Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030313a3a2f34382d3438203d3e20323637383233.roa
File:                     323830333a643333303a313030313a3a2f34382d3438203d3e20323637383233.roa (raw, json)
Hash identifier:          F0Rz1W2kRz41bPkALcO2XsH+IXUwY3mR6JaL+oZDro4=
Subject key identifier:   E9:C2:81:AE:E3:D3:D1:08:A5:E4:5D:24:AE:48:BB:2F:33:3B:0C:D8
Certificate issuer:       /CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
Certificate serial:       2D29A564F53A2DD2543ED250A9AEA2D7D5EFE6
Authority key identifier: 6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030313a3a2f34382d3438203d3e20323637383233.roa
Signing time:             Wed 26 Aug 2026 13:55:05 +0000
ROA not before:           Wed 26 Aug 2026 13:50:05 +0000
ROA not after:            Wed 25 Aug 2027 13:55:05 +0000
asID:                     267823
IP address blocks:        2803:d330:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:29:a5:64:f5:3a:2d:d2:54:3e:d2:50:a9:ae:a2:d7:d5:ef:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
        Validity
            Not Before: Aug 26 13:50:05 2026 GMT
            Not After : Aug 25 13:55:05 2027 GMT
        Subject: CN=E9C281AEE3D3D108A5E45D24AE48BB2F333B0CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1d:ca:8a:5c:cd:64:e7:1e:2a:16:33:f9:cf:
                    b3:b9:c4:2e:a1:db:12:04:a2:26:95:32:a8:88:99:
                    c3:7d:1a:01:6e:1b:bf:a8:6e:46:ab:88:03:d6:29:
                    6e:41:c8:dd:d2:89:66:12:cd:b5:63:fa:90:b5:f1:
                    4a:cc:04:9a:e1:b1:3f:98:12:ae:e9:33:b3:5a:db:
                    c8:50:05:2b:18:6e:cf:b0:cd:04:92:6e:4b:bb:f7:
                    86:03:f7:8c:c7:4a:57:0a:67:e6:6e:77:73:f4:11:
                    3b:cb:bf:04:9c:84:33:f5:cc:cd:ce:26:10:d3:ff:
                    70:98:dd:1c:c1:9e:55:68:53:c2:e0:ba:cf:78:f3:
                    3f:1a:c6:13:8a:de:a9:a0:6f:83:b3:ab:df:00:60:
                    43:f1:0f:10:60:dc:ca:b9:d0:90:ab:f8:66:c0:ef:
                    25:75:cb:8e:b4:0b:cc:57:d7:f5:22:29:e9:ea:e0:
                    88:5a:e8:ef:48:a3:c2:df:80:b8:ee:74:00:1b:ea:
                    27:2f:de:ed:65:ad:75:fe:58:24:72:e7:f9:dd:b6:
                    ec:e5:67:14:6a:df:fa:e6:ed:78:b9:ab:46:2c:68:
                    ae:52:79:72:fb:56:43:78:ee:3e:01:2e:93:81:00:
                    43:e0:c9:24:b1:a1:1a:2d:1d:79:f9:d2:f2:55:f8:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C2:81:AE:E3:D3:D1:08:A5:E4:5D:24:AE:48:BB:2F:33:3B:0C:D8
            X509v3 Authority Key Identifier:
                keyid:6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030313a3a2f34382d3438203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d330:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:7e:3c:d2:8b:03:7c:14:de:85:dc:fb:f0:91:d5:19:3d:62:
         df:b4:cb:ea:bc:c7:cd:8f:14:fd:10:6c:7f:36:5b:00:3b:30:
         c0:bf:8a:10:22:b6:41:a6:6e:fe:ba:6a:4f:6b:1c:3c:e3:1a:
         46:6f:32:86:d8:19:fa:be:43:0f:9d:6f:4c:1e:47:5a:38:f4:
         60:9f:40:ab:e9:fc:5a:fb:09:f3:36:dc:c1:a2:95:8a:ce:a3:
         f5:95:a1:e1:9a:a5:19:f2:07:f9:e6:69:09:60:0d:f1:81:f1:
         ac:2e:b1:11:a0:8c:45:c1:1a:0a:b8:32:52:08:8b:bb:0d:1f:
         a1:4e:dd:18:be:98:ec:8f:8d:33:50:2d:12:c0:fd:8c:78:a1:
         ae:d6:c9:6c:84:30:66:95:52:72:bf:23:06:17:2a:86:f9:68:
         6f:c4:d8:ac:64:f4:83:b4:ee:d7:bc:a8:de:9d:a3:ef:78:cf:
         22:41:58:3d:48:98:a0:8f:d1:e4:3c:73:d8:b8:06:6c:f6:dc:
         8b:c3:12:5c:77:25:bc:e4:e3:63:9e:b8:dc:58:5f:84:c6:ea:
         cf:9b:5f:18:82:f6:71:69:c9:e2:ab:73:e2:f5:7f:26:af:a8:
         c6:3f:bd:4e:c3:35:a9:0e:a4:1c:7a:64:08:87:96:15:dc:24:
         16:c3:a1:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:40:10 2026 by rpki-client