Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6434303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6434303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          10lw8rbEt2+q88/HmfGEHJxRazz4S71E3Hu/CeUcp4k=
Subject key identifier:   47:10:9E:62:6F:10:68:62:2D:0C:EB:F5:01:E9:1E:3F:C1:1D:CF:1E
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       7CE962755DF0C197422369653D2F463E2DD3E3
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6434303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:00 +0000
ROA not before:           Thu 03 Jul 2025 20:35:00 +0000
ROA not after:            Thu 02 Jul 2026 20:40:00 +0000
asID:                     266904
IP address blocks:        2803:f6a0:d40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e9:62:75:5d:f0:c1:97:42:23:69:65:3d:2f:46:3e:2d:d3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:00 2025 GMT
            Not After : Jul  2 20:40:00 2026 GMT
        Subject: CN=47109E626F1068622D0CEBF501E91E3FC11DCF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:d3:b0:93:31:55:40:b0:0f:f5:23:c1:37:
                    ac:fc:8d:a1:b4:8f:01:36:d6:64:5d:e4:a3:4d:b6:
                    5f:53:cd:c9:10:64:8c:15:42:ad:a3:6f:b9:bf:91:
                    8b:cb:b0:fa:84:2e:96:27:7b:76:30:fe:51:fb:09:
                    31:19:47:5c:ac:47:f9:0e:13:67:86:be:42:ae:ac:
                    cb:e5:82:b4:a9:62:9c:90:1b:f3:68:bc:ea:40:8b:
                    7d:e4:24:9b:ba:3f:e0:5c:7d:61:19:5f:12:52:cb:
                    7a:66:82:90:9a:76:ec:9a:75:2b:d3:6f:5a:e5:18:
                    83:be:78:9f:6c:7b:c5:e4:aa:cb:87:3a:9b:1f:aa:
                    44:b1:5e:84:79:f9:26:40:57:7d:39:ef:2e:cc:7c:
                    9a:27:69:1e:4e:60:9b:93:38:e9:4b:7f:6a:7a:df:
                    e2:80:2e:53:a0:e0:99:24:a7:af:bf:ce:51:bb:db:
                    df:28:83:f1:38:0d:7f:21:41:e8:22:20:92:8b:83:
                    56:2f:30:00:cb:62:ae:cf:4e:cd:fe:e9:86:05:ef:
                    33:03:e6:ef:eb:63:be:a1:5b:85:4a:84:c6:b0:b9:
                    9b:23:58:59:96:ce:51:ce:b5:0a:1f:12:b5:f3:70:
                    90:4f:1e:01:78:10:b4:01:25:71:7a:8f:fa:c2:8f:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:10:9E:62:6F:10:68:62:2D:0C:EB:F5:01:E9:1E:3F:C1:1D:CF:1E
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6434303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:d40::/42

    Signature Algorithm: sha256WithRSAEncryption
         1e:45:0a:21:42:f4:6c:a2:be:0e:f2:6e:45:9f:7d:9a:9c:d9:
         f4:87:ae:e0:00:3c:b5:99:f3:82:56:ce:a4:0b:a0:9e:ba:b4:
         e6:c2:af:68:d3:4e:17:69:f6:c5:f4:56:8e:23:f1:21:3d:c7:
         55:30:f2:05:a4:00:7f:85:84:8e:5c:19:5e:6e:dc:bc:4e:fa:
