Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6630303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6630303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          8nqtJOBGaLJ5bmxHz4zc7HQV9XTlqGVD6dtWIqNEpzw=
Subject key identifier:   2F:BB:AB:C4:BD:29:0D:D0:0C:27:59:4F:D1:E0:2B:1C:88:ED:49:9A
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       5FE81812CDF3CC11222B087AFC14C73C85206509
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6630303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:15 +0000
ROA not before:           Thu 03 Jul 2025 20:35:15 +0000
ROA not after:            Thu 02 Jul 2026 20:40:15 +0000
asID:                     266904
IP address blocks:        2803:f6a0:f00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e8:18:12:cd:f3:cc:11:22:2b:08:7a:fc:14:c7:3c:85:20:65:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:15 2025 GMT
            Not After : Jul  2 20:40:15 2026 GMT
        Subject: CN=2FBBABC4BD290DD00C27594FD1E02B1C88ED499A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:df:f8:70:ba:06:72:d5:a4:e2:c2:86:83:d6:
                    12:72:9b:7b:45:4f:37:6a:7d:d4:33:17:b5:d5:ab:
                    e8:65:53:9b:d9:2c:6a:32:51:dd:f9:a2:db:21:5c:
                    42:c0:18:44:c1:0c:d3:c4:e1:23:89:ec:a5:b7:5b:
                    3e:fc:61:dd:2f:a4:6f:fe:f6:eb:d1:04:2f:c7:68:
                    52:c5:19:ea:1c:d2:a6:6b:ca:47:21:26:a4:4e:d3:
                    1c:32:22:a5:4d:c2:d7:60:1e:7d:fc:1f:e0:8a:ab:
                    7c:3d:cd:23:b3:c4:6b:4b:05:b7:5f:9a:b6:21:69:
                    71:15:c0:8e:e5:e0:76:8f:b1:0d:07:22:07:ff:fe:
                    86:c8:ea:7d:da:fc:bd:aa:fb:b3:af:7f:df:0f:2d:
                    37:7d:b4:c7:73:fb:71:2f:73:40:e3:f8:b6:6e:67:
                    04:13:7f:6f:4b:65:a2:e5:1b:b6:e0:95:17:6b:90:
                    79:c9:71:77:a4:67:14:16:71:73:ff:55:46:dc:02:
                    72:a7:1f:8f:cd:3f:df:94:79:61:73:20:25:04:7d:
                    ed:1d:29:25:03:0e:66:fb:88:63:59:cd:99:fa:a4:
                    c1:5e:a3:25:28:ae:60:af:d6:f9:89:72:ac:a6:7d:
                    39:26:64:90:c6:96:f9:54:a2:69:93:57:3c:23:24:
                    5c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BB:AB:C4:BD:29:0D:D0:0C:27:59:4F:D1:E0:2B:1C:88:ED:49:9A
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6630303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:f00::/42

    Signature Algorithm: sha256WithRSAEncryption
         02:41:75:1e:17:70:c0:b6:b5:41:f0:2d:0a:3b:5b:9a:1c:b4:
         22:31:17:69:a4:74:e5:8c:e3:af:31:1a:18:0e:f1:18:51:1d:
         a9:24:61:aa:da:93:a0:4d:ec:5c:d7:b9:6c:c9:11:d2:82:0f:
         ce:e4:2f:39:e0:b0:27:f4:48:9b:ad:d4:3c:90:ae:7f:3e:3b:
         44:90:cb:7b:7b:66:38:6e:f6:9f:95:18:71:f3:79:af:30:af:
         b4:e3:7a:62:1e:1d:8a:14:68:02:7a:f5:34:06:e6:f0:19:68:
         2e:b3:6a:3c:fd:a2:a6:e6:3c:c6:59:bb:8a:8c:46:59:9c:8d:
         ae:5b:4d:d0:9a:07:75:f9:85:ce:07:c6:da:b6:3f:db:e5:fd:
         a7:5b:f1:10:5b:cd:17:c9:8f:89:93:bf:63:de:c0:41:68:cf:
         27:ef:c7:ae:f6:0b:c2:e5:5c:65:67:74:f9:c9:f2:85:09:17:
         f9:11:a6:a6:23:f1:8b:68:44:79:c7:b7:0b:ba:a1:24:16:68:
         2c:ec:1e:37:6a:2c:94:49:26:99:21:8a:dd:01:1b:9b:e8:71:
         6d:53:03:b6:4b:b0:ec:e5:19:eb:89:97:d1:4d:d7:b6:cd:c3:
         2a:70:aa:5e:13:4c:17:07:75:30:f2:db:c1:cd:9a:5f:dc:6e:
         73:cf:85:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:39:43 2025 by rpki-client