Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030633a3a2f34382d3438203d3e20323637383233.roa
File:                     323830333a643333303a313030633a3a2f34382d3438203d3e20323637383233.roa (raw, json)
Hash identifier:          4uXGLNZSvOs2iKzujI0HqnZfuYR3Os85RUY3c4Zkk3g=
Subject key identifier:   A6:05:66:F3:F1:F2:02:0D:4A:95:E8:AF:7A:33:2C:8A:09:77:64:EC
Certificate issuer:       /CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
Certificate serial:       6501E54D767C7B75A32072C0995DAD1BFDFB3CF5
Authority key identifier: 6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030633a3a2f34382d3438203d3e20323637383233.roa
Signing time:             Wed 26 Aug 2026 13:55:05 +0000
ROA not before:           Wed 26 Aug 2026 13:50:05 +0000
ROA not after:            Wed 25 Aug 2027 13:55:05 +0000
asID:                     267823
IP address blocks:        2803:d330:100c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:01:e5:4d:76:7c:7b:75:a3:20:72:c0:99:5d:ad:1b:fd:fb:3c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
        Validity
            Not Before: Aug 26 13:50:05 2026 GMT
            Not After : Aug 25 13:55:05 2027 GMT
        Subject: CN=A60566F3F1F2020D4A95E8AF7A332C8A097764EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:75:07:23:0c:b5:59:7c:93:73:2c:39:b8:
                    29:38:af:dd:ed:9d:49:e1:8f:7c:c9:3a:8e:54:8a:
                    36:8d:e7:32:4d:fa:12:43:68:c3:67:43:e7:9a:0a:
                    2c:f7:c4:07:d6:3d:97:4b:a7:4a:18:4f:5e:9a:58:
                    9a:1f:81:28:95:96:31:6f:d2:87:6b:13:c5:ca:ef:
                    de:1a:42:c9:38:d3:1c:ce:01:ff:8d:b3:d8:f9:39:
                    75:97:11:31:dc:df:eb:c1:9a:54:76:a1:e7:9f:ae:
                    b7:0f:07:92:e9:dd:a9:0d:d4:05:73:fc:a4:14:9c:
                    1f:0b:d7:e7:e1:77:55:c1:5b:df:df:e4:8e:1f:3f:
                    2c:c0:50:9e:ea:81:0a:9f:65:0d:75:a9:03:d3:b5:
                    87:b3:89:8d:c7:9e:a0:8b:1f:80:65:96:23:d8:b5:
                    a4:b3:9a:61:65:ba:39:f0:8a:66:7a:00:03:78:25:
                    88:d5:d3:78:7a:d3:a0:a7:52:5a:df:36:81:b1:92:
                    be:6a:01:3f:66:2f:44:a1:86:ee:c5:a3:ba:a2:0b:
                    5a:41:d9:5e:42:68:62:f6:ab:5c:c3:35:02:8f:62:
                    0a:8b:8e:f5:8a:16:6b:c7:50:8a:ee:56:16:a7:4c:
                    27:79:00:e3:af:75:6b:e0:85:38:1f:cb:f2:65:76:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:05:66:F3:F1:F2:02:0D:4A:95:E8:AF:7A:33:2C:8A:09:77:64:EC
            X509v3 Authority Key Identifier:
                keyid:6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030633a3a2f34382d3438203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d330:100c::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:d7:7c:0d:ee:ce:b1:98:a4:59:32:44:f2:2f:3f:5e:f6:9c:
         ad:af:f3:df:09:12:e1:da:e0:0e:a4:98:c9:27:4e:b9:83:9f:
         3c:b5:62:45:33:5d:e0:20:5f:c7:9e:a7:7d:86:9f:2b:98:bb:
         5e:8e:e1:6c:69:51:f6:af:44:9f:96:e4:ef:f6:73:93:3e:53:
         72:7a:e9:e0:b2:56:c3:69:b2:ef:97:01:49:ae:b5:47:f1:58:
         b3:c0:16:8d:20:e4:77:49:c4:8d:1f:40:b5:dd:5c:59:63:a3:
         c1:03:a4:7a:4b:86:b4:91:d1:e6:a3:95:87:52:14:51:90:5a:
         79:86:9d:14:81:3c:11:69:c2:2b:af:f3:43:bd:a5:66:72:05:
         a2:46:fa:c7:ad:c4:c3:54:25:39:12:2a:8c:21:9e:d6:52:cc:
         26:6e:56:ba:6d:8a:6a:39:ce:79:62:d5:c0:34:63:a8:fb:b9:
         0f:ec:c9:45:ac:84:79:bb:ac:fb:62:00:44:e7:ed:7d:80:50:
         85:58:27:f6:aa:42:4d:27:24:80:db:5f:19:c8:a3:29:79:5c:
         f2:e3:a8:3f:8b:fa:0f:45:58:6e:d7:34:cc:2b:58:fd:fe:60:
         09:4c:46:24:d5:e8:ea:a9:9d:f8:fc:69:bc:15:69:3b:26:2d:
         38:ff:cb:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:28 2026 by rpki-client