Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6263303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6263303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          RaXuQF7sN3m5CnPxF+RgX0o4iU/m5JBU3r0w0VuR6aA=
Subject key identifier:   2A:9C:38:81:B7:49:A3:5C:57:20:C7:9E:85:4D:E2:87:07:83:A9:F7
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       6D532ECE7C3DC253643094253FD4A3D59CEF80DA
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6263303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:07 +0000
ROA not before:           Thu 03 Jul 2025 20:35:07 +0000
ROA not after:            Thu 02 Jul 2026 20:40:07 +0000
asID:                     266904
IP address blocks:        2803:f6a0:bc0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:53:2e:ce:7c:3d:c2:53:64:30:94:25:3f:d4:a3:d5:9c:ef:80:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:07 2025 GMT
            Not After : Jul  2 20:40:07 2026 GMT
        Subject: CN=2A9C3881B749A35C5720C79E854DE2870783A9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:e5:67:06:0f:71:36:21:45:3b:59:2c:80:
                    b2:e6:bf:90:bd:50:92:bf:e8:d7:ad:e6:65:14:bf:
                    92:dc:7d:d8:0b:49:d9:30:5a:f7:da:76:9a:27:31:
                    7f:76:28:ce:e5:f8:45:36:e8:f6:d2:7f:95:a6:4c:
                    7e:ba:e5:5f:03:58:54:44:03:1b:60:e1:ea:89:f2:
                    ef:36:22:4a:14:a7:02:bc:74:19:f5:fa:69:07:40:
                    e6:77:17:b9:7b:a4:da:f6:81:9a:ba:db:0e:43:88:
                    a6:9c:be:0f:26:0e:03:94:73:c3:41:20:2a:86:0c:
                    07:62:48:3d:4c:e2:56:9c:a4:70:7b:f7:ca:6e:84:
                    f5:a9:9a:1a:e6:cd:70:23:86:b9:3c:65:27:de:c9:
                    7d:ea:23:81:22:59:ea:f1:67:37:ac:cc:04:38:bf:
                    9b:ca:04:3f:57:46:c8:3a:09:2c:f3:b8:54:62:cb:
                    61:ff:93:81:51:2c:e2:69:c3:2b:67:9a:97:7f:28:
                    9d:df:df:39:dc:9c:d6:39:36:55:12:7d:f9:ce:ef:
                    2e:01:79:22:67:e2:ab:e8:76:7a:ba:81:a5:95:6f:
                    4b:6a:4b:91:0b:c6:0b:5d:95:f4:fe:38:25:dd:83:
                    e5:6f:b5:0f:2f:52:8d:4b:c8:92:0e:c8:2b:09:11:
                    eb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9C:38:81:B7:49:A3:5C:57:20:C7:9E:85:4D:E2:87:07:83:A9:F7
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6263303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:bc0::/42

    Signature Algorithm: sha256WithRSAEncryption
         21:76:6b:07:d5:11:a3:12:18:53:13:e6:0b:48:32:a1:e0:c1:
         41:5e:15:82:ed:c1:7d:a0:2f:5b:2e:53:21:77:1d:02:31:78:
         79:97:3b:5b:bb:9c:88:f2:2e:71:30:b7:01:f9:09:c4:25:9d:
         4f:5e:8e:6f:aa:35:19:77:e4:ce:47:f2:6d:a1:6f:ca:6b:24:
         aa:7e:44:54:b4:74:42:04:a0:ad:42:3d:4d:d1:26:7f:85:10:
         87:27:cb:2b:e2:24:fa:55:b5:27:01:48:11:85:d4:55:1c:c1:
         36:81:ac:69:ea:6b:a1:f6:0f:4e:b5:34:70:a8:18:a5:ce:07:
         7b:e6:bb:ec:7c:08:79:1b:84:f6:09:91:96:1a:81:62:3a:b6:
         d7:be:ca:17:07:ab:12:6a:e4:bd:f5:f8:f9:d9:64:98:6b:6e:
         28:54:13:00:05:b0:97:b0:b1:8e:bb:c3:58:33:42:e0:bc:45:
         e5:46:0a:e9:27:5a:69:c3:11:7f:4d:69:1f:d2:d3:fb:a5:8e:
         37:7a:78:e9:17:a1:4f:88:51:f5:5d:dd:87:61:4e:bc:5c:4b:
         26:bd:e7:6f:af:3a:2b:b4:57:f1:ed:c2:5f:18:72:33:50:66:
         65:e2:7a:9f:20:24:19:b8:d9:08:96:c5:5d:ae:e9:aa:c6:1d:
         b8:90:b9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:38:53 2025 by rpki-client