Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a31353a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a31353a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          GvoEd6eEWOiRUgr7SMx11jyAH+5nVj5jOkY4kPfmB2c=
Subject key identifier:   01:AC:62:4D:95:B1:A4:73:9B:55:28:36:8C:91:4B:62:62:53:2D:10
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       0718617F4CC0BCC4039FCBDED24C813F9154525C
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a31353a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Wed 25 Feb 2026 13:20:01 +0000
ROA not before:           Wed 25 Feb 2026 13:15:01 +0000
ROA not after:            Wed 24 Feb 2027 13:20:01 +0000
asID:                     273230
IP address blocks:        2803:5e50:15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:18:61:7f:4c:c0:bc:c4:03:9f:cb:de:d2:4c:81:3f:91:54:52:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Feb 25 13:15:01 2026 GMT
            Not After : Feb 24 13:20:01 2027 GMT
        Subject: CN=01AC624D95B1A4739B5528368C914B6262532D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:92:f0:75:f1:ed:17:41:00:f6:29:0b:a1:
                    43:5c:5b:9b:c3:dc:6f:f1:27:7e:df:f1:43:f4:72:
                    9b:7f:95:c6:cc:13:fa:74:9b:e7:41:15:86:fa:bf:
                    8b:93:a4:1e:1b:25:a7:48:85:ce:b0:82:c6:18:88:
                    d6:97:3f:5b:14:20:85:d2:45:c7:14:df:08:ed:f6:
                    c8:ff:45:59:34:61:55:b5:2a:f4:b8:07:2c:4d:84:
                    1c:93:42:b2:c1:25:da:5e:62:a6:80:d1:fd:9f:ae:
                    d3:dc:f5:88:6c:02:0f:7b:e4:47:27:4c:37:a7:24:
                    c1:78:46:73:b8:d2:fe:ed:72:2b:c4:39:e0:b2:96:
                    f2:38:d5:7f:15:c7:64:f6:3e:00:fc:a5:aa:0c:fa:
                    e9:32:04:e5:d6:30:19:01:1e:ac:24:3b:c6:5b:8c:
                    2c:8b:e6:e5:42:bb:c5:1d:40:3f:31:a3:77:46:a1:
                    01:67:32:09:32:8e:b2:1e:88:a1:0c:7b:28:4b:ec:
                    57:56:dd:00:97:3b:ef:4c:f3:2d:48:29:63:56:29:
                    39:5b:48:11:e5:05:9c:c5:69:19:66:2d:54:5d:b9:
                    dd:fc:90:24:b2:6e:a4:39:33:00:69:a3:e7:c4:1c:
                    e6:a0:58:43:b3:bf:3d:1f:37:da:22:0f:c7:3b:73:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AC:62:4D:95:B1:A4:73:9B:55:28:36:8C:91:4B:62:62:53:2D:10
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a31353a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:02:15:94:6c:45:9b:18:5e:62:60:83:c5:38:a7:4e:d0:06:
         37:f9:49:cb:34:0b:ad:b8:89:c8:d8:0a:3e:b7:ec:48:74:91:
         8a:f4:22:4e:e9:37:e5:3b:b1:51:24:30:44:6e:56:a0:3e:02:
         85:b2:83:1d:76:5e:b4:3f:7a:38:ae:e1:b8:61:ae:89:b1:77:
         c3:73:6e:46:da:9c:b8:77:5f:4d:0d:79:d2:e1:30:1a:ab:c3:
         77:74:b9:9a:1c:63:10:30:82:0b:4a:0b:b3:5e:ac:fc:a6:bd:
         73:19:4c:05:0c:07:0f:63:47:29:de:10:19:f8:5d:eb:9d:e4:
         c6:f3:66:a8:e8:19:04:44:78:d6:52:08:80:d5:95:30:09:a9:
         b3:58:32:4c:f5:f0:05:1d:26:01:7a:7f:b1:ce:d5:9d:3a:7f:
         19:45:0b:ed:d2:35:97:1e:01:f9:ea:9a:12:68:bd:41:f7:3e:
         82:74:d8:24:15:57:a6:a6:bc:c6:05:2f:48:5b:6c:81:dd:a9:
         c6:dd:0c:9a:84:20:19:17:21:59:5f:1d:c5:98:a3:6c:94:aa:
         13:6f:a5:3b:5f:9f:d3:30:07:6b:ae:fe:65:8a:3f:ba:db:30:
         03:a8:d8:88:36:61:16:91:23:1b:6f:8d:fb:80:a9:13:12:e6:
         5a:73:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:39:23 2026 by rpki-client