Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6463303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6463303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          /P4rWrjUeYmfdaY2MiHIaQeouKZnaXzfYQ3xsDn1SeM=
Subject key identifier:   E1:EE:32:FC:FA:25:04:FA:80:BF:10:11:B0:29:64:42:2A:95:C1:5A
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       0651E0D02614AF18F727BEF8D0CB1B66D0DA8992
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6463303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:18 +0000
ROA not before:           Thu 03 Jul 2025 20:35:18 +0000
ROA not after:            Thu 02 Jul 2026 20:40:18 +0000
asID:                     266904
IP address blocks:        2803:f6a0:dc0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:51:e0:d0:26:14:af:18:f7:27:be:f8:d0:cb:1b:66:d0:da:89:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:18 2025 GMT
            Not After : Jul  2 20:40:18 2026 GMT
        Subject: CN=E1EE32FCFA2504FA80BF1011B02964422A95C15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:37:da:1e:b1:45:4d:76:03:25:85:f4:04:
                    db:9f:a3:e7:d8:e6:0e:4e:2c:64:8d:56:e9:fd:59:
                    d3:91:d3:fe:36:0c:3c:e4:38:26:ae:0f:ba:a2:4b:
                    a3:dd:1a:98:bd:2a:0a:f4:34:ab:7e:c2:73:8c:bf:
                    be:cb:4c:3c:e4:46:ad:90:27:5e:6b:dd:2e:69:e8:
                    cf:b7:5b:ef:90:43:49:8d:12:65:7c:6b:d4:50:18:
                    40:70:5d:bf:32:4c:81:1c:17:16:8a:26:51:48:5b:
                    44:c1:8d:a2:c9:0e:60:38:28:e0:c9:fb:9a:4e:c2:
                    08:84:ea:bb:0e:10:00:57:72:22:60:e2:6b:24:7c:
                    87:ec:f0:2b:a9:9b:9b:72:fe:6a:e3:fc:d2:a7:f9:
                    7b:fc:54:64:26:02:80:0e:4f:4e:87:87:61:b9:6c:
                    41:7e:a9:8d:62:1d:bc:30:72:f2:f4:68:a2:ea:3e:
                    b8:5a:9f:81:c6:9b:78:17:be:3e:45:1d:75:29:a2:
                    6b:5d:9b:e3:e6:96:53:6a:cc:7d:dc:c5:57:2f:c6:
                    bb:53:2e:d7:63:82:17:80:a3:88:7e:c2:23:92:90:
                    bd:64:bc:e6:1b:c7:78:55:87:4c:33:6d:1a:c2:4a:
                    ca:66:c4:37:a8:75:a0:99:82:a8:86:d7:17:d7:14:
                    d2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EE:32:FC:FA:25:04:FA:80:BF:10:11:B0:29:64:42:2A:95:C1:5A
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6463303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:dc0::/42

    Signature Algorithm: sha256WithRSAEncryption
         44:29:89:6b:bf:8b:91:1b:f1:f8:7b:9e:fa:fd:83:77:09:ee:
         ef:62:11:d3:03:f9:b9:80:1b:78:d9:61:b1:5c:01:49:91:5a:
         51:56:82:a4:cb:e5:90:aa:90:dc:8c:63:a1:35:4d:87:f6:00:
         9b:21:b8:ae:43:1c:e7:29:6d:0d:06:75:1d:96:2c:6c:24:fe:
         d0:a8:7d:5f:b7:66:e3:bc:2b:3e:46:69:30:c2:e9:62:7e:50:
         e7:6c:4a:b6:27:8e:3d:68:4d:27:02:6f:8a:79:42:8b:79:1f:
         69:09:02:f6:dd:52:5e:fd:44:ce:ce:77:42:dd:e8:53:c5:3a:
         08:84:c7:a8:ba:5b:35:71:14:36:1f:81:86:08:a1:81:10:87:
         86:a3:02:82:de:6d:39:b6:d4:3e:d9:cd:e9:e9:cd:e8:8c:78:
         c4:02:6b:92:59:ac:d9:6e:43:fc:75:67:96:05:74:97:28:cb:
         64:a4:3c:d3:ad:26:4b:ec:8c:79:ad:e7:aa:09:7f:6c:67:f2:
         06:cf:c6:94:ec:0f:f1:1f:06:95:57:1b:1a:3c:04:ba:b1:d4:
         40:6d:ec:24:65:b3:83:d5:e2:90:98:84:06:c0:81:ae:1a:08:
         71:2c:b6:43:24:ff:0c:2a:ab:23:6f:92:78:4f:04:d3:bc:32:
         0d:6a:95:49
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUBlHg0CYUrxj3J7740MsbZtDaiZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTA3MDMyMDM1MThaFw0yNjA3MDIyMDQwMThaMDMxMTAvBgNV
BAMTKEUxRUUzMkZDRkEyNTA0RkE4MEJGMTAxMUIwMjk2NDQyMkE5NUMxNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSTfaHrFFTXYDJYX0BNufo+fY
5g5OLGSNVun9WdOR0/42DDzkOCauD7qiS6PdGpi9Kgr0NKt+wnOMv77LTDzkRq2Q
J15r3S5p6M+3W++QQ0mNEmV8a9RQGEBwXb8yTIEcFxaKJlFIW0TBjaLJDmA4KODJ
+5pOwgiE6rsOEABXciJg4mskfIfs8Cupm5ty/mrj/NKn+Xv8VGQmAoAOT06Hh2G5
bEF+qY1iHbwwcvL0aKLqPrhan4HGm3gXvj5FHXUpomtdm+PmllNqzH3cxVcvxrtT
LtdjgheAo4h+wiOSkL1kvOYbx3hVh0wzbRrCSspmxDeodaCZgqiG1xfXFNKPAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU4e4y/PolBPqAvxARsClkQiqVwVowHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzMyMzgzMDMzM2E2NjM2NjEzMDNhNjQ2
MzMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNjM2MzkzMDM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAP2oA3AMA0GCSqGSIb3DQEBCwUAA4IBAQBEKYlrv4uRG/H4e576/YN3Ce7v
YhHTA/m5gBt42WGxXAFJkVpRVoKky+WQqpDcjGOhNU2H9gCbIbiuQxznKW0NBnUd
lixsJP7QqH1ft2bjvCs+RmkwwuliflDnbEq2J449aE0nAm+KeUKLeR9pCQL23VJe
/UTOzndC3ehTxToIhMeouls1cRQ2H4GGCKGBEIeGowKC3m05ttQ+2c3p6c3ojHjE
AmuSWazZbkP8dWeWBXSXKMtkpDzTrSZL7Ix5reeqCX9sZ/IGz8aU7A/xHwaVVxsa
PAS6sdRAbewkZbOD1eKQmIQGwIGuGghxLLZDJP8MKqsjb5J4TwTTvDINapVJ
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:39:39 2025 by rpki-client