Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a33303a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a33303a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          AobXhXIxR2P6UEKgdfS0DpzJhHDx0mdmqOQ3gIpeI1w=
Subject key identifier:   69:CE:E9:AE:55:97:18:7C:BC:E3:66:62:AC:C0:40:A1:6D:A6:E3:C8
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       2D276F0911DB8772352CC6ED676B3EBD41E66624
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a33303a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Sat 12 Jul 2025 13:15:00 +0000
ROA not before:           Sat 12 Jul 2025 13:10:00 +0000
ROA not after:            Sat 11 Jul 2026 13:15:00 +0000
asID:                     273230
IP address blocks:        2803:5e50:30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 03:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:27:6f:09:11:db:87:72:35:2c:c6:ed:67:6b:3e:bd:41:e6:66:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Jul 12 13:10:00 2025 GMT
            Not After : Jul 11 13:15:00 2026 GMT
        Subject: CN=69CEE9AE5597187CBCE36662ACC040A16DA6E3C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:09:01:e1:5c:44:e4:fc:1b:50:37:2a:44:
                    94:90:93:ad:41:30:a3:95:13:f1:6b:25:ae:2a:30:
                    d5:77:d5:62:08:97:25:cb:d9:6d:da:b4:88:1d:6f:
                    fd:ab:e9:c7:9a:5b:27:19:50:62:22:8c:46:62:77:
                    58:bf:e3:71:16:c8:ac:25:29:ea:a4:19:df:c2:6f:
                    de:4f:d5:67:9f:01:33:0b:c5:f6:80:32:ae:f8:77:
                    08:09:5f:07:6a:75:df:aa:77:1b:c5:83:1f:77:aa:
                    cd:7f:d6:1a:00:c3:b6:0d:3f:f4:20:d4:4a:a8:c9:
                    e9:9c:96:df:5f:1b:63:4d:04:5f:9d:4a:86:b4:97:
                    04:cb:46:fd:9f:a1:ce:21:2c:43:a9:a7:c6:cf:5a:
                    66:20:33:53:3d:a0:2e:41:7e:d1:64:21:4b:93:8f:
                    d3:2f:fe:1b:7a:ab:c5:04:0e:67:b2:cc:24:20:a6:
                    62:c4:8d:16:82:22:0a:9a:4d:63:d4:ad:1f:53:97:
                    98:7b:93:0b:a8:84:fd:ff:df:a7:bd:e1:8b:32:14:
                    03:d7:f4:ca:bc:67:de:51:b6:67:be:49:61:c2:83:
                    3f:72:ff:10:97:07:4d:43:97:30:5c:fd:92:96:f8:
                    0f:89:72:7b:ed:45:06:c9:db:45:e3:0d:24:10:3d:
                    b6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CE:E9:AE:55:97:18:7C:BC:E3:66:62:AC:C0:40:A1:6D:A6:E3:C8
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a33303a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:ca:b2:ea:88:40:f8:75:de:80:ce:e5:31:32:ed:83:70:9e:
         6a:06:b9:df:a8:90:95:2b:e6:76:84:2c:5d:e2:f8:f9:9c:86:
         cd:73:37:21:ff:f2:c3:52:e3:ea:a2:05:47:6b:77:ba:3d:8f:
         cf:3b:37:60:de:0e:6d:cd:4f:17:6d:2d:3a:1d:b7:28:d9:05:
         71:60:7b:18:ec:11:73:76:6f:1d:c5:7f:d4:8d:cc:5e:8b:ec:
         20:ad:38:85:b3:45:71:7e:d8:3f:09:3d:6e:88:2b:d2:f0:0d:
         0a:84:9a:f8:f4:76:92:84:6d:f8:23:39:6a:b2:a7:75:cd:88:
         85:74:e6:7f:f3:3d:99:4b:bd:ae:c1:ba:f5:22:3a:87:44:1d:
         b5:c6:a3:86:2e:42:7c:cc:ad:ff:23:eb:7c:ec:ca:1a:43:d3:
         ff:b9:39:c3:8c:12:7c:87:7d:be:f7:62:e4:54:cb:f7:b9:c8:
         cc:b3:80:52:f5:dc:1e:fc:41:89:ac:4f:26:d4:71:7a:d9:9e:
         9b:e4:4e:28:40:8b:b0:29:5b:e5:37:6a:28:fc:54:a5:e6:4b:
         1d:b4:d8:fa:ba:1d:4b:8a:01:7d:d1:ff:e9:15:ba:30:17:6a:
         50:e5:74:26:4a:4a:9a:df:03:c1:69:ad:70:f6:2e:f0:79:58:
         00:2a:8d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:29:41 2025 by rpki-client