Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a32303a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a32303a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          DQokchSq/OZdftMJBqnf+OtvbCIyL8IdvJE6RdX6mYU=
Subject key identifier:   86:2A:3F:29:10:96:21:A1:FB:DB:34:2E:A0:A1:DE:F2:93:C3:80:56
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       2D277AC9A5C5E9FB519B3C761CA9E1B232B7F15A
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a32303a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Wed 25 Feb 2026 13:20:00 +0000
ROA not before:           Wed 25 Feb 2026 13:15:00 +0000
ROA not after:            Wed 24 Feb 2027 13:20:00 +0000
asID:                     273230
IP address blocks:        2803:5e50:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:27:7a:c9:a5:c5:e9:fb:51:9b:3c:76:1c:a9:e1:b2:32:b7:f1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Feb 25 13:15:00 2026 GMT
            Not After : Feb 24 13:20:00 2027 GMT
        Subject: CN=862A3F29109621A1FBDB342EA0A1DEF293C38056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:7c:99:4c:dc:f4:15:b1:a2:d6:e4:60:4f:
                    dc:5c:0b:b4:4d:70:89:bb:20:0e:20:44:81:ee:07:
                    e7:c8:5c:2e:82:5f:05:c0:43:4b:49:22:e2:39:1d:
                    9b:d3:6b:44:ac:82:a8:35:dc:1a:ee:45:ba:6a:34:
                    18:9e:3d:6b:cb:1f:72:b8:3a:2d:2e:46:9c:2d:4e:
                    b4:8f:41:f8:a7:17:b8:a2:44:3d:a4:4b:38:99:42:
                    f2:07:4b:d7:27:04:bf:3b:2f:37:aa:24:8c:eb:5c:
                    aa:6f:b7:23:38:15:94:2b:92:c7:0d:6a:8b:08:93:
                    12:fb:ef:15:65:ac:13:95:95:87:21:b0:88:9c:25:
                    9c:e4:2d:52:89:e9:0e:97:b5:de:52:63:0d:de:67:
                    1d:c1:27:73:9d:f6:ab:36:60:a5:cd:f0:ca:b9:4f:
                    3b:85:6d:8e:b4:00:dc:0a:1a:03:11:4f:34:3b:e5:
                    6a:22:f0:97:40:38:1f:a8:1f:ec:a3:0b:e2:f3:6d:
                    4f:e6:56:40:2a:47:47:10:00:11:59:72:3d:a2:61:
                    38:65:e2:fb:63:8b:ac:8a:03:a0:e5:84:80:36:4f:
                    96:67:da:27:16:3c:3f:1c:32:17:2d:27:98:2f:8b:
                    5a:fc:1b:4f:a0:fc:e8:06:c6:5e:9d:e6:8b:ba:41:
                    86:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2A:3F:29:10:96:21:A1:FB:DB:34:2E:A0:A1:DE:F2:93:C3:80:56
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a32303a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:24:49:f1:f7:f1:64:aa:6b:d3:12:e7:07:e7:45:d9:7c:6d:
         fa:af:29:e2:dc:a3:63:f3:66:49:41:ea:0d:e2:1e:7a:1c:4f:
         2f:9e:de:3f:1f:12:c4:02:47:2e:1c:b0:d4:5c:51:94:94:51:
         71:c2:07:9e:0a:a2:2b:ea:5d:52:7f:e2:de:30:98:b0:e7:81:
         19:71:72:ff:d8:1b:ca:6f:22:35:81:4d:b0:49:a1:32:2c:d5:
         1f:de:bf:36:12:74:1d:18:dc:09:7e:f4:03:66:0f:0a:7b:54:
         c4:9c:fd:56:37:48:91:a6:e5:78:ca:21:ae:7e:8e:8c:b9:2a:
         1d:6d:77:c8:82:9f:5c:11:b6:25:64:1a:bd:12:30:98:7b:9f:
         32:1f:5b:04:f3:88:64:7d:b4:44:de:a7:e1:40:78:52:2e:41:
         cf:ae:d7:86:e9:eb:ed:96:5e:3e:88:6f:8f:b5:d5:2e:79:7a:
         08:da:30:bb:34:49:fc:25:25:69:43:e5:49:3a:f7:9c:fa:a7:
         3d:20:df:24:26:76:e0:f4:8a:af:b6:03:c8:24:50:ed:81:55:
         cd:fc:b3:57:0a:13:46:57:88:2d:1c:c7:49:84:c3:49:b1:a7:
         a2:3f:c4:a6:95:3c:6d:7f:a9:04:1f:b6:d6:e0:e9:41:20:51:
         e6:70:25:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:40:46 2026 by rpki-client