Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a31313a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a31313a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          uTRyMJ/JIj0apcdxA++Gg4/Z/vs0INkAeFOUAMGHotY=
Subject key identifier:   D1:05:1F:0D:02:12:0F:48:C9:06:BD:66:3D:B8:0F:37:9D:C5:30:D6
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       4AA4FC519C5EAE7BE17939388AAF3C5941ACF9B7
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a31313a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Wed 29 Jul 2026 18:19:11 +0000
ROA not before:           Wed 29 Jul 2026 18:14:11 +0000
ROA not after:            Wed 28 Jul 2027 18:19:11 +0000
asID:                     273230
IP address blocks:        2803:5e50:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a4:fc:51:9c:5e:ae:7b:e1:79:39:38:8a:af:3c:59:41:ac:f9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Jul 29 18:14:11 2026 GMT
            Not After : Jul 28 18:19:11 2027 GMT
        Subject: CN=D1051F0D02120F48C906BD663DB80F379DC530D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:51:a0:8d:39:08:f3:73:78:6b:65:69:f9:
                    a4:68:de:1b:43:06:4c:66:47:b6:26:9d:87:a0:bc:
                    00:83:b3:e7:b0:5f:ff:3e:94:43:3c:65:9c:0e:4f:
                    df:93:03:c5:0c:5b:e9:a8:82:f4:6e:e0:61:6a:f6:
                    34:ef:30:2a:a4:f5:ce:f8:d5:a9:a7:62:d5:d7:8f:
                    d2:0a:95:94:6c:88:64:f1:15:43:dc:6d:f6:cb:25:
                    f8:c8:32:58:65:fb:68:02:14:82:ff:17:5a:02:03:
                    90:40:70:54:12:53:0f:c3:50:61:e5:07:9b:c8:0f:
                    ee:df:ca:fc:3b:55:fd:2a:31:5a:8b:2d:49:90:64:
                    96:a9:1c:2e:aa:eb:f5:1e:9b:86:bb:a2:d6:ce:da:
                    4a:89:10:43:e2:82:8d:3c:20:f5:fb:04:d6:41:fa:
                    13:9c:21:58:13:3d:2d:3d:3f:c4:49:ca:b9:0b:48:
                    e3:a0:5e:4a:32:9c:a7:05:a9:2a:6f:84:5c:be:c6:
                    80:8c:52:9f:ed:35:ce:fc:70:d4:b9:82:ae:51:bd:
                    c2:7c:df:ff:53:f4:6f:b0:ae:4e:eb:7c:34:02:a8:
                    5b:30:0b:ef:a1:d0:6a:f2:4e:dc:06:c7:68:fa:4e:
                    90:78:e4:bd:85:59:e4:ad:26:24:d3:9a:bc:92:6d:
                    c5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:05:1F:0D:02:12:0F:48:C9:06:BD:66:3D:B8:0F:37:9D:C5:30:D6
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a31313a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:fd:a5:ea:48:90:b4:fe:73:8c:97:b2:9c:cd:d0:61:f2:72:
         c2:66:38:03:81:fe:a8:3a:67:33:54:90:f2:9a:cd:77:2f:47:
         6e:a5:b0:02:dd:a7:78:a7:16:0f:d7:3f:32:97:df:27:87:b7:
         7d:ad:e9:ca:29:eb:62:ca:77:8b:64:f2:d6:5c:9f:f3:fb:1d:
         b5:15:89:7f:d7:01:bd:7d:73:1a:f5:2c:0f:03:e8:2a:75:fb:
         bb:6c:0b:d4:50:93:be:70:06:b6:f5:11:58:6a:31:ec:5f:4f:
         6d:a6:d2:65:6f:dd:00:ef:7c:51:1c:99:bb:69:eb:59:61:a2:
         f5:50:b7:28:ec:d2:60:10:3b:c2:d8:af:05:ef:0b:f7:9d:3d:
         b0:02:04:16:7a:af:cb:c0:e5:55:db:11:81:cf:f5:a1:e0:59:
         fa:ab:ae:43:fc:bc:3b:66:de:73:9b:79:9e:6e:e4:4e:6b:4b:
         eb:ab:67:9b:71:08:86:d1:a7:eb:28:0c:60:81:b5:36:91:9e:
         37:76:7a:e4:64:e8:0f:e1:bd:53:cf:91:b5:db:83:e3:22:2e:
         64:14:06:97:f1:2a:52:f2:26:3d:92:38:92:80:a9:8c:24:85:
         6c:8e:fa:51:8f:a5:85:59:d4:7e:5e:da:28:e6:2c:44:db:07:
         7c:6e:54:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:26:13 2026 by rpki-client