Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a323a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a323a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          4WDjyStLOwdBaZEuBfkM4FJIRd+NGzIOiafrrMTLMKw=
Subject key identifier:   99:1E:62:64:97:6B:6E:CE:6B:16:9D:2F:2E:04:0B:65:A4:09:C9:80
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       16A2CCB362B768537C6D590B3309CD34A7AE3A5E
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a323a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Sun 07 Jun 2026 17:46:58 +0000
ROA not before:           Sun 07 Jun 2026 17:41:58 +0000
ROA not after:            Sun 06 Jun 2027 17:46:58 +0000
asID:                     273230
IP address blocks:        2803:5e50:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a2:cc:b3:62:b7:68:53:7c:6d:59:0b:33:09:cd:34:a7:ae:3a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Jun  7 17:41:58 2026 GMT
            Not After : Jun  6 17:46:58 2027 GMT
        Subject: CN=991E6264976B6ECE6B169D2F2E040B65A409C980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:41:ab:9c:b9:96:69:3c:ff:8c:ad:b6:c8:
                    22:85:a7:90:fd:37:f2:cb:55:14:1c:7b:ec:c4:59:
                    dd:26:34:92:ce:8f:d6:dd:ee:f6:33:f7:1c:60:33:
                    68:49:fd:11:93:eb:f8:9d:90:6e:9d:6d:0f:de:14:
                    34:21:8b:d2:9f:36:7f:ef:1d:b5:c9:bd:e6:b6:49:
                    53:4e:b4:e7:f4:e5:c0:4e:57:13:07:dc:51:95:3a:
                    1d:85:c7:0d:51:9c:dd:e9:55:58:63:97:7f:8e:4c:
                    75:07:5c:bc:12:d6:e7:2e:09:c1:2e:c9:c4:be:96:
                    09:44:04:55:bd:fd:7f:79:d5:28:73:b9:bd:26:dc:
                    65:0f:54:8a:df:17:07:c6:17:5e:d6:0e:cb:5e:9c:
                    7a:cd:77:c7:0e:2e:12:db:9b:21:bf:e2:a0:4d:98:
                    59:1a:aa:5c:19:0d:b6:b2:29:b0:e0:08:47:78:12:
                    24:1c:12:c6:04:e0:3d:bf:45:c1:51:2f:d7:b4:10:
                    0b:d6:a6:58:8d:ea:c6:f7:4e:39:33:20:67:31:14:
                    80:38:4b:ef:43:21:8b:c6:e0:72:ad:71:f4:0a:73:
                    59:4e:6b:4c:5d:bf:60:fd:b7:0e:8c:12:39:cf:b4:
                    52:f8:d2:be:b7:7b:9f:b2:1b:f5:eb:64:af:50:2a:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1E:62:64:97:6B:6E:CE:6B:16:9D:2F:2E:04:0B:65:A4:09:C9:80
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a323a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:ef:33:4e:00:6e:72:be:d1:04:aa:e7:04:05:6d:b1:c9:a5:
         80:d9:87:15:73:2a:ce:0a:ee:b2:f6:02:ec:f3:79:a5:3a:5c:
         cb:5c:34:b3:0b:20:dc:ef:ed:dd:70:c3:6a:4c:ef:11:1a:3d:
         a0:55:fc:ef:41:18:df:b6:35:37:61:90:dc:91:64:4d:80:12:
         3d:43:51:57:1e:62:3d:9d:33:cc:31:f1:9a:22:6b:eb:50:e9:
         ba:4d:da:44:71:2f:72:ba:76:6a:49:31:84:02:a2:9f:82:75:
         34:37:4b:cf:01:2f:4c:c7:cf:e0:8c:b7:80:09:a3:30:88:64:
         82:bd:f6:99:24:4b:5f:67:d8:f8:47:64:73:96:70:de:21:1e:
         af:0b:c9:35:d7:55:81:80:a2:44:29:c9:2f:82:0d:a3:96:29:
         b3:5f:00:33:39:6b:13:9d:4d:0a:cb:58:f9:4a:4c:fa:ea:21:
         a2:5e:b9:0c:8b:41:3d:eb:01:ab:07:58:7c:06:67:9d:89:ec:
         b2:c1:fd:e3:ad:cb:08:89:58:76:f1:1b:c9:b6:ab:7e:3a:03:
         5d:ec:ce:dc:7d:c2:97:30:4c:00:65:d8:4b:b0:8f:c0:51:93:
         9d:eb:4f:8e:62:b4:b1:eb:45:f9:a5:db:8a:5f:f5:56:a2:b4:
         c8:fa:77:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:52:20 2026 by rpki-client