Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030353a3a2f34382d3438203d3e20323637383233.roa
File:                     323830333a643333303a313030353a3a2f34382d3438203d3e20323637383233.roa (raw, json)
Hash identifier:          6ZBA/crCbb+GveIxuEaFRl02W2DrSckFsjCquQ7TV+g=
Subject key identifier:   B0:32:A3:2C:FB:FF:7B:20:46:F8:EE:DA:19:F3:D8:37:78:F7:14:ED
Certificate issuer:       /CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
Certificate serial:       04802DB52B2DD99D78F5B54E43E71E6E927BA2F3
Authority key identifier: 6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030353a3a2f34382d3438203d3e20323637383233.roa
Signing time:             Wed 26 Aug 2026 13:55:06 +0000
ROA not before:           Wed 26 Aug 2026 13:50:06 +0000
ROA not after:            Wed 25 Aug 2027 13:55:06 +0000
asID:                     267823
IP address blocks:        2803:d330:1005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:80:2d:b5:2b:2d:d9:9d:78:f5:b5:4e:43:e7:1e:6e:92:7b:a2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
        Validity
            Not Before: Aug 26 13:50:06 2026 GMT
            Not After : Aug 25 13:55:06 2027 GMT
        Subject: CN=B032A32CFBFF7B2046F8EEDA19F3D83778F714ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:7f:0e:bf:55:98:42:d6:a8:35:a3:ce:c0:
                    d5:d7:2d:2e:40:bb:fe:e6:44:24:85:4e:2f:2b:af:
                    62:9a:0c:8e:62:d8:8e:8f:8b:5e:ac:6a:30:5e:d2:
                    a9:c6:2f:cd:e0:34:4b:57:be:72:a3:39:a3:ab:a4:
                    d2:76:68:ae:0f:b3:0b:9e:20:c8:d2:30:5d:0e:88:
                    87:98:8b:6e:77:c4:bb:12:63:c6:54:32:9f:c7:54:
                    cb:0b:de:b6:01:1d:60:15:83:7d:f2:fd:fb:c6:c7:
                    5e:c6:32:21:79:de:68:3a:3b:6f:a6:f9:54:1e:d1:
                    17:ff:71:e0:91:2e:b8:60:42:6f:07:2a:a8:b9:a9:
                    0a:48:20:e9:78:49:dc:d5:33:65:4f:d9:fd:c2:15:
                    55:a1:1b:8c:5a:50:3c:4f:ba:20:38:45:c2:56:cf:
                    be:1e:1b:be:14:aa:d7:2a:dd:21:fb:5e:65:55:0e:
                    43:4c:1f:af:eb:f2:ab:d1:53:f5:d4:75:46:59:1e:
                    a7:2f:21:07:b9:68:30:9c:d5:d5:e1:e4:a0:5d:c0:
                    91:e1:28:6c:9b:9b:0a:19:d8:ba:56:0a:33:ee:49:
                    c8:64:73:1e:e8:3b:90:a5:cd:1c:28:b4:dd:f6:26:
                    98:fa:4d:f1:c2:71:bc:9f:5c:6f:de:7c:8e:57:1e:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:32:A3:2C:FB:FF:7B:20:46:F8:EE:DA:19:F3:D8:37:78:F7:14:ED
            X509v3 Authority Key Identifier:
                keyid:6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030353a3a2f34382d3438203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d330:1005::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:68:c5:cc:49:c1:9f:7c:af:0a:09:91:d2:c3:05:a8:b4:ea:
         29:ba:74:72:86:66:49:c5:07:46:e2:53:fb:04:bd:5a:07:c5:
         87:f7:15:0b:c0:b3:67:60:97:01:cd:3c:d1:1a:9a:39:bf:ae:
         d1:b8:ba:fc:d5:cf:a4:bf:37:48:42:5c:c6:bf:86:db:39:46:
         7d:18:4a:09:ab:68:73:50:00:68:9a:7b:e7:6d:fe:6d:83:53:
         49:60:ca:08:35:d5:32:f3:66:f6:18:82:54:f4:3e:be:71:62:
         49:52:29:07:14:5b:b6:0c:40:ba:76:68:09:6e:82:2e:a8:fc:
         48:25:bd:40:fd:da:d2:d1:eb:c3:d4:68:1f:ca:91:cb:03:f2:
         91:64:86:84:70:e2:2b:01:e9:5b:17:41:63:a1:56:15:01:68:
         4a:c8:e7:69:f4:06:af:b5:47:44:c4:eb:91:85:0a:81:bc:93:
         39:4d:cf:1e:56:2b:7c:c7:8d:40:83:e0:42:6f:12:56:10:4f:
         b7:dc:e8:6f:69:90:07:91:6b:99:73:d4:5c:fb:95:05:1d:db:
         a7:2c:73:9c:14:ea:3d:39:b5:de:a4:25:ff:cd:80:35:19:67:
         31:2d:b6:96:1f:78:00:bd:6b:07:13:27:d9:e0:02:13:bf:07:
         d6:41:67:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:30 2026 by rpki-client