Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6230303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6230303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          vmOvVO/3XfZv1UhU3cGlClRD7XVzzI536iXOmJMFm6s=
Subject key identifier:   A7:62:06:4F:21:E2:56:AF:89:76:9D:E1:64:48:02:E6:5F:B2:F6:50
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       5E6FD3FE45E388E47F0A95AD80B1A74DA16F835E
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6230303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:24 +0000
ROA not before:           Thu 03 Jul 2025 20:35:24 +0000
ROA not after:            Thu 02 Jul 2026 20:40:24 +0000
asID:                     266904
IP address blocks:        2803:f6a0:b00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6f:d3:fe:45:e3:88:e4:7f:0a:95:ad:80:b1:a7:4d:a1:6f:83:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:24 2025 GMT
            Not After : Jul  2 20:40:24 2026 GMT
        Subject: CN=A762064F21E256AF89769DE1644802E65FB2F650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b3:ca:ac:5c:cb:39:49:b4:79:ad:e2:31:19:
                    00:66:12:92:6c:9e:77:3b:e9:ae:52:d4:a5:68:36:
                    cc:b3:3a:c9:1e:1e:be:4c:0d:e6:27:ba:88:a2:55:
                    4f:c2:63:88:bc:39:ba:8d:8d:00:95:6a:e6:29:0d:
                    e4:c2:5c:cc:86:64:97:92:1b:94:19:f3:fc:ea:1e:
                    19:1b:5e:4f:50:f6:de:75:fe:70:d4:a7:cb:17:2a:
                    01:ae:0d:29:f9:e1:bb:b4:28:71:18:17:eb:59:1f:
                    57:63:f6:8b:7b:bd:b6:c3:ec:02:fc:cb:6c:55:bf:
                    b6:34:e9:b5:9d:bc:9c:a9:b4:c4:c3:21:df:6d:8d:
                    0d:69:06:44:ea:f5:42:f0:a6:92:92:35:e3:6f:7c:
                    d4:7e:bb:cc:14:1f:44:57:61:50:d7:c2:49:96:fb:
                    71:01:73:06:da:e3:d2:90:d7:a4:3d:c9:dc:07:f8:
                    e4:9c:2e:d0:b8:c9:26:88:22:c8:1d:d5:19:bc:0b:
                    20:21:3f:be:c4:34:76:26:e3:d1:50:76:a1:6f:15:
                    c2:29:39:a6:13:60:94:52:96:47:e5:07:30:ca:13:
                    73:39:b9:55:05:7d:29:ce:b5:cc:8c:1f:e6:8c:74:
                    62:25:2a:f3:59:80:ba:de:ee:43:00:49:10:fc:4b:
                    31:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:62:06:4F:21:E2:56:AF:89:76:9D:E1:64:48:02:E6:5F:B2:F6:50
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6230303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:b00::/42

    Signature Algorithm: sha256WithRSAEncryption
         a7:24:8b:c1:c2:a1:75:72:41:43:d4:d6:5f:ac:fa:14:be:a1:
         e2:ba:74:b2:88:d0:a3:97:83:3f:61:8b:82:0c:85:5c:c2:f8:
         5f:bf:d1:74:0d:75:26:2b:fd:ae:c0:0b:3b:e7:b8:f8:4f:74:
         f4:cc:b7:07:06:68:e1:9b:e1:7f:a9:3a:a7:92:33:a6:84:b7:
         40:29:c7:0f:53:a1:2e:7b:1c:5b:f4:93:47:f5:a9:3b:2b:ab:
         35:25:99:6b:08:7f:06:18:69:5b:71:66:cd:7a:9a:72:ef:21:
         7c:25:d0:82:2c:09:b7:15:17:d1:1a:45:4f:0d:38:3c:da:0b:
         40:8c:39:84:fc:2d:79:cc:a8:07:b6:17:0e:bb:ef:a5:33:b8:
         66:6c:94:06:8b:9f:b0:63:ff:36:15:0d:24:81:d8:81:9a:d7:
         3d:4a:e8:28:26:2b:b2:7b:77:11:b4:dd:6b:9c:28:f0:7f:90:
         bd:e5:33:78:63:4e:74:56:46:5c:6b:dd:57:c5:b5:02:7b:93:
         6d:59:c9:1a:e8:78:53:2e:b8:e4:98:3a:40:a8:d0:5d:88:a1:
         24:17:a0:52:fa:e8:5e:84:4f:99:1e:37:01:98:56:9c:1f:e9:
         06:62:11:e2:7d:a3:52:d3:ac:02:96:ac:ed:78:48:be:12:e3:
         b1:b5:aa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:44:05 2025 by rpki-client