Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6534303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6534303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          YLmmARF+PXwOZ8/hMPYJOTvdF70JK0U+ytktdF/M8dg=
Subject key identifier:   DF:73:D0:44:A1:68:AC:EF:15:0F:C2:B6:A9:C0:53:86:C8:16:C8:B5
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       6F3CF8F3C82D359249D1E3F2BCDDFA35BD5DDF50
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6534303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:00 +0000
ROA not before:           Thu 03 Jul 2025 20:35:00 +0000
ROA not after:            Thu 02 Jul 2026 20:40:00 +0000
asID:                     266904
IP address blocks:        2803:f6a0:e40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3c:f8:f3:c8:2d:35:92:49:d1:e3:f2:bc:dd:fa:35:bd:5d:df:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:00 2025 GMT
            Not After : Jul  2 20:40:00 2026 GMT
        Subject: CN=DF73D044A168ACEF150FC2B6A9C05386C816C8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f9:96:d1:f2:34:fc:46:f4:b0:f1:89:27:6c:
                    12:0d:c9:f1:db:0c:55:9b:7c:06:b1:15:9c:2b:b5:
                    6d:3d:9f:87:83:41:35:92:9d:8a:d5:84:98:da:58:
                    be:f4:15:08:83:cc:18:d9:f1:55:c1:8e:54:50:b4:
                    3a:f8:be:6e:5a:6a:cf:db:47:fa:28:43:34:6e:71:
                    7f:17:ea:7a:6e:86:77:d0:99:ca:94:80:74:cd:9f:
                    34:e7:ef:22:42:39:52:6c:be:7e:33:6f:cd:fc:69:
                    50:92:c6:8e:75:3e:39:09:59:b0:0f:64:68:e9:b9:
                    82:cf:2b:44:2d:c2:f9:95:01:72:57:4a:4b:5f:e5:
                    c1:ad:b9:59:d3:d6:0e:e9:3b:73:83:f9:c7:44:d9:
                    42:6d:01:18:47:8b:b7:e5:73:e5:6e:b8:0b:c2:b2:
                    2d:e1:11:ed:2a:db:66:3b:32:c1:24:ee:15:0c:08:
                    bf:6d:f9:1b:f3:0f:d6:ad:d3:10:cc:20:5e:d4:8d:
                    d0:1c:46:12:df:9b:2d:f2:2f:65:af:ab:84:61:0d:
                    46:90:99:d1:93:48:b1:2b:9b:4b:86:f5:1e:6e:ff:
                    89:55:52:3f:ee:75:f4:b3:dd:db:12:e3:24:f6:4c:
                    2e:81:f0:c5:ac:f0:e4:5f:d5:e8:a5:75:32:ed:ea:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:73:D0:44:A1:68:AC:EF:15:0F:C2:B6:A9:C0:53:86:C8:16:C8:B5
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6534303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:e40::/42

    Signature Algorithm: sha256WithRSAEncryption
         4a:be:b1:d6:86:d6:75:7b:12:a9:40:a2:09:94:6c:3f:9a:03:
         ed:77:e8:46:3c:2b:e9:b9:5e:af:f4:bf:5f:71:4e:91:9e:c5:
         ff:fa:fc:15:6c:58:14:38:78:3c:f6:52:6a:81:b4:f6:d6:1b:
         c4:cc:87:9f:08:1b:71:7c:0f:66:7a:1e:c3:16:03:04:a8:0e:
         a3:4c:db:02:b7:db:a0:10:aa:bc:e9:fe:9c:8b:0d:32:a6:fa:
         98:4c:bd:4f:e6:e4:be:9d:cf:c0:23:e2:da:48:31:24:b8:82:
         6e:c5:b0:64:29:87:0c:2f:8f:1f:33:0b:ce:d9:e0:8a:46:bb:
         9e:e6:e4:17:61:e6:b1:d4:47:ad:da:11:57:21:8c:52:da:18:
         be:bc:99:3f:d8:bd:a6:e3:d5:24:a1:de:1b:29:a0:5d:8f:9d:
         34:d3:e1:30:b4:73:08:9c:74:20:10:82:2a:af:85:06:f7:a4:
         1d:fd:0d:db:d2:a3:88:cd:9d:00:00:be:f5:31:76:c1:aa:ad:
         59:c7:28:24:80:23:92:b1:d8:96:66:13:7c:3b:1f:9b:47:0d:
         3b:86:d1:df:c3:30:eb:43:6e:fa:e0:e9:a5:c0:2e:62:c5:2a:
         4d:ce:b5:b1:dd:32:c4:3a:c6:d8:8e:a7:58:c4:e5:7f:fe:20:
         1c:e7:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:44:03 2025 by rpki-client