Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6238303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6238303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          KZlnSzSgph8SzXLcbirNlnd/Lmlan5HZfmSkCDW+qFU=
Subject key identifier:   B5:88:60:47:B9:21:AB:B3:C4:52:8D:67:6F:35:7D:BD:9F:AC:8F:CC
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       390A885F177480433F8BFBB2CC72E6F3EDB10F97
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6238303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:07 +0000
ROA not before:           Thu 03 Jul 2025 20:35:07 +0000
ROA not after:            Thu 02 Jul 2026 20:40:07 +0000
asID:                     266904
IP address blocks:        2803:f6a0:b80::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0a:88:5f:17:74:80:43:3f:8b:fb:b2:cc:72:e6:f3:ed:b1:0f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:07 2025 GMT
            Not After : Jul  2 20:40:07 2026 GMT
        Subject: CN=B5886047B921ABB3C4528D676F357DBD9FAC8FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:d9:fe:ed:40:05:9a:6d:83:40:f0:ad:c1:
                    c6:ba:d8:ce:28:fe:f8:dd:9f:93:8a:9c:b6:19:bf:
                    99:63:7b:38:ef:b9:98:89:b4:e7:df:1b:0f:f1:29:
                    d4:b2:fc:50:90:64:d5:81:07:3d:dc:5b:ec:57:51:
                    1d:d6:9e:21:02:d0:8a:d4:b8:92:60:cc:be:d0:b8:
                    76:d0:3c:32:25:19:fa:c0:d2:82:1f:ca:75:fa:0e:
                    3c:1c:ff:9d:a7:5d:bc:9a:f6:8c:5f:51:e6:17:d8:
                    3a:56:28:81:eb:a4:83:04:b2:7d:25:11:48:b0:67:
                    bc:c5:5d:ff:57:b3:f3:b9:b4:cc:1e:56:7e:3e:9f:
                    00:e0:17:4e:c9:11:cb:a8:74:cf:c2:62:d3:39:4d:
                    40:1d:07:2d:ee:a5:01:9a:23:fd:fb:57:ec:8a:24:
                    04:b8:f6:41:68:7c:5c:df:cc:a5:71:52:f3:f4:01:
                    f2:3a:9f:c9:af:33:f3:02:59:54:e0:a2:0c:84:e2:
                    ef:16:5d:37:38:a2:ab:c6:05:c1:37:90:84:29:29:
                    c4:cb:d0:37:07:02:6f:cf:5b:eb:83:fc:2a:be:ba:
                    cf:5f:ac:3b:35:a2:d0:6e:42:6c:c2:88:f2:60:c5:
                    f3:e0:92:be:55:76:a5:41:16:f5:0a:da:a5:98:85:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:88:60:47:B9:21:AB:B3:C4:52:8D:67:6F:35:7D:BD:9F:AC:8F:CC
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6238303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:b80::/42

    Signature Algorithm: sha256WithRSAEncryption
         95:7f:56:e9:30:7e:b1:65:60:ee:84:75:4b:30:47:03:66:f0:
         7e:75:6a:e7:6e:ba:60:15:cf:8f:7c:ee:63:bf:ed:86:aa:8a:
         7f:27:07:82:d5:e0:04:d9:9c:5e:ba:21:0a:1f:b8:2c:5b:75:
         6a:3d:d5:98:b8:01:d2:8e:fe:b4:62:d7:4b:80:f5:15:b8:71:
         ee:78:bc:c2:b8:37:f5:6d:86:95:ca:3b:82:bc:73:3e:06:16:
         a5:ac:f7:e5:54:ef:65:04:5e:6c:47:fa:65:7c:08:86:47:93:
         b2:12:72:93:7e:9b:30:b0:40:c4:a3:ed:4f:91:a8:a5:74:9b:
         fe:2e:f1:3b:22:4e:77:e4:ea:f7:21:1a:f7:bd:16:0e:5f:5d:
         5b:85:6b:cc:50:ce:b1:1d:d3:20:c1:af:4d:35:50:e3:98:db:
         b7:42:8f:b7:cf:73:94:29:e2:39:c3:b9:b9:0b:42:1e:be:31:
         f6:9d:c7:3d:c4:2c:87:b8:8e:61:b5:9f:69:c2:75:5a:3a:14:
         e0:16:3b:f6:5b:69:00:c0:62:12:f4:7e:e5:7b:d3:ab:59:87:
         e5:c2:b5:bb:00:f4:9f:d9:4a:23:61:e4:a2:45:8e:c8:18:d0:
         bd:7a:7e:5d:33:d4:b2:e9:58:5d:16:45:a2:f0:70:3c:9a:e7:
         3e:9e:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:44:13 2025 by rpki-client