Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a3a2f33322d3332203d3e20323733323330.roa
File:                     323830333a356535303a3a2f33322d3332203d3e20323733323330.roa (raw, json)
Hash identifier:          ENLIytpnqAV3KHkYrVxbD8CNIB07hW+WwHhxw8T1Q48=
Subject key identifier:   9C:6B:4B:54:40:E8:2D:29:05:2C:EC:D3:AB:49:F8:A7:C1:FE:E6:8E
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       7C4B06DCBD2A35D6752D639CED1407A64B42A9E8
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a3a2f33322d3332203d3e20323733323330.roa
Signing time:             Sun 07 Jun 2026 14:46:56 +0000
ROA not before:           Sun 07 Jun 2026 14:41:56 +0000
ROA not after:            Sun 06 Jun 2027 14:46:56 +0000
asID:                     273230
IP address blocks:        2803:5e50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4b:06:dc:bd:2a:35:d6:75:2d:63:9c:ed:14:07:a6:4b:42:a9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Jun  7 14:41:56 2026 GMT
            Not After : Jun  6 14:46:56 2027 GMT
        Subject: CN=9C6B4B5440E82D29052CECD3AB49F8A7C1FEE68E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:fd:f9:05:b7:eb:aa:ac:ce:7f:26:e0:5b:
                    48:8d:8f:70:5a:58:33:a1:48:fe:6d:d9:45:3c:8a:
                    30:17:cb:8f:1f:cc:a0:4e:31:70:72:18:a2:70:8f:
                    09:95:10:19:36:be:91:5a:5d:4d:7d:b0:bc:23:12:
                    92:c4:fc:ae:d5:7d:56:66:b4:77:b0:38:22:f6:d5:
                    da:e0:04:ef:25:b3:06:c6:2c:3a:a2:7c:10:07:7d:
                    d3:1e:2f:95:dd:f4:d7:85:a3:fc:39:89:07:c7:f9:
                    fc:5c:0e:b4:2a:f1:5b:03:af:6a:04:ad:55:a1:4b:
                    94:a5:0c:b9:a0:28:40:53:f7:95:7f:b4:13:7f:dc:
                    5d:b6:8f:3f:4f:76:c3:00:62:c4:68:8c:4d:0c:48:
                    bd:f7:37:92:63:a4:43:1b:86:38:f4:47:1f:6b:2f:
                    25:5e:c2:e8:c8:58:e2:e5:0d:47:1a:ea:d8:35:7d:
                    ff:71:94:cd:f4:e9:20:26:32:85:d7:7a:77:2b:02:
                    08:1c:96:3f:72:9e:ef:66:c1:b7:47:bd:b1:c6:2c:
                    fd:e7:14:65:67:36:f6:2e:7e:b6:8a:cb:74:9c:73:
                    83:33:70:04:42:73:e5:1e:52:ab:0e:45:93:e1:d6:
                    15:18:24:5a:48:61:19:13:10:22:e9:34:fc:90:da:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6B:4B:54:40:E8:2D:29:05:2C:EC:D3:AB:49:F8:A7:C1:FE:E6:8E
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a3a2f33322d3332203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:0f:42:e4:80:ed:b5:e6:3c:e4:79:80:63:c9:3a:25:c1:2b:
         90:32:04:c8:96:b1:44:ca:bc:6e:f2:a3:0f:bb:8e:4b:78:85:
         17:da:00:b6:59:73:7a:f8:0e:37:19:b6:02:2b:7a:f6:d5:2a:
         8c:f0:65:85:8d:ac:b7:b3:82:97:31:0b:a6:36:e5:6c:3a:f5:
         93:f8:d4:f1:45:30:3c:eb:09:9a:75:19:7d:60:6e:24:9c:96:
         11:7b:e8:72:25:14:b4:3e:cf:5b:6b:31:6f:54:2e:c1:67:59:
         a0:02:55:32:d0:99:50:a7:02:28:bb:f5:c6:f2:20:29:62:d3:
         44:94:51:6a:1a:cf:ff:8d:42:9a:ed:ad:63:6e:5c:4d:38:6f:
         2e:e5:46:1c:0f:a3:7d:63:90:e7:11:39:5c:ef:52:d5:a4:69:
         b0:d2:b7:d4:ba:62:84:84:a5:22:14:1e:e1:49:63:3a:60:05:
         36:47:7b:2a:bb:77:db:8f:56:d9:e8:a5:9d:8e:f9:dd:f2:75:
         38:83:a9:0d:27:36:a5:11:ba:9f:05:8b:31:9d:69:f2:fc:57:
         b3:59:8f:65:8e:93:ad:52:cb:ac:7c:a7:4b:e5:6a:ba:7b:36:
         44:e2:1f:d4:f7:df:65:73:b9:a0:aa:10:bb:3a:b2:d1:5d:c5:
         6e:34:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:32:37 2026 by rpki-client