Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6530303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6530303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          FAf9LWRBJ7HJqcTTy+dFrKMzHvehqAt2hjelX+nudi4=
Subject key identifier:   D7:51:F0:B8:DA:22:F8:B6:9D:B1:0F:6F:FE:D1:83:C8:C1:A1:89:8B
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       5DD03BCF1310B139CD24B429AE926052984E2A78
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6530303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:21 +0000
ROA not before:           Thu 03 Jul 2025 20:35:21 +0000
ROA not after:            Thu 02 Jul 2026 20:40:21 +0000
asID:                     266904
IP address blocks:        2803:f6a0:e00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d0:3b:cf:13:10:b1:39:cd:24:b4:29:ae:92:60:52:98:4e:2a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:21 2025 GMT
            Not After : Jul  2 20:40:21 2026 GMT
        Subject: CN=D751F0B8DA22F8B69DB10F6FFED183C8C1A1898B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:23:1e:d1:8d:ec:fb:ea:78:51:c2:7d:a5:8d:
                    ec:48:41:c9:43:c1:7b:20:8e:c4:4c:d7:91:b3:22:
                    a8:88:f9:bd:3e:d9:e6:ec:75:75:a3:eb:df:60:63:
                    a1:1d:32:1e:6d:49:b1:f8:36:0a:88:39:9a:bf:99:
                    ad:eb:94:33:7f:5e:32:54:bc:39:41:36:b2:d5:82:
                    01:9e:85:b0:4c:08:26:a1:a9:45:90:2d:6c:af:be:
                    cf:68:16:3f:ca:04:35:f7:e2:21:11:e4:6a:ae:89:
                    0e:7e:03:27:e3:a2:1c:97:41:d5:4e:c3:dc:cf:d3:
                    60:de:88:03:92:00:a0:54:36:f7:3a:1b:f0:b3:99:
                    4f:e4:ca:08:c3:1d:c1:88:3e:50:dc:a9:da:28:36:
                    c2:b4:98:a6:bf:3f:c0:8a:4b:78:92:7e:a2:64:4a:
                    8f:e7:51:3d:4b:8f:28:5f:b0:b7:c8:d1:c0:bf:72:
                    0b:e3:00:ab:93:6d:26:f5:ee:4d:67:95:37:08:52:
                    73:ef:d1:f1:c3:41:90:4d:7a:e1:8f:e1:3f:76:9a:
                    c4:2d:74:93:4f:c0:8c:4a:d7:9a:f4:34:6e:2a:fd:
                    79:63:42:18:35:77:e1:34:4a:7b:68:14:05:59:92:
                    ad:3e:fb:2a:71:f3:27:85:9c:b5:9c:7b:4b:b7:14:
                    62:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:51:F0:B8:DA:22:F8:B6:9D:B1:0F:6F:FE:D1:83:C8:C1:A1:89:8B
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6530303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:e00::/42

    Signature Algorithm: sha256WithRSAEncryption
         aa:e2:6d:0e:a9:73:fb:4a:19:e4:4a:57:23:71:2b:a4:5c:1f:
         5d:ac:d5:6b:82:dc:bc:82:d3:97:56:0e:1a:f2:25:a6:aa:c5:
         bf:24:c8:fe:18:60:c0:c1:94:57:0c:c3:81:15:ec:b9:1b:28:
         25:89:32:aa:e4:c0:52:48:97:dd:22:4d:0c:41:31:0c:b6:f3:
         9d:31:cf:5d:8e:f9:bf:4a:13:5b:3a:34:b4:ba:b3:8f:b4:c8:
         8e:95:23:c3:bc:07:6b:55:0b:20:59:2c:8d:02:14:75:d2:05:
         7e:d8:d7:97:2a:07:35:5a:32:14:9f:10:12:de:d5:91:af:31:
         35:a6:ee:f0:67:5b:ba:de:44:e6:ee:47:0f:e3:8c:80:f8:95:
         23:85:d8:28:74:34:03:9b:d7:fb:08:2e:6f:0a:db:e7:7d:5d:
         0e:c1:56:60:78:3b:18:c2:7a:01:33:87:8b:86:65:3a:19:44:
         42:7f:2d:69:8a:20:de:a4:c2:24:90:da:8e:9e:34:35:3e:01:
         8e:41:bb:29:33:72:80:c5:8e:df:3a:52:c4:3d:ed:f9:5f:69:
         c4:dd:48:05:fe:f6:f0:2d:ea:0f:c5:66:c0:1c:a7:7f:16:f9:
         12:1c:d7:af:22:ac:38:a6:db:0a:fd:19:e4:76:e9:0d:9b:77:
         46:cb:9a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:45:08 2025 by rpki-client