Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030343a3a2f34382d3438203d3e20323637383233.roa
File:                     323830333a643333303a313030343a3a2f34382d3438203d3e20323637383233.roa (raw, json)
Hash identifier:          82tiIwbDzo++Kjd/WgRQl5IF2wp07MbH3xxYhNA+eQ0=
Subject key identifier:   29:DC:08:EA:EF:D9:DE:42:A5:6E:06:0C:6D:56:E6:67:0D:96:FC:B1
Certificate issuer:       /CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
Certificate serial:       5F195385CDEBCF3C7F0758596753D7493B18DDBE
Authority key identifier: 6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030343a3a2f34382d3438203d3e20323637383233.roa
Signing time:             Wed 26 Aug 2026 13:55:03 +0000
ROA not before:           Wed 26 Aug 2026 13:50:03 +0000
ROA not after:            Wed 25 Aug 2027 13:55:03 +0000
asID:                     267823
IP address blocks:        2803:d330:1004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:19:53:85:cd:eb:cf:3c:7f:07:58:59:67:53:d7:49:3b:18:dd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
        Validity
            Not Before: Aug 26 13:50:03 2026 GMT
            Not After : Aug 25 13:55:03 2027 GMT
        Subject: CN=29DC08EAEFD9DE42A56E060C6D56E6670D96FCB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:78:7b:42:1e:b1:19:0f:53:47:c6:a6:32:
                    f6:43:4f:98:50:bc:f8:29:be:68:e4:01:21:91:ec:
                    c2:fe:91:12:1f:90:4a:96:0e:96:5a:af:51:76:78:
                    4b:cc:37:1e:24:27:e3:71:ce:aa:93:39:5e:15:66:
                    d3:95:e3:60:c6:e4:95:5f:dc:57:63:04:35:dc:b0:
                    12:d2:3f:6d:4e:5c:dc:b2:59:c5:51:b3:a2:8b:4c:
                    84:76:30:90:dc:b3:3d:6a:8e:5b:26:c2:9b:ed:a2:
                    09:ab:bb:43:fb:29:62:e4:43:68:04:90:50:91:6c:
                    0c:b9:c8:84:9e:a8:9f:f4:e8:0d:19:96:42:92:9a:
                    13:39:cb:73:aa:f7:ab:53:35:0a:6a:a2:f8:d6:3c:
                    94:8f:59:ab:82:0d:a2:e0:b0:22:b5:3b:27:6c:61:
                    e6:8c:d0:2c:a9:d2:6f:d7:a5:0d:bd:c0:d9:86:87:
                    e7:d9:1a:80:43:26:d1:3a:5d:89:c0:bc:39:01:30:
                    d5:82:67:e8:63:22:0b:8f:e0:5d:c3:93:42:48:2e:
                    a7:bf:ad:1c:31:57:d4:81:ed:ea:e3:5e:d8:57:51:
                    fd:2b:29:97:57:18:8c:0e:be:03:0f:fe:2f:09:17:
                    9f:a4:73:08:e1:6d:83:77:b2:ac:bb:f5:a5:64:0a:
                    aa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DC:08:EA:EF:D9:DE:42:A5:6E:06:0C:6D:56:E6:67:0D:96:FC:B1
            X509v3 Authority Key Identifier:
                keyid:6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030343a3a2f34382d3438203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d330:1004::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:08:4a:10:aa:49:be:b6:3b:10:73:a3:3b:a1:fc:be:56:60:
         eb:49:72:21:85:8b:34:95:1b:72:ad:a8:f1:0b:5d:5d:a8:5e:
         5e:cf:5c:4a:f4:83:b5:52:29:73:71:e1:51:c5:76:c3:15:36:
         f4:01:64:20:d1:ed:11:09:95:f2:0c:4b:7c:c5:bc:c6:7f:28:
         1b:ec:ac:36:a9:c3:63:84:b4:ab:b1:1f:40:f8:ba:71:1b:d7:
         78:4b:0f:a5:ea:d9:13:1d:25:e8:95:2d:52:01:d9:58:ae:40:
         a7:fa:08:10:8d:05:ec:ae:e7:75:2d:7f:ab:21:30:15:e3:74:
         44:c9:81:51:c1:a7:9e:18:65:a7:ba:51:6a:e0:94:85:e6:70:
         5c:18:c7:26:b1:c2:8c:b7:37:5a:f2:14:fa:d2:cb:53:3d:f7:
         1b:2a:6a:0a:6a:ad:59:e8:1f:88:f0:f3:c9:5d:0f:32:9f:69:
         7d:2e:15:dc:f4:a7:c9:be:9f:c2:08:f3:d3:a5:b7:08:45:79:
         19:eb:21:89:79:be:5d:0d:d5:8e:94:f2:18:3f:2b:25:f7:af:
         4f:f5:3f:f7:44:e6:76:d4:9a:c5:f9:7f:81:aa:ff:8f:80:d6:
         4e:a6:c0:62:5a:03:47:21:b4:65:53:14:1f:48:cd:7f:e3:6f:
         4c:7f:00:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:30 2026 by rpki-client