Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a383a3a2f34382d3438203d3e20323733323330.roa
File:                     323830333a356535303a383a3a2f34382d3438203d3e20323733323330.roa (raw, json)
Hash identifier:          VNq/zlPBrBcDKUwY1lOXUMbM311GojwNmWvIf/+fn3o=
Subject key identifier:   22:F9:A6:81:C9:76:AC:38:0F:02:2B:AD:0E:A6:50:8B:BB:09:00:44
Certificate issuer:       /CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
Certificate serial:       6A427AE949A394FE7F3147F2B8669B78043B7B11
Authority key identifier: 78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a383a3a2f34382d3438203d3e20323733323330.roa
Signing time:             Sun 06 Jul 2025 17:10:02 +0000
ROA not before:           Sun 06 Jul 2025 17:05:02 +0000
ROA not after:            Sun 05 Jul 2026 17:10:02 +0000
asID:                     273230
IP address blocks:        2803:5e50:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 03:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:42:7a:e9:49:a3:94:fe:7f:31:47:f2:b8:66:9b:78:04:3b:7b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C225D00D46B39A245DF2CF7056AF6621634BFF
        Validity
            Not Before: Jul  6 17:05:02 2025 GMT
            Not After : Jul  5 17:10:02 2026 GMT
        Subject: CN=22F9A681C976AC380F022BAD0EA6508BBB090044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:50:9e:9f:d1:9b:73:56:02:cc:28:2c:7f:
                    aa:7f:86:86:6f:f0:09:43:0f:05:cb:79:86:d0:e0:
                    2d:c0:a6:48:c9:34:cc:03:10:ad:f3:0f:c7:63:2c:
                    da:4d:d2:ab:11:ab:b5:a2:e7:98:64:0b:79:d2:9d:
                    cb:94:ac:6f:e6:dd:a3:6b:7a:7b:e0:81:26:d2:44:
                    bb:05:39:b7:0f:50:03:bf:1f:59:6f:d1:c8:81:16:
                    fa:ba:c7:94:e1:23:af:40:45:c7:3b:6e:ec:69:16:
                    34:2c:3f:33:b1:29:47:4e:2f:f3:a5:ba:fd:57:43:
                    cc:3a:7a:65:ad:93:bc:ef:d3:98:75:a1:b9:91:f3:
                    97:fd:dc:1e:e4:f1:3f:7d:2c:53:af:25:5b:a5:aa:
                    62:30:f9:37:50:ba:d3:fd:3e:8b:0e:1f:32:38:10:
                    58:65:99:78:c2:9e:6c:e9:6e:db:78:20:85:4a:b5:
                    47:97:3f:f8:44:4c:96:c7:1b:7c:69:ce:9c:d6:0a:
                    89:a2:31:cc:9e:ef:08:a5:ad:ce:22:04:e3:6e:be:
                    67:b4:a5:af:85:f4:d1:bb:40:85:2f:6d:4c:40:8b:
                    00:a6:c2:1d:97:0d:c9:aa:9d:d4:84:e1:af:d2:53:
                    ea:25:35:d9:32:3a:79:c8:19:9b:32:60:5e:61:0f:
                    b0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F9:A6:81:C9:76:AC:38:0F:02:2B:AD:0E:A6:50:8B:BB:09:00:44
            X509v3 Authority Key Identifier:
                keyid:78:C2:25:D0:0D:46:B3:9A:24:5D:F2:CF:70:56:AF:66:21:63:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78C225D00D46B39A245DF2CF7056AF6621634BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8D533D28B63E48004D9D77D71C1D6AC61E414F4CF0EA39D36A5DB8184E1FF3B/0/323830333a356535303a383a3a2f34382d3438203d3e20323733323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e50:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:d2:6e:eb:f3:3e:82:bc:f3:1d:7a:b1:5a:48:29:76:e3:d2:
         28:d8:30:60:ba:53:14:05:71:29:5f:67:d8:9d:97:3e:5d:81:
         59:82:10:51:73:a6:77:65:38:5d:d0:28:9c:39:9d:a9:e7:f1:
         76:d7:02:fb:22:56:3f:ea:3b:15:71:f9:00:96:03:4e:e8:16:
         e2:0f:5e:4c:8d:e8:91:2c:90:78:28:36:97:da:4d:16:9a:d5:
         97:14:22:b3:08:7a:a4:17:27:ca:b9:bf:5c:65:48:44:61:96:
         8a:9c:00:56:65:e3:69:5f:d8:90:3a:76:e1:1d:a6:3b:97:ff:
         49:6b:3b:26:f5:94:e0:d3:9a:0a:b7:f9:80:fb:61:e4:f7:f6:
         39:4c:1c:87:cb:47:a7:04:cb:d3:a7:6a:31:a4:0e:0b:d0:32:
         1d:d1:a4:90:2b:a4:f2:68:f6:4d:d3:20:1c:a8:74:04:d6:41:
         dc:00:88:e3:4c:67:48:81:ab:a5:61:58:7d:09:8f:5f:b2:06:
         eb:23:18:33:a3:62:b0:c1:8d:98:a3:a5:3c:96:49:cf:0c:02:
         a8:3f:41:67:75:59:f1:6f:71:06:1a:06:1d:0f:86:a4:11:d8:
         03:2b:39:7a:8c:a4:4a:80:55:75:c1:33:9e:5e:f0:5d:81:8b:
         f2:8b:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:29:40 2025 by rpki-client