Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a613a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a613a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          Na8dzUWEk8uNaZIyUkXCy+OOzVMXnR5hAEFFRm7zl2U=
Subject key identifier:   12:3D:10:C7:E3:AC:E9:0B:F1:8B:85:5A:78:F4:9B:A4:C8:99:A3:D2
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       5E0DED67F23669098316E5877089194AEF3DFCA0
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a613a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Wed 25 Feb 2026 13:20:02 +0000
ROA not before:           Wed 25 Feb 2026 13:15:02 +0000
ROA not after:            Wed 24 Feb 2027 13:20:02 +0000
asID:                     273230
IP address blocks:        2803:5e50:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0d:ed:67:f2:36:69:09:83:16:e5:87:70:89:19:4a:ef:3d:fc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Feb 25 13:15:02 2026 GMT
            Not After : Feb 24 13:20:02 2027 GMT
        Subject: CN=123D10C7E3ACE90BF18B855A78F49BA4C899A3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:7e:52:c8:0b:05:11:44:4f:a6:61:d7:d4:
                    d5:66:fc:b4:6f:12:45:43:d3:7b:3c:59:cf:21:54:
                    6f:18:f6:bb:bc:01:37:b5:84:73:17:6e:91:a7:64:
                    df:73:0b:1f:6f:53:cb:6e:fe:89:7f:57:6c:ba:58:
                    9a:10:a8:a4:22:66:31:b8:9b:e5:91:a3:aa:1f:0d:
                    bb:58:cb:fb:f2:fc:f2:f9:99:7b:49:09:0a:eb:65:
                    a8:46:9b:c2:b9:1e:74:16:de:76:0e:30:fc:5e:04:
                    5f:2f:0e:46:82:fa:67:94:af:96:da:7e:6c:4c:85:
                    ae:82:20:30:85:ab:79:26:87:c9:e6:1a:b1:3c:e8:
                    39:fe:9f:c0:db:ed:04:c2:c7:0a:99:cd:c4:4c:ec:
                    b4:a9:14:4d:a2:4e:57:16:b4:16:c9:5b:52:d4:54:
                    a6:6b:bd:87:64:95:2a:62:bc:5a:0c:4e:25:fb:f6:
                    b1:54:d1:d0:f2:36:b4:f1:c1:ae:b7:1c:da:fc:74:
                    4f:08:d2:af:9b:d1:2b:c1:02:16:2f:ef:59:7a:e2:
                    72:6c:34:68:bd:d6:ff:93:31:f9:e8:6c:0c:46:96:
                    4f:2c:20:bd:26:17:f3:8d:c2:0f:b9:df:f4:d9:51:
                    c5:a5:5a:73:37:46:82:8a:af:ba:13:2d:ea:f7:67:
                    d5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3D:10:C7:E3:AC:E9:0B:F1:8B:85:5A:78:F4:9B:A4:C8:99:A3:D2
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a613a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:89:d4:1e:d3:bc:1f:6c:e7:f7:bc:d4:a8:51:71:5d:bb:ba:
         ed:0a:ef:8a:0d:be:e8:83:49:fb:f0:4b:11:30:b4:82:23:34:
         88:b9:48:01:f0:4b:f5:03:43:8b:77:b9:da:ef:4e:02:f9:a1:
