Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030323a3a2f34382d3438203d3e20323637383233.roa
File:                     323830333a643333303a313030323a3a2f34382d3438203d3e20323637383233.roa (raw, json)
Hash identifier:          t19ni2sKD0vBDm8oUzMpuTQ/SBy1DfTMbYjLvPf6o2c=
Subject key identifier:   D1:B3:39:2A:71:BC:11:84:63:63:40:F7:10:2A:D1:0E:12:5F:A4:36
Certificate issuer:       /CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
Certificate serial:       6D5148B33294D7E196B9D9AD73720C7A64643C2A
Authority key identifier: 6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030323a3a2f34382d3438203d3e20323637383233.roa
Signing time:             Wed 26 Aug 2026 13:55:01 +0000
ROA not before:           Wed 26 Aug 2026 13:50:01 +0000
ROA not after:            Wed 25 Aug 2027 13:55:01 +0000
asID:                     267823
IP address blocks:        2803:d330:1002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:51:48:b3:32:94:d7:e1:96:b9:d9:ad:73:72:0c:7a:64:64:3c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
        Validity
            Not Before: Aug 26 13:50:01 2026 GMT
            Not After : Aug 25 13:55:01 2027 GMT
        Subject: CN=D1B3392A71BC1184636340F7102AD10E125FA436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4b:3c:be:25:a8:18:33:1b:d6:cf:95:30:55:
                    73:90:8e:cc:b5:c6:3f:24:bc:d8:2e:ac:a5:a9:de:
                    d5:ae:20:3e:d2:90:2a:e7:fe:a2:41:9f:8c:c9:05:
                    29:9a:0a:79:7f:1b:6e:0e:45:ff:34:e3:35:73:57:
                    c4:28:f0:5f:4d:26:85:55:de:35:ac:d4:fb:04:40:
                    2c:aa:a4:8a:be:df:5c:45:02:18:82:59:5b:ee:b0:
                    a1:e3:10:5f:be:09:c9:35:64:1f:78:9e:27:b5:b5:
                    52:c3:62:cd:ee:90:21:69:4b:2a:49:20:cf:6d:63:
                    35:f2:f7:b8:06:11:74:6b:6a:34:23:07:e1:4b:67:
                    9e:c7:6e:01:b1:d2:32:6a:37:b8:4a:4b:8a:bf:06:
                    88:58:5b:33:24:74:4a:15:16:08:00:87:17:a1:9f:
                    81:b3:48:07:bd:5b:d1:3d:03:b7:57:f2:fb:91:8f:
                    11:a4:0e:b0:4a:02:2b:0b:47:15:21:32:5f:b4:e9:
                    1c:84:25:34:ab:35:86:3f:0f:19:9f:9e:0f:d7:17:
                    80:a5:ab:25:ce:4e:17:d4:65:5f:8b:91:68:41:49:
                    f5:ca:62:df:fa:01:4c:fd:2a:ea:ee:59:a3:ff:59:
                    b6:a9:44:3a:d9:f1:37:a7:5c:43:f0:c1:b9:09:01:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B3:39:2A:71:BC:11:84:63:63:40:F7:10:2A:D1:0E:12:5F:A4:36
            X509v3 Authority Key Identifier:
                keyid:6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030323a3a2f34382d3438203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d330:1002::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:58:94:b5:68:8c:f6:99:e7:cd:fd:b9:07:e6:42:c5:0a:ed:
         94:ec:ba:cd:0a:03:51:55:5c:54:8f:04:8b:73:dc:74:59:0b:
         b2:d5:7b:fb:88:1a:e1:b0:7a:d4:3f:9c:b2:40:68:d9:ff:55:
         1e:de:e8:9a:d7:40:a6:ff:df:5f:b8:c5:d8:6f:8a:f7:68:36:
         95:f7:03:af:78:92:ad:18:31:03:f1:95:af:b8:b3:fb:09:07:
         0c:0f:81:b7:8a:74:12:d9:9e:f3:b0:03:37:a5:21:25:4c:7d:
         37:ae:70:2a:4b:be:98:67:7e:28:5f:95:0e:56:2a:ce:3b:a0:
         3e:10:ea:36:ff:f9:10:a8:ab:25:01:d3:ae:66:5f:37:12:e4:
         6a:9a:3e:51:51:bc:f8:4a:8a:5b:4e:31:5d:45:65:0a:3a:07:
         a0:cb:05:83:f1:30:fe:78:e8:ac:35:18:ec:5b:b3:77:36:1d:
         b3:16:96:5b:dc:a0:ac:5e:56:e1:00:f9:56:c7:7e:cb:7c:6f:
         27:fe:d8:93:42:8b:64:89:15:7c:d2:df:a6:79:10:13:9d:52:
         b8:51:4b:ab:13:c7:53:ad:a3:d1:fd:2b:e1:41:ec:9c:43:ee:
         15:b9:30:96:b4:a9:2c:2a:54:25:56:9b:6e:be:df:3e:08:5f:
         0c:3a:2d:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:36 2026 by rpki-client