Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a373a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a373a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          YSd54Kuk0pl59WiNcpYuDBbDyof2+GZqkgIzBz61Ljo=
Subject key identifier:   EE:71:4A:AE:0F:69:5A:0B:11:6B:D6:E8:10:F2:49:B4:C1:70:DF:62
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       2983F030B4DF02F2B8CEEC4385E093DB21962415
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a373a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Sun 06 Jul 2025 17:10:02 +0000
ROA not before:           Sun 06 Jul 2025 17:05:02 +0000
ROA not after:            Sun 05 Jul 2026 17:10:02 +0000
asID:                     273230
IP address blocks:        2803:5e50:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 03:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:83:f0:30:b4:df:02:f2:b8:ce:ec:43:85:e0:93:db:21:96:24:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Jul  6 17:05:02 2025 GMT
            Not After : Jul  5 17:10:02 2026 GMT
        Subject: CN=EE714AAE0F695A0B116BD6E810F249B4C170DF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:39:aa:12:9a:cc:0f:38:99:dc:df:2d:53:
                    bb:dc:51:76:bb:19:28:0d:bd:05:76:de:36:e8:2b:
                    6a:c5:ca:85:c6:dc:e0:41:01:83:ea:65:d5:30:25:
                    a2:1e:9a:a0:81:c0:e1:9a:4d:94:f6:c1:bd:ca:8d:
                    21:8f:dc:51:9a:85:68:7a:fb:e1:a4:83:42:4a:97:
                    48:35:4a:2b:ff:10:c2:90:01:1f:02:80:a6:10:c1:
                    13:85:70:63:92:cd:4d:e9:f1:42:3f:51:d6:d5:3e:
                    93:25:69:97:ec:54:ab:d2:d2:a7:16:bf:71:77:e6:
                    fb:15:47:3f:5c:7d:7b:46:1b:f6:04:ad:22:62:a0:
                    09:9c:dd:1c:ee:39:02:c0:93:f7:33:58:21:99:51:
                    7f:1e:17:1a:ce:ab:ca:43:51:8d:4c:56:d1:b8:4b:
                    b3:c3:75:cf:da:25:70:e5:bf:c8:2b:e4:0c:e7:1b:
                    ae:bd:a9:b0:b8:40:30:2d:cd:85:78:29:14:34:42:
                    af:5d:fd:2b:0d:75:aa:30:64:fa:34:a8:e9:aa:c0:
                    4f:fd:be:bc:d5:da:02:4b:0f:98:6e:fc:3a:39:df:
                    76:f2:9c:14:a3:83:68:43:b7:ca:5b:2c:4a:bc:e9:
                    89:f1:e0:f8:1b:a1:86:d5:00:d9:08:7c:28:f9:28:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:71:4A:AE:0F:69:5A:0B:11:6B:D6:E8:10:F2:49:B4:C1:70:DF:62
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a373a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:14:b3:5b:53:1f:5d:60:f5:43:72:90:5b:b5:f5:22:38:8c:
         12:9a:01:14:78:41:c1:1c:73:cf:8f:05:5c:fd:cc:8f:d0:87:
         50:8a:9b:7f:04:56:33:b3:d8:91:dd:32:48:d8:85:e9:26:8d:
         0c:0e:ed:d0:7a:4d:f6:eb:a0:f1:98:32:f8:32:63:b8:78:c7:
         c9:9e:71:fa:44:5a:f7:c9:f0:11:25:22:f1:06:04:24:36:e0:
         5f:71:a6:42:89:a0:d1:a2:e4:aa:36:63:99:23:2f:89:9a:8d:
         56:e5:fb:71:5e:45:c4:1d:a3:3b:fc:8e:95:67:f3:85:c1:ce:
         dc:84:a2:e6:19:f2:1e:28:9d:65:f8:86:90:1b:08:04:e0:7b:
         05:6e:a4:78:e9:47:f3:b1:47:61:37:eb:99:bf:64:c9:3a:73:
         c5:9f:6a:93:f2:21:02:d1:c1:1a:cb:aa:53:0b:20:25:d4:f7:
         db:19:7f:15:b4:b5:55:74:92:58:b9:0f:6d:6e:df:02:0d:eb:
         fb:85:42:6b:89:7e:29:d0:3c:59:75:ca:ad:6a:90:6a:7c:6f:
         bc:d4:60:34:a1:c4:bd:0c:b7:c6:38:da:0f:1f:79:25:2e:72:
         67:bb:e7:a3:3b:e8:7d:83:bf:09:61:13:62:1a:c1:e7:1b:78:
         d4:cb:18:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:29:37 2025 by rpki-client