Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a313a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a313a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          cptJkXupw8/hYzAYYXiE7B8gmJtuWSQ6m0zejIXsN1s=
Subject key identifier:   42:1E:2E:21:69:04:6C:59:22:07:76:38:58:B6:46:21:97:2D:2A:D0
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       46EDE344C8F61D5D8CE0869248759AF3417D2E
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a313a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Sun 07 Jun 2026 17:46:57 +0000
ROA not before:           Sun 07 Jun 2026 17:41:57 +0000
ROA not after:            Sun 06 Jun 2027 17:46:57 +0000
asID:                     273230
IP address blocks:        2803:5e50:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ed:e3:44:c8:f6:1d:5d:8c:e0:86:92:48:75:9a:f3:41:7d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Jun  7 17:41:57 2026 GMT
            Not After : Jun  6 17:46:57 2027 GMT
        Subject: CN=421E2E2169046C592207763858B64621972D2AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5e:b7:5d:2c:2a:a2:f5:d6:65:1a:20:18:db:
                    81:2d:07:b8:c1:e0:9c:3c:7e:3b:39:1b:7f:d7:86:
                    af:8b:50:c3:6d:b4:94:a0:10:46:53:29:c8:76:30:
                    c1:a8:84:14:51:a2:5e:ea:ab:bf:38:09:ac:3c:78:
                    df:4f:76:58:a8:90:48:42:b3:7d:e9:a2:57:b6:5e:
                    ad:88:b2:66:34:8f:09:c6:10:6e:75:f1:2e:95:a6:
                    ab:da:b7:7f:78:c9:7b:7c:a3:09:31:09:78:25:36:
                    f1:ee:a6:d8:02:46:0b:ab:94:bf:65:ea:31:c3:84:
                    ad:99:d1:3d:cb:20:3c:c7:1b:89:b8:fb:89:de:86:
                    7c:ec:b5:37:5b:40:b0:c9:d9:92:bf:9a:af:d2:47:
                    5a:e6:58:6a:a5:07:35:95:1c:7f:0e:54:81:b7:b5:
                    1c:78:c8:d3:8c:25:2f:ac:a4:14:d1:2d:03:1e:27:
                    e5:bb:8e:17:45:66:f9:85:69:cd:ee:73:95:9d:06:
                    84:8c:e0:e1:90:38:ec:c4:e1:58:2c:64:08:4d:3a:
                    70:3b:12:4c:d6:62:0e:6c:df:19:69:41:03:c6:51:
                    f8:12:d1:8d:cb:82:0a:6b:ca:79:0c:bb:bf:de:3a:
                    bb:a7:1d:74:69:9b:f9:08:01:8c:3e:c5:7c:09:cf:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1E:2E:21:69:04:6C:59:22:07:76:38:58:B6:46:21:97:2D:2A:D0
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a313a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:4a:85:3b:a5:30:ce:62:9b:d4:ad:f4:27:32:94:7b:66:03:
         3b:04:39:8f:43:c5:93:c7:8e:7d:b1:d3:af:c3:62:61:0f:f4:
         c4:46:a3:fa:cb:c8:b0:b9:6a:a4:0b:fa:0e:d0:a8:3c:af:7d:
         ca:ef:4b:42:e6:ca:c1:74:c0:1a:36:14:6c:2c:24:fc:de:23:
         d1:2b:ea:8b:98:c2:89:78:f3:4e:c0:d3:b1:62:a0:bf:27:69:
