Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030623a3a2f34382d3438203d3e20323637383233.roa
File:                     323830333a643333303a313030623a3a2f34382d3438203d3e20323637383233.roa (raw, json)
Hash identifier:          +zwZy6SYOFmjDNm5Y2D2L1+5B3RQI/t2/fTSgB9B/nU=
Subject key identifier:   52:9F:07:F6:5A:60:26:CB:51:5F:07:0D:33:AD:D1:1F:80:25:4F:82
Certificate issuer:       /CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
Certificate serial:       2D57AE924E188571CEEBC436319E9C32CB16BDAC
Authority key identifier: 6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030623a3a2f34382d3438203d3e20323637383233.roa
Signing time:             Wed 26 Aug 2026 13:55:00 +0000
ROA not before:           Wed 26 Aug 2026 13:50:00 +0000
ROA not after:            Wed 25 Aug 2027 13:55:00 +0000
asID:                     267823
IP address blocks:        2803:d330:100b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:57:ae:92:4e:18:85:71:ce:eb:c4:36:31:9e:9c:32:cb:16:bd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
        Validity
            Not Before: Aug 26 13:50:00 2026 GMT
            Not After : Aug 25 13:55:00 2027 GMT
        Subject: CN=529F07F65A6026CB515F070D33ADD11F80254F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:2c:2c:0e:88:01:0e:dc:6c:a4:c6:1d:75:
                    ad:be:46:29:42:e1:45:99:9d:6d:ec:28:c1:c2:9f:
                    83:54:98:e3:57:2e:b7:05:54:24:09:f1:22:75:3a:
                    18:54:a6:7c:f3:0b:f9:c2:9c:24:7a:d6:f2:ee:b3:
                    9c:7a:3f:09:d3:de:17:2d:e1:a8:c5:5b:03:33:9b:
                    be:3c:2e:58:91:2b:9f:da:82:9e:e2:a1:2b:87:f1:
                    54:2d:af:88:5e:90:cb:e8:e2:a2:12:7f:7d:ae:a7:
                    f2:52:09:e9:f1:b7:50:94:82:5b:4d:3e:4e:c7:5f:
                    da:85:e1:a3:6c:10:6b:7d:be:65:90:51:2c:1d:a3:
                    17:05:ba:e0:ca:fd:9a:18:18:1c:1c:00:09:b7:a2:
                    c4:c9:dd:ab:f4:36:aa:cc:04:73:86:67:4d:94:10:
                    7a:70:8f:f7:a4:ac:da:fa:0c:03:9f:21:4f:76:79:
                    fa:fc:37:da:e0:86:4d:28:b0:6b:97:99:05:dd:18:
                    0a:4a:f7:20:67:f9:98:31:a1:bf:8f:72:aa:b6:0d:
                    c3:64:4e:f9:bb:37:4d:a3:08:ce:0e:22:1f:d9:97:
                    ba:32:99:d3:97:54:72:1f:73:df:7b:4d:36:90:87:
                    27:ea:1d:38:e1:aa:f8:de:24:e1:f6:a4:32:0a:a7:
                    6f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9F:07:F6:5A:60:26:CB:51:5F:07:0D:33:AD:D1:1F:80:25:4F:82
            X509v3 Authority Key Identifier:
                keyid:6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030623a3a2f34382d3438203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d330:100b::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:94:ec:fb:c6:0d:ef:b7:3d:dd:90:56:a0:1a:45:df:36:1b:
         3b:b0:0a:f2:ce:82:a3:42:0e:eb:c4:3c:12:5c:29:d8:aa:d3:
         ba:5a:bc:e0:66:f4:3e:77:46:8f:18:4e:2b:87:ff:f8:b4:ef:
         fb:1a:cc:67:66:64:1d:e6:83:b8:17:8b:d5:b3:5a:f7:0b:08:
         43:a7:34:36:28:fe:4b:fa:a9:75:32:82:b6:14:0a:6c:e2:9f:
         dd:99:e4:39:16:fb:0f:95:54:8b:18:da:47:0b:31:70:e6:28:
         9a:19:f8:73:fd:cc:fe:1c:73:4c:f6:b3:9c:87:90:b6:24:e1:
         ff:2e:3d:ad:ff:49:35:a9:5a:9d:30:c1:a9:c0:74:86:74:cc:
         94:a9:bc:2d:21:b9:a5:af:ae:17:e6:6b:19:ca:37:a0:3c:ca:
         e6:73:40:50:4a:16:ef:24:8e:11:76:c1:f7:b9:05:23:de:36:
         e8:4f:94:47:b7:34:a9:bd:20:a8:e0:f3:61:d1:13:c7:1e:ab:
         89:e1:7a:4e:28:51:49:2a:78:92:26:95:a0:84:7b:31:c4:00:
         39:2d:ef:21:6d:36:ea:94:35:83:31:c1:a1:fa:5e:5a:8e:d4:
         ef:36:f8:d9:02:63:9e:35:68:eb:38:a8:1f:9f:bd:4c:8c:2b:
         ce:07:61:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:31 2026 by rpki-client