Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a373a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a373a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          d6KKpGWG6IDnB29X5jQrWDQPeciH8qeU+jI95l5MbTA=
Subject key identifier:   21:E9:11:80:04:19:94:EC:41:40:37:99:D9:BD:72:F9:2D:0C:8B:45
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       216F2C2C067941A2DD654F3949347E96B1C08062
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a373a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Sun 07 Jun 2026 17:46:59 +0000
ROA not before:           Sun 07 Jun 2026 17:41:59 +0000
ROA not after:            Sun 06 Jun 2027 17:46:59 +0000
asID:                     273230
IP address blocks:        2803:5e50:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6f:2c:2c:06:79:41:a2:dd:65:4f:39:49:34:7e:96:b1:c0:80:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Jun  7 17:41:59 2026 GMT
            Not After : Jun  6 17:46:59 2027 GMT
        Subject: CN=21E91180041994EC41403799D9BD72F92D0C8B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:50:c8:0e:5e:2a:a9:de:b6:66:ff:04:15:
                    b8:08:e3:18:8a:1e:88:10:c2:d1:a6:48:10:6e:69:
                    ec:4d:ab:b5:f5:75:c7:d0:58:57:d7:31:70:99:e7:
                    3c:ab:b7:4d:5f:0d:b3:6a:36:d6:d4:3d:a9:12:4f:
                    39:81:1f:4f:05:07:66:19:ea:ac:78:df:94:33:6a:
                    e2:61:fc:a6:d5:b9:3d:58:1b:4a:30:a9:c5:af:19:
                    b5:45:82:c0:96:80:b1:94:6f:c9:6a:43:45:6b:f8:
                    e4:bc:bc:0d:08:5e:ed:92:54:97:29:46:ac:56:07:
                    5c:82:79:a9:c6:d3:98:0d:87:df:43:26:9d:25:95:
                    c5:2a:d1:3c:cd:53:4a:3b:32:65:f6:09:e2:45:1d:
                    08:f7:de:73:d4:0b:5a:d0:01:96:33:0c:aa:d2:09:
                    f5:2d:e9:f4:cc:3b:30:92:6c:7b:b4:20:47:98:cc:
                    5c:ba:c9:38:6c:c1:31:a7:cd:bb:e6:01:dd:c0:89:
                    4a:35:d5:d7:ac:20:e3:b8:0a:3a:d4:cc:75:d9:23:
                    4e:e7:10:02:09:5e:b0:dd:49:40:f7:fd:22:be:7c:
                    c3:eb:4f:7e:b8:d0:c4:b1:73:06:6f:9d:ec:ed:48:
                    4c:21:fd:9f:58:c9:ac:7a:d2:34:52:4c:9a:af:15:
                    4b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E9:11:80:04:19:94:EC:41:40:37:99:D9:BD:72:F9:2D:0C:8B:45
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a373a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:26:33:02:d0:59:f3:8f:4f:6a:86:0c:09:3f:c5:c4:cc:3d:
         64:10:b6:d4:c8:7d:47:a7:0e:fc:00:eb:49:34:8a:14:fd:88:
         14:59:cc:ba:a8:0c:15:92:61:5d:72:e0:03:8a:96:9a:94:24:
         f3:d9:17:cf:af:3a:3b:d3:ee:99:f8:2c:7d:ad:1e:97:9d:b2:
         dd:ef:54:09:c5:7c:06:05:74:a9:08:6e:f7:2a:9a:b5:24:c5:
         57:39:7d:89:af:ff:ee:07:a8:56:e6:bc:16:87:ca:45:1f:82:
         91:30:30:14:13:34:ec:f3:d0:d7:97:0b:92:e4:19:1d:b9:99:
         1f:24:3c:4e:46:dc:8f:1f:83:e6:60:94:2e:9b:e6:e2:91:f2:
         ce:c0:00:d7:e4:8f:8b:4c:63:10:d4:15:d1:76:86:05:fb:54:
         79:3b:e0:75:92:23:14:8d:21:69:4c:a0:c9:77:7c:84:31:6b:
         74:dc:8d:1a:59:b9:f6:59:a6:a7:1e:ca:ff:3b:32:30:b9:3d:
         71:eb:26:fb:67:d6:ae:16:df:1a:9b:b8:91:a0:43:63:85:f2:
         26:3c:59:97:c7:4c:93:d0:2c:64:88:f0:d7:da:37:ea:29:23:
         41:be:98:1c:8b:fb:15:9a:8e:93:40:74:cc:62:ce:cf:01:5f:
         26:2f:68:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:28:49 2026 by rpki-client