Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a31333a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a31333a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          PyW6mEw/2yhX3vFxPRThsI6NdTEqq0LAYAdeJwFjjXM=
Subject key identifier:   FC:BB:D4:08:45:34:EF:A1:D1:F6:64:3A:B3:DD:A8:6A:19:84:9A:96
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       17104135FFC6E9C270BC9F1D68B40834931C685B
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a31333a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Wed 25 Feb 2026 13:20:02 +0000
ROA not before:           Wed 25 Feb 2026 13:15:02 +0000
ROA not after:            Wed 24 Feb 2027 13:20:02 +0000
asID:                     273230
IP address blocks:        2803:5e50:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:10:41:35:ff:c6:e9:c2:70:bc:9f:1d:68:b4:08:34:93:1c:68:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Feb 25 13:15:02 2026 GMT
            Not After : Feb 24 13:20:02 2027 GMT
        Subject: CN=FCBBD4084534EFA1D1F6643AB3DDA86A19849A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:db:3d:f1:ba:7b:a8:98:fc:4b:38:0e:20:
                    bb:ff:d6:18:81:4d:40:2b:1e:4f:9f:6c:b4:54:4f:
                    66:2a:96:b7:12:0b:0a:5a:c2:2d:1f:a9:b9:8e:8a:
                    bf:ec:7d:75:1c:3f:d8:4f:3c:ca:ea:41:51:8f:d5:
                    db:06:ed:4c:9a:e0:65:cf:0b:d6:f7:f8:5e:1b:7e:
                    09:e8:77:0c:63:33:7d:71:50:09:91:92:56:5f:be:
                    03:99:00:d1:81:94:4b:1c:aa:b6:db:1e:fd:65:2c:
                    9b:bc:e6:65:60:33:5a:22:77:2b:5a:7e:42:ae:ae:
                    2f:55:27:ac:9f:b4:73:a6:43:2a:5e:6b:ab:7a:3e:
                    5a:eb:90:87:af:fc:e8:d1:8e:fb:28:7f:48:8d:99:
                    b4:57:7b:4d:fd:be:12:f2:82:55:4e:ed:1f:89:da:
                    5e:74:a8:ee:4e:6f:2f:a0:24:67:00:df:e9:77:cf:
                    e3:ff:62:5b:88:1c:4b:4d:6d:b3:44:e5:c5:09:5c:
                    07:ac:00:54:0c:ef:97:6b:02:f1:89:92:a1:d7:b5:
                    c2:c3:2f:53:3c:0f:d7:c9:20:a3:59:fd:55:f8:ee:
                    40:92:2d:9c:2d:ea:6d:7f:a0:33:0c:70:8d:20:8e:
                    58:d1:1d:ad:fd:af:f9:d2:64:e0:e2:de:25:e0:ca:
                    85:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BB:D4:08:45:34:EF:A1:D1:F6:64:3A:B3:DD:A8:6A:19:84:9A:96
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a31333a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:d7:f7:59:df:6d:ad:11:bb:0d:76:49:3a:e5:ae:82:8b:cb:
         04:4f:72:f3:2d:83:d9:72:f3:28:ea:7a:9f:70:6a:7d:c0:5b:
         29:36:2b:84:7e:11:02:50:4a:28:11:db:eb:39:fa:d3:bb:13:
         67:88:ab:08:a6:92:51:62:f5:20:c6:27:66:83:dd:ee:4b:c0:
         c6:85:05:19:55:72:92:81:66:9d:0b:2f:d2:9a:5c:0f:7f:fc:
         4d:cb:e3:60:c8:37:b9:a0:dd:98:78:d8:9a:71:47:e1:45:b8:
         e4:93:d2:cd:f2:ac:1a:73:55:fd:b3:b0:2d:e4:92:15:f4:60:
         bf:b0:1d:80:5d:f8:30:60:43:fd:b9:fb:f6:4b:3e:97:b5:13:
         62:06:fe:71:68:67:33:f7:99:f1:9d:39:8f:d3:78:f8:71:d1:
         68:0a:c9:61:26:ac:4f:24:4e:cb:2d:bb:52:d8:66:d6:2f:c0:
         1d:5b:2c:3c:d2:83:50:64:90:3a:90:ed:ca:e7:a9:71:73:e6:
         71:31:fb:08:0a:cb:4a:e4:ce:5e:87:58:ec:5d:d4:04:e9:78:
         5e:ca:08:3f:75:53:9a:96:5c:97:7a:60:21:86:7b:ff:1e:1d:
         24:b2:e5:60:d3:f0:4b:b1:49:3d:38:74:61:13:b6:f9:b5:f6:
         67:24:0f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:46:24 2026 by rpki-client