Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030333a3a2f34382d3438203d3e20323637383233.roa
File:                     323830333a643333303a313030333a3a2f34382d3438203d3e20323637383233.roa (raw, json)
Hash identifier:          pqdp/85yulYxC/wrSdBcBl47ZOSBKbvzn6oFxdimCxk=
Subject key identifier:   A0:DF:7B:7E:14:09:30:4A:3B:84:ED:EB:CC:DA:09:E8:17:41:FD:BA
Certificate issuer:       /CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
Certificate serial:       0FEB6420D9236A708789D6CAB58FA5D37463A34B
Authority key identifier: 6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030333a3a2f34382d3438203d3e20323637383233.roa
Signing time:             Wed 26 Aug 2026 13:55:02 +0000
ROA not before:           Wed 26 Aug 2026 13:50:02 +0000
ROA not after:            Wed 25 Aug 2027 13:55:02 +0000
asID:                     267823
IP address blocks:        2803:d330:1003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:eb:64:20:d9:23:6a:70:87:89:d6:ca:b5:8f:a5:d3:74:63:a3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
        Validity
            Not Before: Aug 26 13:50:02 2026 GMT
            Not After : Aug 25 13:55:02 2027 GMT
        Subject: CN=A0DF7B7E1409304A3B84EDEBCCDA09E81741FDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:86:d0:e9:70:7c:60:07:66:5b:95:48:6e:44:
                    13:00:89:d1:ea:82:7c:6d:5f:af:5e:95:5a:2b:a5:
                    00:8a:4e:21:6d:36:8d:00:cc:3d:16:98:e4:db:17:
                    0b:b8:8e:e3:8a:7d:29:ed:d6:86:f9:c8:61:28:8a:
                    a8:b0:52:ef:ab:d0:9f:50:e4:3f:c2:ec:b3:59:bb:
                    5d:30:b6:da:53:b3:c6:ea:a6:a4:cc:ca:d8:ef:57:
                    96:c5:27:f3:e4:46:99:e6:21:70:35:1a:1f:6f:bd:
                    50:94:bd:67:b7:4e:1b:23:bf:cf:ef:8d:15:c5:55:
                    f7:dc:4b:64:fd:8a:8f:a6:f4:0b:c9:c0:01:ff:17:
                    3e:03:94:86:31:3f:1f:cc:2f:5a:49:cb:73:de:9e:
                    ca:0e:d5:36:9f:e7:ea:cb:4b:a0:40:b6:2a:a3:b6:
                    3a:5e:8b:54:e4:6b:13:6a:ad:36:04:63:21:5f:5b:
                    88:89:96:a8:cd:37:7d:d5:40:d0:a3:17:67:b2:b9:
                    e9:b5:db:dd:e9:e9:aa:26:a8:47:dc:2c:90:a5:8c:
                    e4:fc:bf:bd:53:e4:c5:99:77:0e:ba:37:96:85:48:
                    42:6a:74:07:36:c4:49:b9:b3:27:f0:c5:e3:4a:ba:
                    d7:cf:e2:0f:20:f0:60:62:c8:67:01:82:50:71:88:
                    f5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DF:7B:7E:14:09:30:4A:3B:84:ED:EB:CC:DA:09:E8:17:41:FD:BA
            X509v3 Authority Key Identifier:
                keyid:6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030333a3a2f34382d3438203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d330:1003::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:c7:af:38:ec:de:bb:db:b7:17:a4:c8:9e:9d:04:c8:48:6c:
         07:a0:1e:0e:4a:61:7b:02:9b:22:6b:c8:7e:9c:dd:63:af:64:
         13:33:0a:86:d9:c4:df:71:d4:57:6f:f8:b6:b2:70:79:3a:3c:
         56:95:09:f0:ac:5d:f0:6c:a8:9b:e1:21:4e:37:d5:85:4c:58:
         52:f5:9d:63:ac:18:73:cc:44:a2:e2:eb:4e:67:67:76:3a:b2:
         6b:75:43:1b:77:b3:88:ff:0b:b7:ed:de:88:11:b0:e3:a0:0f:
         02:bc:91:9f:b6:51:73:81:ee:b3:47:92:87:1c:7a:d5:c4:2b:
         43:fe:5e:5f:53:ba:6e:19:a8:26:8e:a8:d5:22:88:15:fd:9a:
         1b:44:e4:6d:1d:ed:fc:f7:08:3d:83:04:e6:90:6d:47:12:f9:
         36:d3:88:57:da:8f:29:ab:23:bd:b6:6f:80:da:29:6f:3c:7c:
         9a:4b:1d:6e:0d:e2:d3:96:37:80:c8:7f:8e:8e:36:2c:29:2c:
         29:4a:aa:e6:c7:19:26:4f:2f:27:3c:e1:2d:16:6b:f4:0f:f3:
         f4:a9:f4:f7:db:b6:e3:c4:28:20:23:ef:a2:f6:14:76:37:35:
         28:cf:8b:15:23:63:a2:12:3d:48:f1:99:08:01:f6:cd:02:d0:
         56:61:2f:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:36 2026 by rpki-client