         d5:e6:ca:34:1e:7d:55:1e:05:3d:4d:df:59:2c:16:ef:52:97:
         87:ae:b1:a3:ba:de:56:ba:eb:fe:24:9b:bc:c6:90:f3:2f:1d:
         cd:37:5c:30:ff:87:a2:d0:03:03:7a:89:c2:b5:75:b7:19:87:
         ad:a2:b2:db:12:64:09:f6:82:01:2d:2d:61:7a:15:d5:82:03:
         69:1d:1b:2b:01:20:18:c4:c1:46:10:9c:b4:1c:b4:61:d1:34:
         71:1f:1a:71:8f:3f:50:c7:c7:05:96:ea:bd:a2:d6:0a:2c:57:
         52:ba:43:b4:b4:58:14:eb:c8:b7:76:dc:6c:79:96:99:99:61:
         29:5f:bc:0c:80:d2:20:74:5c:9d:fa:bd:59:c8:42:ce:98:10:
         40:f7:88:99:be:0c:fc:41:6a:05:1c:a7:43:86:d5:74:5c:1c:
         83:39:6d:91
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgITRu3jRMj2HV2M4IaSSHWa80F9LjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg3OEMyMjVEMDBENDZCMzlBMjQ1REYyQ0Y3MDU2QUY2NjIx
NjM0QkZGMB4XDTI2MDYwNzE3NDE1N1oXDTI3MDYwNjE3NDY1N1owMzExMC8GA1UE
AxMoNDIxRTJFMjE2OTA0NkM1OTIyMDc3NjM4NThCNjQ2MjE5NzJEMkFEMDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIxet10sKqL11mUaIBjbgS0HuMHg
nDx+Ozkbf9eGr4tQw220lKAQRlMpyHYwwaiEFFGiXuqrvzgJrDx43092WKiQSEKz
femiV7ZerYiyZjSPCcYQbnXxLpWmq9q3f3jJe3yjCTEJeCU28e6m2AJGC6uUv2Xq
McOErZnRPcsgPMcbibj7id6GfOy1N1tAsMnZkr+ar9JHWuZYaqUHNZUcfw5Ugbe1
HHjI04wlL6ykFNEtAx4n5buOF0Vm+YVpze5zlZ0GhIzg4ZA47MThWCxkCE06cDsS
TNZiDmzfGWlBA8ZR+BLRjcuCCmvKeQy7v946u6cddGmb+QgBjD7FfAnPnH0CAwEA
AaOCAs8wggLLMB0GA1UdDgQWBBRCHi4haQRsWSIHdjhYtkYhly0q0DAfBgNVHSME
GDAWgBR4wiXQDUazmiRd8s9wVq9mIWNL/zAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0
L3Jwa2kvbGFjbmljL0Q4RDUzM0QyOEI2M0U0ODAwNEQ5RDc3RDcxQzFENkFDNjFF
NDE0RjRDRjBFQTM5RDM2QTVEQjgxODRFMUZGM0IvMC83OEMyMjVEMDBENDZCMzlB
MjQ1REYyQ0Y3MDU2QUY2NjIxNjM0QkZGLmNybDCBuQYIKwYBBQUHAQEEgawwgakw
gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr
aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE
MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wLzc4QzIyNUQwMEQ0NkIzOUEyNDVE
RjJDRjcwNTZBRjY2MjE2MzRCRkYuY2VyMIHLBggrBgEFBQcBCwSBvjCBuzCBuAYI
KwYBBQUHMAuGgatyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9EOEQ1MzNEMjhCNjNFNDgwMDREOUQ3N0Q3MUMxRDZBQzYxRTQxNEY0Q0Yw
RUEzOUQzNkE1REI4MTg0RTFGRjNCLzAvMzIzODMwMzMzYTM1NjUzNTMwM2EzMTNh
M2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMzMyMzMzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgD
XlAAATANBgkqhkiG9w0BAQsFAAOCAQEAY0qFO6UwzmKb1K30JzKUe2YDOwQ5j0PF
k8eOfbHTr8NiYQ/0xEaj+svIsLlqpAv6DtCoPK99yu9LQubKwXTAGjYUbCwk/N4j
0Svqi5jCiXjzTsDTsWKgvydp1ebKNB59VR4FPU3fWSwW71KXh66xo7reVrrr/iSb
vMaQ8y8dzTdcMP+HotADA3qJwrV1txmHraKy2xJkCfaCAS0tYXoV1YIDaR0bKwEg
GMTBRhCctBy0YdE0cR8acY8/UMfHBZbqvaLWCixXUrpDtLRYFOvIt3bcbHmWmZlh
KV+8DIDSIHRcnfq9WchCzpgQQPeImb4M/EFqBRynQ4bVdFwcgzltkQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:52:31 2026 by rpki-client