Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a343a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a343a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          ZmxtMysBidphe98WAEbaQGdhJR3YdfAntJMr0ooCRPY=
Subject key identifier:   BC:8D:68:18:80:B3:B2:80:78:33:C6:63:11:BB:33:6A:47:64:11:28
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       424CE79650D34F44065B77A0C785BD06334560B0
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a343a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Sun 07 Jun 2026 17:46:58 +0000
ROA not before:           Sun 07 Jun 2026 17:41:58 +0000
ROA not after:            Sun 06 Jun 2027 17:46:58 +0000
asID:                     273230
IP address blocks:        2803:5e50:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4c:e7:96:50:d3:4f:44:06:5b:77:a0:c7:85:bd:06:33:45:60:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Jun  7 17:41:58 2026 GMT
            Not After : Jun  6 17:46:58 2027 GMT
        Subject: CN=BC8D681880B3B2807833C66311BB336A47641128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:de:ca:18:18:01:bb:86:e8:2a:75:9a:e8:74:
                    d4:84:e2:11:10:6c:6c:b5:51:c1:6f:b6:e8:6c:49:
                    11:f3:ec:a5:dd:4d:4f:ac:6f:45:55:02:73:a2:b2:
                    53:fe:73:4c:90:a4:21:34:0c:bf:7a:6e:41:e6:12:
                    d3:07:69:0f:ee:fc:ff:99:a1:c7:b7:6b:89:76:87:
                    b4:6d:f5:8d:a0:5f:a0:e7:b3:72:e0:15:16:b1:81:
                    c1:4b:1b:d2:42:28:b8:ee:9f:28:6c:23:c8:d4:0a:
                    32:ce:19:34:ad:62:fa:52:37:02:4b:6d:5f:2d:41:
                    61:41:8e:f6:56:86:63:4a:3c:55:df:3f:7c:40:50:
                    47:4d:e9:15:57:f9:94:8c:e4:ae:e1:42:e2:29:2f:
                    60:66:33:98:1a:3a:69:b1:ef:b9:67:44:ae:7e:af:
                    97:cf:bd:c9:fa:fd:ce:22:bf:51:43:47:3a:b3:c5:
                    8f:f8:bc:d2:d2:1a:9e:6f:d2:30:84:f2:92:ef:8a:
                    1e:41:f6:f3:4b:dc:90:29:36:41:5b:5b:2d:6f:0c:
                    cd:c3:46:e1:d0:27:7c:f9:ff:6c:f9:24:64:4b:f5:
                    d4:12:07:b3:f4:d2:2c:50:5c:0e:17:ae:61:27:05:
                    0d:ec:d6:25:af:45:05:c2:54:1c:3a:74:90:44:7a:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8D:68:18:80:B3:B2:80:78:33:C6:63:11:BB:33:6A:47:64:11:28
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a343a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:56:90:93:63:99:41:ab:34:2c:8a:49:3f:ce:82:94:60:0d:
         f8:25:9e:63:d1:29:42:8f:24:9a:cf:73:d8:aa:49:62:42:97:
         9b:43:ea:13:cf:ba:52:7e:33:b4:5d:d8:1c:3a:9d:96:c4:c5:
         0a:ad:33:d3:0a:18:35:e4:58:84:e2:da:66:8d:3c:24:7a:38:
         98:d5:36:54:b2:d2:74:09:bf:31:36:9a:5e:e2:89:8e:0f:a8:
         1b:91:d4:fe:f4:1f:d7:1c:43:45:c2:42:04:b8:6a:17:9f:5c:
         a2:29:00:7b:91:99:44:7a:1c:fc:d1:77:f7:28:4f:ab:6e:f6:
         1f:b8:70:a3:fc:67:88:fe:8e:cc:df:52:c0:c6:15:36:45:75:
         f6:4b:59:8a:ec:28:6a:f6:16:64:51:80:f6:c8:54:6a:db:37:
         54:0d:69:30:ff:5e:57:8e:32:07:8f:fa:3e:6c:3b:aa:02:5e:
         04:26:93:bb:1e:fd:36:a1:66:b6:b3:40:56:6a:fd:cf:8d:78:
         0d:81:cd:aa:ee:85:fd:8c:7b:8a:8b:26:1f:32:69:f2:a8:33:
         1d:14:1c:d0:5c:9f:b9:d8:60:61:a8:29:00:d4:34:16:67:d8:
         8f:25:2e:55:64:aa:bb:7a:e7:0b:a6:05:77:8e:70:6f:12:dc:
         0e:ec:a4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:52:47 2026 by rpki-client