Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6663303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6663303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          ORbyxJ2ITZ5bh70JvVuzIE7mLAJllm4JU3/FphFfuXc=
Subject key identifier:   EF:BD:80:28:C3:23:96:DE:02:EA:39:95:ED:0D:3D:2D:B6:CD:60:83
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       48E2F89B7DFF1E9C63BE4BB42CA8697458086446
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6663303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:06 +0000
ROA not before:           Thu 03 Jul 2025 20:35:06 +0000
ROA not after:            Thu 02 Jul 2026 20:40:06 +0000
asID:                     266904
IP address blocks:        2803:f6a0:fc0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e2:f8:9b:7d:ff:1e:9c:63:be:4b:b4:2c:a8:69:74:58:08:64:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:06 2025 GMT
            Not After : Jul  2 20:40:06 2026 GMT
        Subject: CN=EFBD8028C32396DE02EA3995ED0D3D2DB6CD6083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9a:bf:15:5c:1e:e7:e4:57:55:12:b7:dc:fc:
                    8f:1b:d3:e9:c2:87:56:b6:e2:4a:bc:e3:b7:6c:bc:
                    64:19:9d:9b:f4:24:86:7c:ea:ff:17:a6:20:74:7a:
                    60:a4:de:cf:b1:34:0a:7b:42:63:b4:12:6b:3a:c6:
                    d7:33:bc:b0:06:04:1d:bb:c2:33:14:ac:3c:8f:c4:
                    a9:22:73:b6:12:27:87:90:0b:8e:be:90:73:ea:ff:
                    4e:a4:1d:5b:b9:dd:28:c4:71:a0:79:83:d0:e1:dc:
                    85:d1:57:a1:8c:7b:00:56:0a:c4:95:37:b4:4d:95:
                    e2:cf:34:78:2c:0f:af:c3:07:c0:0c:ff:06:1a:df:
                    4a:e0:3a:64:50:03:f9:77:53:1e:fb:8e:ca:35:38:
                    02:17:f9:1f:e7:28:cb:54:fa:66:a9:3c:cd:dc:cc:
                    41:69:70:74:cb:57:b7:80:1f:77:49:e2:29:4d:56:
                    d5:b0:a2:f3:0b:ea:d4:09:30:86:8c:6c:c3:17:f8:
                    c7:aa:c6:01:4c:b5:5e:21:e4:d4:3b:96:57:39:b7:
                    39:90:71:e5:47:22:11:9f:39:00:0b:9e:e0:99:a0:
                    ae:ad:32:dd:d6:b9:21:cd:a0:c5:f4:69:18:ca:1d:
                    a8:29:6d:4f:34:3f:f2:78:f2:bc:6e:fa:42:3b:51:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BD:80:28:C3:23:96:DE:02:EA:39:95:ED:0D:3D:2D:B6:CD:60:83
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6663303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:fc0::/42

    Signature Algorithm: sha256WithRSAEncryption
         40:4b:93:3b:59:ba:27:6a:43:46:a7:05:9f:55:11:16:7a:38:
         a0:9c:80:17:b3:d1:60:03:6e:23:35:d0:78:13:e4:0c:94:6e:
         fc:89:6b:bb:ed:66:ee:51:a7:65:35:d7:e6:8e:38:92:84:44:
         93:ec:dd:9e:9a:a7:6e:08:ad:eb:6c:99:e5:40:93:63:ef:fb:
         69:87:2a:b6:b7:0f:59:77:c7:9a:2d:36:78:b6:28:a0:d4:d0:
         32:d0:3e:1a:f6:d9:f0:e5:04:f7:11:b9:e3:65:1d:bb:f3:a8:
         e1:e6:3c:ed:e3:ab:24:51:8e:7e:a0:7e:bd:d7:d1:ab:31:f5:
         6e:d0:c1:8b:b7:ee:60:87:22:06:85:e5:67:a1:64:bc:4d:4e:
         6b:93:5d:1e:94:01:5b:2a:9f:64:cd:5f:c8:ac:4b:96:a0:64:
         85:33:26:20:91:49:f4:34:c1:88:a0:9e:11:f7:89:26:86:81:
         e3:85:02:94:33:0d:ef:ef:8b:63:f6:af:70:37:42:38:9e:1e:
         3d:d4:29:d2:49:dc:c5:ef:15:f8:a9:b6:12:b2:17:50:af:08:
         bc:65:7a:43:7d:cb:75:3b:5a:bd:31:25:ef:f2:ff:49:74:4e:
         e1:ac:27:df:ac:79:4a:a7:7d:6d:e0:8c:44:df:a8:80:82:64:
         9b:5b:09:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:38:50 2025 by rpki-client