Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6538303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6538303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          iLD8h0TqZf5quvN+wZV3xJHVddzwvznDIMQFoXxNZ7M=
Subject key identifier:   EA:90:40:95:61:E1:76:FF:6F:86:74:B6:7F:E9:9D:57:4E:49:65:EE
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       22F48C615ABEF8287F9C2613E6BF23F831D643C1
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6538303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:00 +0000
ROA not before:           Thu 03 Jul 2025 20:35:00 +0000
ROA not after:            Thu 02 Jul 2026 20:40:00 +0000
asID:                     266904
IP address blocks:        2803:f6a0:e80::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f4:8c:61:5a:be:f8:28:7f:9c:26:13:e6:bf:23:f8:31:d6:43:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:00 2025 GMT
            Not After : Jul  2 20:40:00 2026 GMT
        Subject: CN=EA90409561E176FF6F8674B67FE99D574E4965EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:0d:79:45:4f:d4:2d:a5:38:59:25:53:7f:
                    5f:82:73:7e:92:47:9e:ae:23:59:a4:76:71:8f:2f:
                    45:d3:96:0a:b1:77:34:13:21:b1:8d:df:03:f4:09:
                    c4:4b:7d:af:af:d3:7a:09:74:b8:ef:53:fe:c3:d5:
                    5b:67:04:29:51:3f:47:17:b5:c9:bc:6d:b7:70:b3:
                    fa:5c:09:53:b3:55:93:74:a2:08:d1:0d:f9:a5:9d:
                    cc:72:14:e8:19:7c:1c:bb:f0:1b:6e:9b:ca:2d:d1:
                    19:e9:13:de:37:f8:4f:5f:82:e0:4d:a1:e7:2f:66:
                    58:d8:65:6e:72:d4:92:d2:53:0f:e8:2b:20:5c:a4:
                    a7:fb:87:32:3a:8b:bf:3c:db:59:10:68:11:9c:1b:
                    e5:7c:9c:68:84:26:b6:b3:bc:41:1c:ce:65:e1:b2:
                    26:8e:28:db:61:85:a0:9f:d2:b9:d2:cd:8e:b9:33:
                    7d:cc:5c:2d:49:ca:38:2d:06:d3:03:ee:6c:6b:b2:
                    fc:9e:16:33:c2:9f:b8:e0:8b:d9:c8:21:fe:6a:db:
                    58:8e:f7:8a:f1:20:85:1c:60:ba:10:94:bf:65:41:
                    29:5a:42:bc:56:9c:e2:c3:54:65:0f:30:6d:7a:e0:
                    45:cc:b9:43:a1:83:ef:cf:a6:64:c0:f0:b9:2c:3d:
                    65:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:90:40:95:61:E1:76:FF:6F:86:74:B6:7F:E9:9D:57:4E:49:65:EE
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6538303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:e80::/42

    Signature Algorithm: sha256WithRSAEncryption
         75:e9:15:68:c7:af:22:17:3c:24:eb:01:34:50:d5:ff:99:95:
         47:75:dc:13:6a:87:04:ef:fd:ed:3b:c1:d3:d0:73:1f:fe:dc:
         a1:33:66:6b:df:88:cb:5a:f3:79:58:13:65:13:11:8a:f9:32:
         e9:44:74:36:fc:50:98:20:a7:f3:f9:27:fa:a7:92:5b:14:b4:
         be:b8:67:b3:f6:7e:5d:c8:c7:b6:2d:93:19:33:fd:c1:f4:12:
         ee:ea:c1:b3:20:39:73:ba:56:89:00:f5:35:56:17:97:28:f7:
         1a:21:91:1e:d8:bd:30:d2:3b:27:18:87:be:c7:df:4f:8e:45:
         cf:8c:33:64:27:bd:9b:c0:72:14:ca:5d:99:62:f5:09:14:65:
         01:6b:4d:16:f3:8c:54:82:e8:c1:95:07:d6:b3:4d:0c:5b:ec:
         1f:ba:be:f5:58:73:c3:48:1e:2c:f6:d7:f1:bb:d2:f7:b9:6d:
         0c:35:cf:4e:f4:45:e5:b0:ec:b6:08:46:45:23:3d:72:6c:bb:
         00:72:54:de:be:b5:85:6b:fa:97:ee:28:ce:2f:ee:8e:a0:5e:
         0a:8e:36:bf:eb:27:b8:1f:49:d2:c7:e1:1d:9c:ed:5d:d0:4c:
         62:86:ab:c8:4c:62:84:f2:a2:e0:c3:45:6e:4d:a2:29:b5:9d:
         8e:46:ca:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:45:05 2025 by rpki-client