Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030663a3a2f34382d3438203d3e20323637383233.roa
File:                     323830333a643333303a313030663a3a2f34382d3438203d3e20323637383233.roa (raw, json)
Hash identifier:          Oun0Itozf9vt4ejH0iCvZiC1up3MF/3raOhM5sUIRK8=
Subject key identifier:   7B:48:09:6F:8A:17:67:F8:B4:A2:1A:10:62:DE:FB:76:C9:82:53:0F
Certificate issuer:       /CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
Certificate serial:       70088DE09FD4092868AB7A3D9ABADB2B41DC1CEF
Authority key identifier: 6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030663a3a2f34382d3438203d3e20323637383233.roa
Signing time:             Wed 26 Aug 2026 13:55:02 +0000
ROA not before:           Wed 26 Aug 2026 13:50:02 +0000
ROA not after:            Wed 25 Aug 2027 13:55:02 +0000
asID:                     267823
IP address blocks:        2803:d330:100f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:08:8d:e0:9f:d4:09:28:68:ab:7a:3d:9a:ba:db:2b:41:dc:1c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
        Validity
            Not Before: Aug 26 13:50:02 2026 GMT
            Not After : Aug 25 13:55:02 2027 GMT
        Subject: CN=7B48096F8A1767F8B4A21A1062DEFB76C982530F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:f1:21:1a:bd:9d:64:34:1f:3a:21:ca:fa:
                    14:0d:2b:56:42:88:e8:c4:5d:50:15:9c:62:50:8a:
                    c0:ad:ba:07:ce:db:5a:f5:64:fe:1f:be:da:bc:ed:
                    cb:aa:9b:f4:a6:3d:29:12:29:33:d8:84:e6:86:90:
                    da:be:a9:60:99:85:6b:7d:a4:c7:1d:4c:96:12:2f:
                    12:33:bb:01:6d:58:c5:12:6e:83:fe:73:7e:90:7f:
                    8f:63:62:98:85:56:e1:10:a0:f2:8e:ae:db:d3:e2:
                    41:c1:b9:5a:f1:77:ed:5b:f5:48:dd:31:b7:22:9a:
                    8f:24:94:42:06:c3:39:bd:fb:f6:62:77:1f:1d:0f:
                    56:c6:60:6e:18:5e:83:bc:77:8b:43:73:49:37:a6:
                    17:52:44:fe:e7:95:1d:c8:55:b2:8e:c4:1c:77:92:
                    19:b4:7b:8f:0f:15:26:f1:3b:f5:e4:62:64:23:d7:
                    21:f9:bf:3c:24:f6:1c:5f:5e:b6:be:f1:c9:1c:a9:
                    d4:dc:c5:95:ec:ad:60:99:f3:3e:7e:57:2a:88:e9:
                    b1:85:1d:f4:f2:20:a5:64:e7:41:21:20:f7:46:4d:
                    3f:59:a6:f1:0f:a2:be:18:a2:a7:38:47:be:9b:96:
                    67:68:27:c0:46:c8:5d:02:f7:04:87:93:83:3a:cf:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:48:09:6F:8A:17:67:F8:B4:A2:1A:10:62:DE:FB:76:C9:82:53:0F
            X509v3 Authority Key Identifier:
                keyid:6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313030663a3a2f34382d3438203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d330:100f::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:c2:43:fa:69:23:ba:e8:24:28:ab:d1:22:8e:74:50:fe:69:
         83:fd:54:74:36:fa:2c:fd:b0:6d:5b:85:ee:a0:bd:4a:0f:d7:
         c5:5b:1c:1f:24:dd:d7:05:f3:ea:31:70:a1:ce:47:b0:21:c4:
         ff:bf:b9:82:a4:e8:c5:49:f2:10:fe:f3:5d:01:2f:6a:4d:22:
         75:55:c6:6b:3b:92:3b:31:67:85:57:2a:3d:a6:a5:3d:d5:8f:
         12:87:07:5f:c5:4c:70:aa:98:9b:57:32:e1:ff:26:15:bc:8d:
         6e:4c:9e:4b:92:78:ae:87:d6:5f:9e:49:90:3c:33:fd:43:b5:
         12:13:41:6b:4c:71:40:b7:63:f4:15:7e:76:b8:f0:a4:f6:39:
         ec:98:85:77:d7:72:84:62:51:9e:b8:bd:75:31:23:60:ee:ba:
         bc:cf:5d:4f:c4:99:ff:33:32:9d:12:77:c8:6d:1b:7f:f0:8d:
         56:86:db:8b:93:09:42:60:74:3e:23:77:41:f0:06:96:d3:8c:
         e1:87:b5:3c:00:87:ba:b2:00:95:94:e2:94:c7:1d:c4:f4:df:
         cc:53:0a:2e:a4:a7:ec:1a:c1:3d:5d:f6:90:04:3a:71:94:a2:
         e4:51:11:c2:37:65:7f:87:e8:d1:9f:e2:c6:15:d2:98:01:ec:
         bc:08:2e:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:26 2026 by rpki-client