Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a393a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a393a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          qk3gnCsUb3lO+fpACn8/STTt6lE7D8FgN3NMWKOZRL4=
Subject key identifier:   3C:D3:06:EB:52:0F:FB:19:D2:45:D4:64:79:B6:14:77:A2:8A:DE:16
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       4D28E9AF86588E359E64B0403492D79A4E3CCA0D
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a393a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Sun 07 Jun 2026 17:46:59 +0000
ROA not before:           Sun 07 Jun 2026 17:41:59 +0000
ROA not after:            Sun 06 Jun 2027 17:46:59 +0000
asID:                     273230
IP address blocks:        2803:5e50:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:28:e9:af:86:58:8e:35:9e:64:b0:40:34:92:d7:9a:4e:3c:ca:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Jun  7 17:41:59 2026 GMT
            Not After : Jun  6 17:46:59 2027 GMT
        Subject: CN=3CD306EB520FFB19D245D46479B61477A28ADE16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:44:cd:9d:3a:9c:24:da:22:6b:d1:7f:2e:43:
                    e6:57:4c:0a:69:e5:70:4e:49:8e:f7:d3:80:8e:38:
                    20:b6:a1:45:ba:bc:af:7f:4a:1a:35:e9:e6:dc:8e:
                    f7:23:e1:6b:6f:ba:e4:a7:90:03:2b:a6:80:1f:89:
                    74:2d:f4:3e:c3:4b:bb:8a:c3:74:7b:12:7e:45:54:
                    65:e3:5c:35:d1:2c:11:a1:ad:5a:f1:9a:2f:e0:38:
                    19:ca:29:97:90:03:1f:45:42:bf:52:34:b6:a7:ec:
                    6b:8e:e2:bf:d4:77:a0:36:26:11:ed:ac:20:33:1b:
                    cf:7b:eb:2a:7d:e4:5f:6b:18:03:66:38:c4:8a:1b:
                    ef:fe:8f:14:b8:de:15:25:6b:4c:a3:54:29:77:39:
                    5d:e6:ba:5d:ec:a5:7c:f4:f6:52:89:37:dc:fc:d9:
                    d7:1e:2f:e9:59:76:55:f5:78:49:2b:c9:c5:48:32:
                    83:9d:7a:e7:7c:ed:79:bc:48:de:5d:e5:da:65:34:
                    4e:31:69:9a:64:27:4e:6b:a4:b9:ba:20:6a:8f:fb:
                    74:a3:50:91:85:92:33:fa:24:a4:46:d2:f1:da:09:
                    f0:be:97:b7:26:28:c4:59:52:75:38:d7:24:f1:dc:
                    a5:bb:2e:08:5f:47:48:d3:4f:94:cb:c0:2d:ea:c1:
                    39:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D3:06:EB:52:0F:FB:19:D2:45:D4:64:79:B6:14:77:A2:8A:DE:16
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a393a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:4e:02:a3:79:6f:67:7b:67:19:df:5e:1b:bf:89:4a:32:db:
         2f:0d:f8:ea:5d:35:2d:d8:93:99:84:a4:1b:39:69:db:59:33:
         c4:67:1a:51:11:50:14:32:59:13:9b:a5:20:de:10:bb:ad:ff:
         1c:3b:a6:31:ce:b6:d8:c4:93:74:5c:18:e2:78:ea:8e:c4:d2:
         6a:47:10:a9:6a:a2:3a:4d:85:b2:e2:ad:76:37:d7:94:7d:c5:
         bf:e8:78:a7:f9:cf:32:9e:a0:c9:ad:b3:2a:6f:13:ff:28:17:
         22:e8:0e:e9:a4:5e:a1:9d:8d:c4:f4:53:d7:90:53:7a:ca:02:
         8a:27:bd:db:49:24:b5:0a:25:ae:25:49:07:fb:f8:31:c7:cd:
         0e:b7:90:b7:0f:e0:cf:2b:63:3a:ba:d3:f0:ef:29:43:c7:28:
         36:e4:b1:ad:92:f8:2d:48:44:aa:c5:36:84:80:9c:b6:ef:ef:
         44:7d:80:e1:a1:43:c6:3b:b5:5e:8a:19:e6:7a:4f:3b:ad:75:
         d0:05:ca:85:dd:4f:df:10:6b:e0:7c:43:9f:87:f4:28:d6:f5:
         38:12:8d:c6:23:27:3e:21:e6:cb:c6:27:f4:c8:7c:ff:b9:44:
         51:e7:08:da:87:9c:06:77:22:e8:b7:ae:e1:bf:1f:cc:a0:b5:
         62:b3:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:14:03 2026 by rpki-client