Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313031343a3a2f34382d3438203d3e20323637383233.roa
File:                     323830333a643333303a313031343a3a2f34382d3438203d3e20323637383233.roa (raw, json)
Hash identifier:          fv4HT5rfp1NpYRedV3h4IF3bzlP2xjhSMRM42QeX7O4=
Subject key identifier:   BE:1A:C9:34:F4:1C:1D:3C:07:3B:E8:1C:A1:F0:76:BB:29:16:CD:16
Certificate issuer:       /CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
Certificate serial:       71D1AD2C29FA1D4F0CB0406832DB93044C746F16
Authority key identifier: 6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313031343a3a2f34382d3438203d3e20323637383233.roa
Signing time:             Wed 26 Aug 2026 13:55:01 +0000
ROA not before:           Wed 26 Aug 2026 13:50:01 +0000
ROA not after:            Wed 25 Aug 2027 13:55:01 +0000
asID:                     267823
IP address blocks:        2803:d330:1014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d1:ad:2c:29:fa:1d:4f:0c:b0:40:68:32:db:93:04:4c:74:6f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
        Validity
            Not Before: Aug 26 13:50:01 2026 GMT
            Not After : Aug 25 13:55:01 2027 GMT
        Subject: CN=BE1AC934F41C1D3C073BE81CA1F076BB2916CD16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:61:24:68:d9:3a:be:b6:c9:66:48:a7:e6:
                    7a:38:08:3d:0e:41:65:03:5e:72:33:02:99:ab:15:
                    ea:6e:1a:52:72:d1:67:50:de:ea:0d:38:cf:db:06:
                    c9:96:53:37:a3:82:71:b4:16:73:4f:e2:96:29:85:
                    05:10:a3:cb:06:9c:04:92:5e:cb:da:80:8b:88:e0:
                    91:47:19:0e:99:ad:92:c0:52:5b:db:a1:1c:e1:81:
                    f3:f1:4e:18:b6:ad:57:04:a3:5c:ac:83:e5:97:1c:
                    96:b0:86:ce:74:8b:0d:18:b9:8d:cc:a2:3b:72:83:
                    ef:a3:08:06:da:5f:3c:ea:f7:62:e5:bb:35:10:32:
                    3f:8e:78:15:2d:6b:29:34:ba:85:ce:bf:ce:5d:08:
                    8f:35:7b:0a:44:89:ac:95:f4:f0:50:19:78:aa:f1:
                    29:9c:f6:72:57:e1:51:b0:5f:9d:3f:b1:a0:31:00:
                    69:c5:43:18:fd:a2:3d:4f:6f:9b:c4:02:13:ce:5f:
                    62:ca:02:34:bf:30:cf:56:f8:9c:ac:8d:a0:7f:a6:
                    e7:74:7c:57:2a:9b:cd:8d:c5:5c:3b:5c:39:6b:5f:
                    2f:60:36:c0:2b:99:7f:54:bc:95:19:74:92:59:19:
                    1b:cf:b9:72:1f:80:07:29:be:37:ed:88:8e:6b:87:
                    8b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1A:C9:34:F4:1C:1D:3C:07:3B:E8:1C:A1:F0:76:BB:29:16:CD:16
            X509v3 Authority Key Identifier:
                keyid:6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313031343a3a2f34382d3438203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d330:1014::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:0c:37:82:53:77:61:a3:2f:71:18:92:7f:84:4c:e1:78:b1:
         c9:ab:cf:d0:cd:57:5b:85:f8:9c:39:5f:d6:b8:07:ea:0b:d8:
         95:e1:03:54:25:6f:bf:33:36:03:77:01:72:b0:71:e0:88:59:
         44:1e:ec:5a:93:a6:00:ea:fc:92:e3:69:9b:36:01:eb:ef:08:
         b6:fa:d4:9d:18:f6:e7:49:f8:be:83:8a:c4:c5:dd:9d:d1:1a:
         43:70:11:10:8d:c5:7a:d3:5e:d0:b6:46:04:d4:de:d7:e4:1e:
         35:4b:39:53:1f:77:10:e4:3b:05:95:95:6a:14:3d:3a:00:ce:
         25:ad:4e:88:b2:5b:4b:70:c8:a5:ee:ad:3c:e4:64:a5:99:2d:
         88:0e:d5:72:62:29:74:79:b3:f2:7b:ff:9b:35:cc:4a:0b:02:
         aa:10:b4:30:04:24:c5:7d:10:80:02:e8:7e:4c:a7:21:93:f7:
         f7:35:d5:4b:46:ba:70:18:65:ba:a2:24:29:02:32:60:84:18:
         39:f0:72:ba:67:e8:f9:2a:24:67:b9:58:b0:65:83:73:6a:51:
         2f:42:8b:82:9d:16:fb:38:2c:49:28:43:ad:b2:67:7e:f5:b3:
         5a:3c:78:3c:d0:35:f7:4f:71:ef:60:ad:db:fa:b5:71:12:5f:
         2f:d1:96:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:40:11 2026 by rpki-client