Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a31363a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a31363a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          8gXMQOI36rymptMuaZ4iYH7RoqmAMefncTGlU78XmZw=
Subject key identifier:   1C:09:C4:4C:DA:07:78:AA:53:35:0E:C0:47:60:91:92:48:AD:03:BB
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       78102D0F999F7F4A77909DFD0CFFC6C95B6CE2E9
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a31363a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Wed 25 Feb 2026 13:20:01 +0000
ROA not before:           Wed 25 Feb 2026 13:15:01 +0000
ROA not after:            Wed 24 Feb 2027 13:20:01 +0000
asID:                     273230
IP address blocks:        2803:5e50:16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:10:2d:0f:99:9f:7f:4a:77:90:9d:fd:0c:ff:c6:c9:5b:6c:e2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Feb 25 13:15:01 2026 GMT
            Not After : Feb 24 13:20:01 2027 GMT
        Subject: CN=1C09C44CDA0778AA53350EC04760919248AD03BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:36:ff:3e:bd:b8:e7:43:38:2d:b1:5f:c2:
                    05:92:a1:26:be:5d:fc:c4:ec:d2:82:13:b7:67:bd:
                    6f:39:f0:c3:ba:d1:c7:2e:0b:3d:cd:1c:bf:0f:5d:
                    20:0a:5b:d0:96:00:f4:6c:ee:58:a9:ed:2d:09:ee:
                    36:b3:f3:b3:8b:9e:00:44:1a:4f:9e:de:1c:5e:08:
                    57:e2:2d:18:89:f8:c7:b5:f7:c9:1d:50:09:44:d7:
                    18:55:fc:08:4e:42:d7:fd:0d:6e:53:5f:c6:fb:ed:
                    8d:41:98:ef:e1:1e:a4:1d:28:1c:f1:40:3e:1e:f5:
                    83:5f:0e:58:8c:df:7e:34:ad:a0:86:a0:62:a3:66:
                    82:e6:aa:ad:67:70:b8:7a:7c:56:8d:fe:72:0f:36:
                    00:db:0c:2b:00:ec:58:a2:28:6e:89:59:86:15:66:
                    03:bf:98:da:16:1b:a8:0c:3e:f4:5a:1a:f7:d2:cb:
                    53:35:41:15:97:ef:2f:42:65:4d:bd:70:21:f1:71:
                    c4:d7:80:f0:75:50:ec:b2:50:3c:7b:ad:99:5f:b4:
                    61:fd:06:cb:e1:49:7b:1c:1e:57:87:61:36:1b:1e:
                    ef:ec:a6:f2:17:6a:06:a3:a0:14:cf:24:64:7a:83:
                    bc:20:c6:14:11:3e:3c:4d:1d:95:b9:c1:dc:8b:89:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:09:C4:4C:DA:07:78:AA:53:35:0E:C0:47:60:91:92:48:AD:03:BB
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a31363a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:cf:02:46:5f:ab:1b:f6:51:9e:42:f6:5c:74:c2:c2:81:45:
         12:5f:16:65:ad:53:2b:c5:cd:75:e1:1d:82:de:ab:99:ad:00:
         73:e2:96:de:c2:bc:8a:3b:a0:cd:93:fc:87:4b:ec:6e:c8:36:
         f9:d0:95:3a:d3:c2:53:79:7b:53:96:b5:6e:5e:cf:d0:26:7c:
         c9:31:cf:00:1d:8e:1f:e0:d4:9b:a3:58:2d:a9:aa:c0:a7:44:
         0b:7d:39:53:c9:f9:87:58:96:be:af:f0:e2:b3:8a:0d:77:df:
         87:f1:20:f0:78:d1:1f:9f:ac:cc:b3:3d:52:e8:e0:60:72:c5:
         86:a8:ac:3f:ab:fc:76:9f:26:a5:f7:35:03:d9:4d:29:b0:2a:
         c5:49:48:d4:2c:42:56:d5:52:ef:f4:70:ea:b4:a6:53:d4:f5:
         c5:9b:9b:3d:4a:1e:e8:e8:8a:53:48:b4:8e:2f:6d:2b:12:75:
         89:95:d5:07:21:85:57:c7:65:39:62:0f:12:d1:56:46:f7:d4:
         93:fb:5f:ad:04:16:fb:e1:b8:5b:48:34:41:2e:ae:71:7d:83:
         0e:86:7e:d0:8e:2b:7f:15:1c:c7:df:71:3b:91:3b:f6:57:52:
         ca:96:09:98:72:36:7f:da:d5:c1:78:af:5f:d0:3a:ed:c5:ca:
         5d:27:c5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:37:56 2026 by rpki-client