Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313031363a3a2f34382d3438203d3e20323637383233.roa
File:                     323830333a643333303a313031363a3a2f34382d3438203d3e20323637383233.roa (raw, json)
Hash identifier:          cdbcTrFFyGJUqc5ItC25+sjbS7fA/FK3EJ3Bkh4iHbQ=
Subject key identifier:   98:BC:3D:DC:9E:62:81:BF:3F:B1:96:9D:E2:6C:E4:71:8E:79:7F:9C
Certificate issuer:       /CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
Certificate serial:       6EE9DB54F907C9D1DA0B9D10905E5E795811DA55
Authority key identifier: 6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313031363a3a2f34382d3438203d3e20323637383233.roa
Signing time:             Wed 26 Aug 2026 13:55:06 +0000
ROA not before:           Wed 26 Aug 2026 13:50:06 +0000
ROA not after:            Wed 25 Aug 2027 13:55:06 +0000
asID:                     267823
IP address blocks:        2803:d330:1016::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e9:db:54:f9:07:c9:d1:da:0b:9d:10:90:5e:5e:79:58:11:da:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84
        Validity
            Not Before: Aug 26 13:50:06 2026 GMT
            Not After : Aug 25 13:55:06 2027 GMT
        Subject: CN=98BC3DDC9E6281BF3FB1969DE26CE4718E797F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:45:d8:ac:61:1f:ef:5f:d5:63:4b:5e:f3:
                    fb:99:1d:17:72:4b:b2:5e:44:2a:a7:8c:e2:4d:45:
                    12:4b:19:40:71:db:ab:41:0e:80:b7:4e:14:98:e2:
                    12:4e:56:1e:5a:00:eb:3f:4e:b0:0e:e6:48:b4:f1:
                    00:41:14:fb:65:a1:a2:ec:00:9d:e2:c0:51:5e:5f:
                    e0:14:65:fb:4d:fa:d5:cf:13:24:36:9d:a9:9e:7f:
                    2d:cc:0d:12:d2:a2:fb:1e:3f:fe:93:3b:a4:b7:8a:
                    53:bc:9c:a9:1d:f6:40:d3:7c:29:a6:42:62:3b:21:
                    c5:93:3d:fb:1f:17:b3:19:ec:39:39:4f:33:83:d4:
                    8a:ff:5a:c3:1c:8f:6a:69:2a:0d:22:7c:f3:55:75:
                    25:c9:c1:21:a4:26:35:3d:ca:7d:a8:d0:66:80:e2:
                    e1:41:6b:f0:04:52:2a:a3:35:05:da:33:b3:94:e1:
                    16:97:44:02:24:7b:ee:4f:9b:19:58:9d:07:88:1a:
                    f7:36:92:51:e0:8d:b7:6c:17:1b:ef:60:b1:b2:b6:
                    28:fd:68:2f:60:dc:2f:ed:bf:e2:78:3d:4e:a6:0e:
                    7f:a9:51:f3:18:4d:b4:79:65:81:b4:81:6e:d1:1b:
                    8d:40:d6:2c:02:63:c0:45:fe:cc:78:84:60:07:39:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BC:3D:DC:9E:62:81:BF:3F:B1:96:9D:E2:6C:E4:71:8E:79:7F:9C
            X509v3 Authority Key Identifier:
                keyid:6C:04:72:F9:B2:AA:F8:4C:C5:7C:6A:70:31:82:83:F1:EF:3E:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0472F9B2AAF84CC57C6A70318283F1EF3E5C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724F52DADCD76E4B2B3C007A787003617F0A173D84AA0705522B444CCAAF422E/0/323830333a643333303a313031363a3a2f34382d3438203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d330:1016::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:28:06:58:a8:cc:b6:02:51:0e:7e:86:65:3e:35:07:4f:a9:
         c5:8f:35:1e:ea:fb:88:8a:4e:0b:62:82:b0:3e:ad:52:6e:cd:
         e4:90:c9:e9:69:b5:d7:08:47:81:7f:de:a7:ef:71:6e:53:7a:
         11:7c:e6:ff:df:90:c3:17:03:cd:7d:9a:d9:d5:2d:43:53:92:
         67:58:31:90:91:31:3b:c3:f8:d7:83:06:1a:57:d0:2c:26:b8:
         b2:20:d7:ab:b4:9d:58:31:23:ea:5f:5a:ff:d2:c6:6a:62:09:
         cd:bc:bc:5d:74:85:cd:26:b3:10:59:28:85:5f:a2:5a:f9:72:
         61:2e:0e:a1:c3:c5:44:0e:ec:8f:ff:42:6f:88:d6:3d:78:9f:
         b7:5d:fb:79:14:9d:df:70:57:65:42:d9:63:31:4a:7d:23:a5:
         5f:3b:66:a6:7a:7e:2c:cf:7c:79:82:a4:0b:9d:38:eb:d5:d9:
         4c:00:2d:c4:96:a8:26:46:15:79:60:bb:61:86:ed:66:c8:d7:
         8c:fd:76:7f:f4:11:c4:97:47:87:3a:43:e2:c2:2d:6a:47:bd:
         3f:f3:21:fb:3a:38:be:c3:a6:b9:4e:de:c2:db:5d:5c:dd:4f:
         d7:d2:4d:39:2d:d4:90:3b:e7:8c:73:ca:29:c3:fc:97:7b:73:
         d1:6f:a6:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:49 2026 by rpki-client