Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030643a3a2f34382d3438203d3e20323637383233.roa
File:                     323830333a643333303a313030643a3a2f34382d3438203d3e20323637383233.roa (raw, json)
Hash identifier:          Wz0ALq6kPTZBvcoyDZPPuBsUPBASFVCfIb/QHNKKw04=
Subject key identifier:   4F:55:37:9A:5A:06:11:E7:C2:BD:17:01:D7:F3:BE:4C:9B:AE:C4:92
Certificate issuer:       /CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
Certificate serial:       6670ACECCA176F8647478DF4A785B6D956EAF761
Authority key identifier: 6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030643a3a2f34382d3438203d3e20323637383233.roa
Signing time:             Wed 26 Aug 2026 13:55:00 +0000
ROA not before:           Wed 26 Aug 2026 13:50:00 +0000
ROA not after:            Wed 25 Aug 2027 13:55:00 +0000
asID:                     267823
IP address blocks:        2803:d330:100d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:70:ac:ec:ca:17:6f:86:47:47:8d:f4:a7:85:b6:d9:56:ea:f7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
        Validity
            Not Before: Aug 26 13:50:00 2026 GMT
            Not After : Aug 25 13:55:00 2027 GMT
        Subject: CN=4F55379A5A0611E7C2BD1701D7F3BE4C9BAEC492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:ee:ca:92:cd:51:d8:73:c2:7b:72:51:b3:
                    8a:c0:73:0b:47:be:85:fc:2d:f9:47:83:18:cd:35:
                    40:ca:b8:57:c9:b4:d6:b6:4e:ad:7b:1a:f8:a6:de:
                    0d:18:fa:c8:43:61:c9:e6:58:8d:14:f4:38:e4:b0:
                    51:ed:c0:13:58:a6:17:57:1b:67:b4:fc:a6:d8:aa:
                    39:41:9c:ac:8b:98:49:86:f2:67:d0:14:1a:d2:7d:
                    55:8d:5b:7d:8c:25:aa:04:72:41:10:a8:fd:0c:06:
                    7f:13:77:dc:ac:0c:1d:cb:f8:f2:53:22:65:91:5a:
                    ac:83:56:b4:b5:d0:bf:72:f7:d9:1d:39:69:65:24:
                    dd:e4:fc:ab:a1:75:79:80:66:12:c5:58:70:54:35:
                    3a:07:61:30:0a:80:aa:11:80:d2:30:e4:99:53:b6:
                    b0:db:ae:6c:e8:db:2e:53:69:c7:7e:c8:e2:ea:16:
                    ea:33:58:3f:af:ca:f7:bc:cf:e4:9b:00:5c:38:bb:
                    7b:40:29:73:02:4a:14:57:1f:d4:a1:a7:82:89:4e:
                    c5:3e:5b:98:5e:94:b7:c8:58:e4:64:b9:e5:69:f2:
                    ad:cc:6c:d9:d1:3c:76:3d:0e:ff:03:1f:68:74:85:
                    81:ab:ed:31:e7:c3:8b:f9:a2:ab:89:51:54:95:21:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:55:37:9A:5A:06:11:E7:C2:BD:17:01:D7:F3:BE:4C:9B:AE:C4:92
            X509v3 Authority Key Identifier:
                keyid:6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030643a3a2f34382d3438203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d330:100d::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:47:86:6b:66:40:46:d3:92:61:6e:e3:ac:76:14:17:a3:31:
         ec:38:9f:89:d1:30:9a:70:1b:cf:06:50:0d:ea:2b:81:20:0e:
         41:84:91:79:05:c7:f1:9c:27:5f:d2:ca:45:e4:ee:bf:a1:08:
         91:b4:56:ae:5d:da:95:6d:27:c5:f8:f6:61:e1:21:ca:71:4b:
         c7:4f:41:25:73:0c:32:83:da:bb:50:58:5f:ac:f7:8b:71:4d:
         d8:f9:68:02:2e:b9:64:dd:45:55:85:76:87:f9:17:65:ea:29:
         05:ca:21:61:e2:ce:fb:03:09:02:35:64:78:1f:70:26:24:e2:
         24:53:a6:d5:21:12:2c:3f:ef:d7:1a:8e:d8:2e:85:7d:47:df:
         e3:7d:91:a3:e7:5a:41:7e:9a:da:5a:b4:1b:dc:07:d7:8a:c3:
         41:96:a8:ec:78:2c:ce:26:70:47:8d:a4:fa:d6:fb:e9:7a:4c:
         8e:4a:38:20:09:c0:1d:f9:2b:db:d2:8f:d6:59:98:c6:c7:db:
         cc:bb:fc:b2:96:f7:e9:3b:cf:59:5d:f4:3a:33:6a:cb:f0:84:
         10:29:f0:89:e5:b5:ca:dd:8a:de:7c:18:03:6b:90:da:7d:6c:
         5b:c5:ea:cb:33:77:73:3b:f2:7f:15:2a:17:0b:3c:14:4c:d2:
         22:c2:17:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:27 2026 by rpki-client