Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6638303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6638303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          /K3BqXGUU8umO//GVb5HfYIpT4v1HlXe5zIgpP3qviY=
Subject key identifier:   48:0A:48:26:28:E7:7D:66:DB:A2:06:6E:5A:6C:9B:13:B7:70:4A:14
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       174F9E2F5E74205E4D847907237F61A6C4EBA95D
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6638303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:06 +0000
ROA not before:           Thu 03 Jul 2025 20:35:06 +0000
ROA not after:            Thu 02 Jul 2026 20:40:06 +0000
asID:                     266904
IP address blocks:        2803:f6a0:f80::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4f:9e:2f:5e:74:20:5e:4d:84:79:07:23:7f:61:a6:c4:eb:a9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:06 2025 GMT
            Not After : Jul  2 20:40:06 2026 GMT
        Subject: CN=480A482628E77D66DBA2066E5A6C9B13B7704A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:58:f4:34:e7:db:d3:94:8d:25:17:9d:54:
                    3d:0d:e6:e4:b4:40:e4:13:d1:dd:1b:dd:a4:0b:c5:
                    52:0d:b1:e7:32:8c:f2:dd:4f:65:d4:7b:5a:b0:69:
                    94:51:ad:5e:f1:1e:91:56:45:0c:0b:fb:0c:b8:01:
                    49:40:4f:6d:af:10:1f:2a:88:11:43:8e:f3:d7:c1:
                    b7:f1:80:e6:e9:72:1d:27:d4:2d:d4:44:c4:8c:02:
                    8f:dd:0a:eb:cf:96:85:41:2a:2d:11:2a:d9:b9:60:
                    ba:4f:1e:59:61:9c:6b:81:2b:f6:ca:62:2f:9f:33:
                    54:07:6c:29:f3:94:46:82:6b:8d:88:d0:8a:72:fe:
                    7e:3f:bf:bc:0a:20:02:2f:14:23:6d:63:bb:de:7f:
                    16:e6:7b:4f:20:5a:60:fc:9a:c4:1e:dc:2c:cd:8a:
                    80:e2:8a:62:34:45:7b:d3:79:5f:be:38:d7:9f:30:
                    43:70:20:ca:4c:63:38:8e:b1:43:5f:ec:f6:a5:6a:
                    8c:c0:c4:22:93:ef:59:fd:12:87:3d:ba:46:be:37:
                    e1:6c:38:e2:9a:7a:22:4a:68:c1:e8:8f:c5:7a:48:
                    5e:63:57:15:2d:23:33:2e:0c:6f:b2:2c:b9:1f:7b:
                    1e:4e:00:33:f7:09:78:ca:e0:4b:fc:b5:c8:8e:4e:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0A:48:26:28:E7:7D:66:DB:A2:06:6E:5A:6C:9B:13:B7:70:4A:14
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6638303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:f80::/42

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:03:71:59:00:a6:00:55:7b:c1:9a:15:c5:9e:21:12:b2:
         d8:ab:99:4f:02:a4:04:5a:7f:5f:ca:e8:5a:f2:32:3e:ae:2e:
         ef:9f:1b:bc:d0:75:fe:a3:78:6d:0f:2c:45:73:d7:8c:30:13:
         50:6a:03:7f:94:98:7d:aa:b8:60:d0:18:8b:c8:a7:49:d4:77:
         80:62:09:f6:72:67:58:e5:f5:7c:19:90:5f:0b:25:6f:38:13:
         82:4b:04:80:27:12:14:7b:37:5d:ea:ce:16:a1:09:67:0d:e7:
         96:77:0d:fe:a7:64:10:2d:4c:3c:78:9b:3d:fe:fd:42:9c:18:
         a1:8a:10:c6:6b:18:8b:12:a6:6b:f0:94:1e:b4:2a:5b:71:14:
         8d:fd:bb:99:59:f2:a2:dd:f0:bd:98:f7:39:34:b2:ba:dc:96:
         34:49:ee:b3:5a:ba:db:d7:03:ef:bf:05:d4:e0:7b:6f:d1:bd:
         b4:f6:22:67:e2:68:30:ac:70:33:04:b7:da:f2:d2:86:e6:e6:
         7d:0a:03:ec:fd:8f:ad:80:ae:56:51:9c:b9:89:6b:62:c4:31:
         79:9e:3f:ef:89:48:36:75:73:9e:58:df:cb:0c:6f:8c:c7:41:
         94:52:2d:79:40:1f:71:3a:e2:c5:ef:b5:e3:e7:c7:e8:99:bb:
         50:15:7e:0b
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUF0+eL150IF5NhHkHI39hpsTrqV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTA3MDMyMDM1MDZaFw0yNjA3MDIyMDQwMDZaMDMxMTAvBgNV
BAMTKDQ4MEE0ODI2MjhFNzdENjZEQkEyMDY2RTVBNkM5QjEzQjc3MDRBMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7Fj0NOfb05SNJRedVD0N5uS0
QOQT0d0b3aQLxVINsecyjPLdT2XUe1qwaZRRrV7xHpFWRQwL+wy4AUlAT22vEB8q
iBFDjvPXwbfxgObpch0n1C3URMSMAo/dCuvPloVBKi0RKtm5YLpPHllhnGuBK/bK
Yi+fM1QHbCnzlEaCa42I0Ipy/n4/v7wKIAIvFCNtY7vefxbme08gWmD8msQe3CzN
ioDiimI0RXvTeV++ONefMENwIMpMYziOsUNf7PalaozAxCKT71n9Eoc9uka+N+Fs
OOKaeiJKaMHoj8V6SF5jVxUtIzMuDG+yLLkfex5OADP3CXjK4Ev8tciOTqTrAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUSApIJijnfWbbogZuWmybE7dwShQwHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzMyMzgzMDMzM2E2NjM2NjEzMDNhNjYz
ODMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNjM2MzkzMDM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAP2oA+AMA0GCSqGSIb3DQEBCwUAA4IBAQAG+wNxWQCmAFV7wZoVxZ4hErLY
q5lPAqQEWn9fyuha8jI+ri7vnxu80HX+o3htDyxFc9eMMBNQagN/lJh9qrhg0BiL
yKdJ1HeAYgn2cmdY5fV8GZBfCyVvOBOCSwSAJxIUezdd6s4WoQlnDeeWdw3+p2QQ
LUw8eJs9/v1CnBihihDGaxiLEqZr8JQetCpbcRSN/buZWfKi3fC9mPc5NLK63JY0
Se6zWrrb1wPvvwXU4Htv0b209iJn4mgwrHAzBLfa8tKG5uZ9CgPs/Y+tgK5WUZy5
iWtixDF5nj/viUg2dXOeWN/LDG+Mx0GUUi15QB9xOuLF77Xj58fombtQFX4L
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:41:42 2025 by rpki-client