         5e:c4:9a:0a:e8:e9:a7:c2:79:46:29:84:f9:c0:fe:df:5d:dd:
         6f:03:c2:ff:a6:c0:2f:ba:1b:6b:2f:20:71:24:b7:5f:de:a4:
         05:0c:3f:53:c3:d4:60:7d:77:8b:d0:21:f7:b8:24:11:f9:17:
         3b:a6:16:17:55:69:df:53:91:31:ed:2a:06:63:20:83:bf:68:
         03:2f:c6:1e:ec:7e:e3:49:a4:41:c8:d5:db:a3:73:4a:54:18:
         a0:61:8d:a2:36:6d:b7:67:a6:cc:35:9d:02:ac:9d:ed:fe:fe:
         c3:a1:38:7f:c4:19:b3:0c:4f:b0:bf:6e:37:56:fc:44:b3:82:
         ee:36:18:92:a7:29:0b:e9:2b:83:1e:c6:2d:96:5b:05:dd:10:
         56:49:0e:39:8d:94:4d:93:95:3e:41:96:ea:de:7f:5d:a3:84:
         d1:8f:42:0e:70:fc:9a:02:66:a8:05:42:cd:68:68:20:0e:53:
         9b:30:97:43:53:26:3a:d7:64:ca:cf:2b:42:aa:b6:a6:e9:ca:
         04:6a:f4:c9
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUXg3tZ/I2aQmDFuWHcIkZSu89/KAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhDMjI1RDAwRDQ2QjM5QTI0NURGMkNGNzA1NkFGNjYy
MTYzNEJGRjAeFw0yNjAyMjUxMzE1MDJaFw0yNzAyMjQxMzIwMDJaMDMxMTAvBgNV
BAMTKDEyM0QxMEM3RTNBQ0U5MEJGMThCODU1QTc4RjQ5QkE0Qzg5OUEzRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDH5SyAsFEURPpmHX1NVm/LRv
EkVD03s8Wc8hVG8Y9ru8ATe1hHMXbpGnZN9zCx9vU8tu/ol/V2y6WJoQqKQiZjG4
m+WRo6ofDbtYy/vy/PL5mXtJCQrrZahGm8K5HnQW3nYOMPxeBF8vDkaC+meUr5ba
fmxMha6CIDCFq3kmh8nmGrE86Dn+n8Db7QTCxwqZzcRM7LSpFE2iTlcWtBbJW1LU
VKZrvYdklSpivFoMTiX79rFU0dDyNrTxwa63HNr8dE8I0q+b0SvBAhYv71l64nJs
NGi91v+TMfnobAxGlk8sIL0mF/ONwg+53/TZUcWlWnM3RoKKr7oTLer3Z9U/AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUEj0Qx+Os6Qvxi4VaePSbpMiZo9IwHwYDVR0j
BBgwFoAUeMIl0A1Gs5okXfLPcFavZiFjS/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOEQ1MzNEMjhCNjNFNDgwMDREOUQ3N0Q3MUMxRDZBQzYx
RTQxNEY0Q0YwRUEzOUQzNkE1REI4MTg0RTFGRjNCLzAvNzhDMjI1RDAwRDQ2QjM5
QTI0NURGMkNGNzA1NkFGNjYyMTYzNEJGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OEMyMjVEMDBENDZCMzlBMjQ1
REYyQ0Y3MDU2QUY2NjIxNjM0QkZGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDhENTMzRDI4QjYzRTQ4MDA0RDlENzdENzFDMUQ2QUM2MUU0MTRGNENG
MEVBMzlEMzZBNURCODE4NEUxRkYzQi8wLzMyMzgzMDMzM2EzNTY1MzUzMDNhNjEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzMjMzMzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A15QAAowDQYJKoZIhvcNAQELBQADggEBAAeJ1B7TvB9s5/e81KhRcV27uu0K74oN
vuiDSfvwSxEwtIIjNIi5SAHwS/UDQ4t3udrvTgL5oV7Emgro6afCeUYphPnA/t9d
3W8Dwv+mwC+6G2svIHEkt1/epAUMP1PD1GB9d4vQIfe4JBH5FzumFhdVad9TkTHt
KgZjIIO/aAMvxh7sfuNJpEHI1dujc0pUGKBhjaI2bbdnpsw1nQKsne3+/sOhOH/E
GbMMT7C/bjdW/ESzgu42GJKnKQvpK4Mexi2WWwXdEFZJDjmNlE2TlT5Bluref12j
hNGPQg5w/JoCZqgFQs1oaCAOU5swl0NTJjrXZMrPK0KqtqbpygRq9Mk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:41:11 2026 by rpki-client