Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030613a3a2f34382d3438203d3e20323637383233.roa
File:                     323830333a643333303a313030613a3a2f34382d3438203d3e20323637383233.roa (raw, json)
Hash identifier:          sj/8kRWCdK/MVpw1xz4bpivb9kG6UbzxV1L9Swltsbg=
Subject key identifier:   59:1C:E8:2E:C6:79:C2:B8:F6:CD:2C:E9:F8:BE:46:3C:23:B8:C7:E9
Certificate issuer:       /CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
Certificate serial:       61DDA27501405CA332540ED2D674D4B1D573F057
Authority key identifier: 6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030613a3a2f34382d3438203d3e20323637383233.roa
Signing time:             Wed 26 Aug 2026 13:55:04 +0000
ROA not before:           Wed 26 Aug 2026 13:50:04 +0000
ROA not after:            Wed 25 Aug 2027 13:55:04 +0000
asID:                     267823
IP address blocks:        2803:d330:100a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:dd:a2:75:01:40:5c:a3:32:54:0e:d2:d6:74:d4:b1:d5:73:f0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
        Validity
            Not Before: Aug 26 13:50:04 2026 GMT
            Not After : Aug 25 13:55:04 2027 GMT
        Subject: CN=591CE82EC679C2B8F6CD2CE9F8BE463C23B8C7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:7b:4c:ef:3e:df:7f:85:72:98:e3:b6:03:
                    c0:59:9c:76:e4:67:83:b7:6a:5a:58:08:6e:98:01:
                    b6:89:c6:d6:fe:4b:60:bd:b8:62:fa:b4:9d:50:37:
                    70:8d:17:41:d6:12:dd:dc:18:d1:c3:88:3e:b7:6d:
                    c8:bb:e6:bb:56:2c:43:c6:91:65:4b:4a:44:4d:a9:
                    ae:81:06:85:78:7c:a9:c2:b1:d4:41:82:f1:77:4f:
                    4f:8f:52:c0:ce:04:f0:75:ef:49:84:a4:9b:87:59:
                    db:0e:72:19:e1:d2:85:a2:0c:09:bf:b5:33:94:68:
                    c2:40:28:f1:13:c8:e7:e4:ec:8c:f4:a3:8a:17:ca:
                    e7:92:eb:51:ad:4b:8c:4d:3d:15:5d:01:8b:b5:ed:
                    16:e8:73:c3:39:2d:64:a3:b4:62:e2:50:f1:ad:16:
                    68:a1:75:14:d9:76:cb:73:61:37:d6:d8:3c:bc:42:
                    b6:14:a3:27:17:21:a2:fd:17:e6:99:97:ca:b8:0d:
                    c0:72:e6:81:c4:8e:1f:ff:ac:3a:87:9c:d7:99:94:
                    7d:48:17:0c:5d:bc:6b:19:fe:01:37:19:a6:d0:c3:
                    8f:56:2a:5f:ce:08:3e:9f:5e:ce:82:4d:7e:52:a5:
                    ee:e0:28:13:9d:a8:e4:98:27:11:ef:3e:fa:9f:0d:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1C:E8:2E:C6:79:C2:B8:F6:CD:2C:E9:F8:BE:46:3C:23:B8:C7:E9
            X509v3 Authority Key Identifier:
                keyid:6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030613a3a2f34382d3438203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d330:100a::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:59:2a:f9:96:92:d6:58:19:bb:7b:1e:af:88:46:2b:da:36:
         41:05:55:a0:79:0c:52:2d:91:83:eb:23:6d:05:27:76:02:49:
         36:c7:c2:fa:4d:ab:96:15:9b:bf:76:26:a7:77:4e:60:b4:08:
         45:4d:c7:4b:b0:99:09:d3:c7:d7:b5:6d:90:18:16:61:eb:41:
         01:7d:14:3a:15:c3:0c:0f:33:b1:21:b4:29:8c:34:d4:0f:39:
         b2:ba:37:b1:8c:34:97:4e:79:7d:1c:23:33:e8:2f:3e:1f:0a:
         66:59:7b:8d:01:67:39:5c:62:18:fd:e4:de:42:66:fe:11:64:
         04:cf:ef:46:03:5c:81:90:da:73:f1:36:df:ef:29:12:80:94:
         b1:6a:1a:ad:ce:a6:71:6e:e5:3a:80:a1:e7:4a:ba:50:02:bc:
         27:43:b5:ad:fc:18:05:1b:c3:8d:26:a9:7d:40:a3:4a:c6:a2:
         97:5f:1f:7e:b0:1f:bf:60:30:b8:05:5b:67:a3:93:b6:c7:f4:
         f8:bb:7b:56:c4:36:77:f1:55:e3:1f:b2:fa:8e:0c:3a:33:07:
         ae:1c:9e:f4:c6:10:bd:3c:45:50:8a:c6:6d:57:55:ea:d5:68:
         0e:9d:8a:61:8d:06:6e:40:a6:90:dc:92:08:68:f0:06:f4:27:
         27:30:bc:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:33 2026 by rpki-client