         75:68:75:c9:3b:e1:55:21:64:17:e6:bf:95:55:67:d0:20:a8:
         1e:c6:f1:10:52:8a:69:8a:e7:00:5a:c5:c7:ad:c3:c5:43:8c:
         50:07:64:60:55:1b:d5:0b:f3:5a:d4:5b:98:36:2c:d9:3f:dc:
         c7:4b:a4:5e:40:c9:77:bb:85:4a:59:dc:92:c0:75:2b:ab:91:
         1e:bb:ad:53:f7:40:ca:a9:4d:05:d7:ab:f8:50:83:5c:de:68:
         df:32:70:d5:d0:ee:1f:04:82:72:58:5a:f8:6e:e1:e6:06:89:
         76:9f:4d:4e:b0:b6:62:de:13:72:56:a1:67:5b:ab:aa:31:74:
         7f:7b:0b:8f:a7:54:28:c5:18:17:37:d2:86:84:8a:98:d0:94:
         0a:31:52:8e:60:e0:b8:b7:ae:be:a8:ea:5c:55:f1:43:e4:f8:
         52:5e:f9:6a:87:c5:54:74:c6:68:a8:75:d2:55:0c:bd:58:72:
         e7:1a:60:ff
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgITfOlidV3wwZdCI2llPS9GPi3T4zANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg2Qzg5OEIyQUIxMTk0ODk4RUUzQzUxNTdGOUJBNjE4RkJB
RjYwMTcyMB4XDTI1MDcwMzIwMzUwMFoXDTI2MDcwMjIwNDAwMFowMzExMC8GA1UE
AxMoNDcxMDlFNjI2RjEwNjg2MjJEMENFQkY1MDFFOTFFM0ZDMTFEQ0YxRTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJia07CTMVVAsA/1I8E3rPyNobSP
ATbWZF3ko022X1PNyRBkjBVCraNvub+Ri8uw+oQulid7djD+UfsJMRlHXKxH+Q4T
Z4a+Qq6sy+WCtKlinJAb82i86kCLfeQkm7o/4Fx9YRlfElLLemaCkJp27Jp1K9Nv
WuUYg754n2x7xeSqy4c6mx+qRLFehHn5JkBXfTnvLsx8midpHk5gm5M46Ut/anrf
4oAuU6DgmSSnr7/OUbvb3yiD8TgNfyFB6CIgkouDVi8wAMtirs9Ozf7phgXvMwPm
7+tjvqFbhUqExrC5myNYWZbOUc61Ch8StfNwkE8eAXgQtAElcXqP+sKPH1sCAwEA
AaOCAtMwggLPMB0GA1UdDgQWBBRHEJ5ibxBoYi0M6/UB6R4/wR3PHjAfBgNVHSME
GDAWgBRsiYsqsRlImO48UVf5umGPuvYBcjAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0
L3Jwa2kvbGFjbmljLzU2NzIzMTVGMUQ0RDUxNDVEQzI4Mjg4OEI4RkQ0OUNGMTRF
RjIxRkIzNTEwNzFBRDhCNDAwMjNGRTlFOEVGMTAvMC82Qzg5OEIyQUIxMTk0ODk4
RUUzQzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNybDCBuQYIKwYBBQUHAQEEgawwgakw
gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr
aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE
MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wLzZDODk4QjJBQjExOTQ4OThFRTND
NTE1N0Y5QkE2MThGQkFGNjAxNzIuY2VyMIHPBggrBgEFBQcBCwSBwjCBvzCBvAYI
KwYBBQUHMAuGga9yc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0RUYyMUZCMzUx
MDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvMzIzODMwMzMzYTY2MzY2MTMwM2E2NDM0
MzAzYTNhMmYzNDMyMmQzNDMyMjAzZDNlMjAzMjM2MzYzOTMwMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwYoA/agDUAwDQYJKoZIhvcNAQELBQADggEBAB5FCiFC9Gyivg7ybkWffZqc2fSH
ruAAPLWZ84JWzqQLoJ66tObCr2jTThdp9sX0Vo4j8SE9x1Uw8gWkAH+FhI5cGV5u
3LxO+nVodck74VUhZBfmv5VVZ9AgqB7G8RBSimmK5wBaxcetw8VDjFAHZGBVG9UL
81rUW5g2LNk/3MdLpF5AyXe7hUpZ3JLAdSurkR67rVP3QMqpTQXXq/hQg1zeaN8y
cNXQ7h8EgnJYWvhu4eYGiXafTU6wtmLeE3JWoWdbq6oxdH97C4+nVCjFGBc30oaE
ipjQlAoxUo5g4Li3rr6o6lxV8UPk+FJe+WqHxVR0xmioddJVDL1YcucaYP8=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:40:30 2025 by rpki-client