzkzMDM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAP2oApAMA0GCSqGSIb3DQEBCwUAA4IBAQCbSdb/B/O6+EnfF8d+nSsttT8c
I2HLtphFEwa9R4AlCjHwBHiQv2eGMVisFqC0xs298uNXGNCJ7VY7DS5TW8+JVcmV
r1Y0aitv6lRDe4XnJv2Py7j6ullSeAL7H0HNNTTKjjf44HpE82mLsLzCh4D3xS8h
nWJ1P2jgx/HrgXbVt2hkj63T/BLpzYTpGx29xZJFywcpqXm4eAnhEiZy2OBcVqCM
Lei2wfavounSq6y7fNzfOXOfxQZOa+3rDr8Fhxokd0gwGeuMgcVK78Q6qYb5/Xw8
nyfCoglhv6Khjsh/+I+qfXYymOfFTeDqtEw1l2tL+W6RIN+6PeefVIDI9VTu
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:43:57 2025 by rpki-client